Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/FR0XMN_rSHSwITGEj80trGajOrY.roa
File:                     FR0XMN_rSHSwITGEj80trGajOrY.roa (raw, json)
Hash identifier:          tO/lwJo98VfY0kAtvo3Rp/ihVE4+celViD7q36lSFS8=
Subject key identifier:   15:1D:17:30:DF:EB:48:74:B0:21:31:84:8F:CD:2D:AC:66:A3:3A:B6
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C99
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FR0XMN_rSHSwITGEj80trGajOrY.roa
Signing time:             Sun 07 Feb 2021 11:47:04 +0000
ROA not before:           Sun 07 Feb 2021 11:47:04 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        210.200.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:47:04 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=151D1730DFEB4874B02131848FCD2DAC66A33AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:74:7e:62:05:1b:fe:2e:d4:17:55:5f:9c:8d:
                    55:4c:43:7b:e6:0f:b8:35:91:7f:46:67:c6:f7:12:
                    af:68:ef:57:e7:ef:98:7f:81:5e:f0:e5:d4:1f:27:
                    b6:b7:25:92:b5:07:4f:8f:f9:cb:fd:f2:8a:6b:b4:
                    2f:4e:ba:f6:1f:47:e2:0b:3a:f6:8f:3e:f0:58:cb:
                    93:92:ca:08:77:1d:e8:40:fb:c6:6a:83:ae:c7:94:
                    a7:ac:a5:f8:6a:33:4b:3f:94:4a:2a:8b:44:37:4f:
                    ae:6b:ea:dc:4d:ba:fb:22:c7:83:0e:8c:1c:43:c8:
                    00:c4:04:8e:e8:c5:11:0f:d6:38:ff:b4:d8:b6:e2:
                    71:0f:13:da:12:06:dd:21:da:14:55:6d:85:31:5e:
                    2b:b5:cb:3e:bb:cb:ba:e4:fc:c8:3a:22:1f:f0:a4:
                    d0:09:08:68:44:73:76:b0:e2:9d:cb:61:3b:2f:65:
                    43:f3:03:dc:d5:a1:87:5a:55:07:7d:2b:97:3f:7c:
                    44:45:b3:4f:8b:0b:87:5a:d4:89:cb:a6:da:bf:78:
                    70:84:e6:a6:a8:a3:2a:f0:54:be:b9:82:5a:48:4c:
                    be:79:a8:e6:05:f9:ca:b2:ad:71:44:3d:68:b4:ad:
                    49:5e:1e:73:19:72:01:eb:08:92:dc:78:ed:7e:13:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1D:17:30:DF:EB:48:74:B0:21:31:84:8F:CD:2D:AC:66:A3:3A:B6
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FR0XMN_rSHSwITGEj80trGajOrY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:e9:b3:28:94:59:b5:0d:26:7a:43:54:51:79:6d:d5:ca:74:
         a8:66:a4:26:53:a7:cb:d6:9f:3e:10:7f:d9:39:02:94:0c:ba:
         a1:5e:04:f8:ee:ef:ff:97:41:31:98:a3:91:e1:ca:88:ce:6b:
         2e:1d:ec:3a:4f:6a:2a:71:2d:68:b6:86:7d:f5:22:ef:90:ad:
         94:27:57:99:39:21:1d:60:ae:21:78:a8:b3:cd:cd:f8:f0:4b:
         86:6f:b3:7b:35:3a:8c:04:cb:3f:f6:88:10:d1:f6:6f:0a:d0:
         0e:24:8e:99:4d:85:df:f7:2b:ee:00:3c:79:a4:67:fc:02:6c:
         95:4e:22:c2:2a:a5:ae:02:8c:ac:03:4d:f1:0d:a6:68:fa:3a:
         83:a7:c2:0e:8c:6d:47:1a:0e:7c:69:25:0b:e8:a1:d0:3c:41:
         13:e3:c9:03:5e:9f:e5:73:25:ac:43:8d:87:2e:57:9f:b6:8a:
         5c:44:d6:69:0e:b0:83:a6:5f:59:66:27:5a:9f:66:fa:22:d2:
         17:d2:2b:d1:70:c7:f2:13:e0:dc:4c:b6:9b:12:a7:5e:8c:57:
         b8:70:93:84:55:56:f6:eb:ab:8f:eb:d9:63:da:45:77:84:37:
         8f:29:6d:04:36:18:3f:4e:d0:7e:a8:f7:a4:fa:62:4e:fa:fa:
         cc:6d:ca:c3
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMTAyMDcx
MTQ3MDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE1MUQxNzMwREZFQjQ4
NzRCMDIxMzE4NDhGQ0QyREFDNjZBMzNBQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzdH5iBRv+LtQXVV+cjVVMQ3vmD7g1kX9GZ8b3Eq9o71fn75h/
gV7w5dQfJ7a3JZK1B0+P+cv98oprtC9OuvYfR+ILOvaPPvBYy5OSygh3HehA+8Zq
g67HlKespfhqM0s/lEoqi0Q3T65r6txNuvsix4MOjBxDyADEBI7oxREP1jj/tNi2
4nEPE9oSBt0h2hRVbYUxXiu1yz67y7rk/Mg6Ih/wpNAJCGhEc3aw4p3LYTsvZUPz
A9zVoYdaVQd9K5c/fERFs0+LC4da1InLptq/eHCE5qaooyrwVL65glpITL55qOYF
+cqyrXFEPWi0rUleHnMZcgHrCJLceO1+E2XRAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFR0XMN/rSHSwITGEj80trGajOrYwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvRlIwWE1OX3JTSFN3SVRHRWo4MHRy
R2FqT3JZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLIQDAN
BgkqhkiG9w0BAQsFAAOCAQEAQemzKJRZtQ0mekNUUXlt1cp0qGakJlOny9afPhB/
2TkClAy6oV4E+O7v/5dBMZijkeHKiM5rLh3sOk9qKnEtaLaGffUi75CtlCdXmTkh
HWCuIXios83N+PBLhm+zezU6jATLP/aIENH2bwrQDiSOmU2F3/cr7gA8eaRn/AJs
lU4iwiqlrgKMrANN8Q2maPo6g6fCDoxtRxoOfGklC+ih0DxBE+PJA16f5XMlrEON
hy5Xn7aKXETWaQ6wg6ZfWWYnWp9m+iLSF9Ir0XDH8hPg3Ey2mxKnXoxXuHCThFVW
9uurj+vZY9pFd4Q3jyltBDYYP07Qfqj3pPpiTvr6zG3Kww==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:22 2025 by rpki-client