Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/9ToytRNgEQW-LLHSZaQpgtKV8wo.roa
File:                     9ToytRNgEQW-LLHSZaQpgtKV8wo.roa (raw, json)
Hash identifier:          Lv4IqraSFMh6jfT3UbzT8dxxQPMtlHCHfDShXKLPALA=
Subject key identifier:   F5:3A:32:B5:13:60:11:05:BE:2C:B1:D2:65:A4:29:82:D2:95:F3:0A
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9ToytRNgEQW-LLHSZaQpgtKV8wo.roa
Signing time:             Thu 15 Sep 2022 02:39:55 +0000
ROA not before:           Thu 15 Sep 2022 02:39:55 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9311
IP address blocks:        210.200.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:39:55 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=F53A32B513601105BE2CB1D265A42982D295F30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:93:fc:3d:e6:b0:ef:eb:01:52:11:bb:a3:
                    13:60:df:08:7e:f8:72:c9:2f:b7:6a:02:e7:20:57:
                    5c:b9:0a:74:88:92:e1:12:1b:f6:de:28:79:92:9c:
                    f6:0f:ca:9c:7d:1e:6d:3f:e2:31:2e:2d:78:67:a5:
                    3c:1c:c4:c5:d4:ee:5c:70:1c:fb:66:91:63:70:2c:
                    a4:7a:55:38:b4:16:71:d1:6b:ee:0e:0d:db:f2:a1:
                    15:a9:d7:09:cc:e9:8c:e5:24:64:e5:11:41:37:9f:
                    c8:a0:25:a9:32:a0:1d:ad:e3:ee:69:ba:6e:2b:c1:
                    a8:04:98:c9:c1:0d:5e:15:99:a5:f6:64:e2:a0:1c:
                    19:f3:87:37:05:d6:29:35:e7:b9:20:6a:4e:cf:51:
                    58:70:a8:e3:58:62:e1:52:1d:0a:53:7a:96:e0:eb:
                    57:97:23:f8:fe:aa:4e:26:2a:2d:d5:a8:46:59:cc:
                    d9:74:12:5b:dc:71:a5:4e:3a:dc:81:d8:d8:7f:40:
                    c5:11:d1:a0:69:1c:7f:f3:b4:9b:2c:c3:73:97:2e:
                    d4:b6:4a:15:b7:0d:02:ea:68:30:9c:62:99:53:fd:
                    b2:3e:b8:e8:e2:41:a6:b3:19:57:ba:1d:0f:a2:9e:
                    dc:b3:88:f5:11:c1:ff:a7:29:40:9c:6f:39:f0:3b:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:32:B5:13:60:11:05:BE:2C:B1:D2:65:A4:29:82:D2:95:F3:0A
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/9ToytRNgEQW-LLHSZaQpgtKV8wo.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:82:2f:8b:ea:9f:a8:a1:6d:3b:68:7a:77:6f:e1:84:cc:
         3c:4e:a8:dc:52:59:0a:bb:5d:4c:b5:40:a4:da:1c:05:08:6e:
         24:7b:9f:3b:6d:4a:13:db:aa:ad:44:53:27:13:3c:3b:44:7b:
         ac:9f:ff:d0:7a:9a:97:4d:0c:af:5b:eb:e2:bf:47:a2:20:15:
         3d:cc:67:70:27:32:7d:6c:90:5b:23:8a:62:86:d7:78:71:d9:
         fd:e3:de:a9:cd:e8:eb:91:43:fa:4e:f9:68:b5:c4:63:f4:ef:
         ea:44:41:fe:df:f9:d8:1e:4e:ce:3f:dd:86:24:2f:4f:00:95:
         2c:5d:fe:57:61:b8:30:92:27:a6:c4:ee:63:5e:cf:97:73:07:
         cc:3a:02:99:94:99:3f:83:3f:6e:cd:8d:7a:0a:0b:25:24:57:
         58:25:ef:7b:e7:9a:d6:c4:ed:28:dd:9f:58:81:8d:2a:e4:ce:
         86:6b:af:90:ad:ca:b4:41:39:33:42:0f:d2:a3:bf:95:05:6e:
         3f:b1:ae:4a:63:ed:17:f0:9c:0a:6d:7f:ba:02:08:c7:8f:de:
         d0:25:ae:53:01:a4:f8:3b:40:ba:30:70:bf:93:6c:0f:c3:25:
         9d:86:4d:2e:6c:41:be:69:e2:0f:ee:de:c5:d5:dc:b1:0a:de:
         b5:07:45:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:10 2025 by rpki-client