Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/FvEew_JBGqOXb8udlukcGApzIgk.roa
File:                     FvEew_JBGqOXb8udlukcGApzIgk.roa (raw, json)
Hash identifier:          c88jiRRRIT3rysoueG2Fxai0aYT0mgan8ekcKo9Z4y4=
Subject key identifier:   16:F1:1E:C3:F2:41:1A:A3:97:6F:CB:9D:96:E9:1C:18:0A:73:22:09
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FvEew_JBGqOXb8udlukcGApzIgk.roa
Signing time:             Thu 15 Sep 2022 02:40:07 +0000
ROA not before:           Thu 15 Sep 2022 02:40:07 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     24154
IP address blocks:        210.63.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3939 (0xf63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 15 02:40:07 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=16F11EC3F2411AA3976FCB9D96E91C180A732209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:5c:53:e7:38:f9:08:e8:32:74:5e:88:e2:
                    68:40:2f:fb:77:85:54:20:ed:25:e7:18:4f:e4:01:
                    38:a7:f8:ab:87:8d:40:25:50:6f:4d:b2:48:13:69:
                    70:08:9b:5b:39:64:05:62:8f:75:2e:c4:28:4f:a6:
                    1e:cc:bc:82:93:44:d5:63:bc:7b:39:39:9e:46:a8:
                    69:dd:0d:23:f6:ba:4c:8d:bc:21:bd:b4:2c:32:74:
                    99:d0:a9:90:bd:f1:b8:36:ac:10:58:6b:de:b2:95:
                    17:ac:12:15:bb:f4:c5:3a:e4:fc:4e:19:fa:3f:20:
                    46:41:8c:84:f2:4f:01:ac:d9:3d:d0:73:1c:e1:9e:
                    fa:6a:68:33:35:69:03:bb:78:a5:0a:74:b4:dd:43:
                    e1:1b:ca:dc:a7:33:b8:41:71:d7:49:46:19:77:50:
                    a5:0a:b3:5e:b8:47:54:aa:13:cc:7e:67:e0:bc:c2:
                    d9:af:34:fa:bc:50:04:70:35:14:56:d8:54:7f:93:
                    cf:47:32:85:8e:8f:ec:ee:e0:42:c0:e0:49:fb:0f:
                    ac:db:ed:bd:88:be:11:f3:f3:c6:b7:d7:5b:9b:99:
                    14:2d:69:c5:42:7c:ed:dd:16:18:d9:ed:7a:ea:35:
                    7f:6f:a2:2b:e1:07:f2:7b:05:dc:cf:35:08:5c:88:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F1:1E:C3:F2:41:1A:A3:97:6F:CB:9D:96:E9:1C:18:0A:73:22:09
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/FvEew_JBGqOXb8udlukcGApzIgk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:2c:4d:df:f2:91:31:bb:cd:ba:de:be:6b:10:55:df:ed:
         a0:3f:91:36:34:fd:dd:37:e4:6e:bf:79:90:f8:0f:3b:04:e5:
         28:b6:85:4d:9e:9a:d8:f0:d6:bc:56:5f:2c:74:b2:f4:e6:5e:
         0e:aa:8a:d2:67:a3:2d:2d:5d:fe:8f:3c:7d:d0:41:14:99:aa:
         0c:95:1e:c5:81:f8:5b:cc:2d:fa:72:4a:f9:f5:54:62:32:57:
         e9:28:7a:09:d3:7f:53:1f:40:04:38:e4:a2:3a:28:1d:fd:23:
         75:8f:5d:da:07:2d:5c:22:d7:7c:c4:f1:1b:cb:01:a9:d5:fe:
         52:39:73:32:5f:8d:3d:e7:44:e9:8c:34:51:c4:ef:de:24:3e:
         a3:41:ec:ac:75:4b:4a:c7:38:91:57:37:a8:5e:1b:45:73:ed:
         82:ea:9f:da:b4:1d:2d:5d:3e:cb:26:0d:a7:f2:62:e7:a6:53:
         1e:be:08:b2:c9:d6:96:f8:af:10:fd:89:2c:fc:f6:cc:df:ae:
         55:40:9f:fa:d4:bf:76:c3:9e:08:6f:b8:50:15:a3:f0:9b:70:
         de:c0:02:19:46:73:bf:9a:84:1a:09:69:62:9f:33:93:3f:b3:
         42:fa:7c:f0:13:05:a1:c2:dd:d3:2b:b4:04:94:03:c0:2d:4a:
         06:b3:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:39 2025 by rpki-client