Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/V8HvoYvlkP2fkhR4Nx9yt9mnw8s.roa
File:                     V8HvoYvlkP2fkhR4Nx9yt9mnw8s.roa (raw, json)
Hash identifier:          beE69pv1OyJmLo5oOBn3KQzsx5N9SWZJ/nnQ9HFfAfs=
Subject key identifier:   57:C1:EF:A1:8B:E5:90:FD:9F:92:14:78:37:1F:72:B7:D9:A7:C3:CB
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       096F
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/V8HvoYvlkP2fkhR4Nx9yt9mnw8s.roa
Signing time:             Tue 29 Sep 2020 10:01:50 +0000
ROA not before:           Tue 29 Sep 2020 10:01:50 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        2001:f10::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:50 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=57C1EFA18BE590FD9F921478371F72B7D9A7C3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:e6:a8:3f:40:1b:80:2d:40:b0:44:64:53:
                    2d:72:33:07:aa:c8:be:08:39:77:cf:9e:ee:d7:77:
                    a0:7c:de:cc:f0:10:f1:89:ab:51:1d:4c:2e:aa:da:
                    27:40:cb:47:51:46:d1:8f:13:f5:83:4d:a7:90:c4:
                    e9:71:b5:06:6d:d9:e2:59:59:a7:9e:3c:2a:db:44:
                    e7:b3:81:15:3c:a1:ac:d9:f2:a5:2f:9f:bb:2e:90:
                    47:be:4a:69:85:3b:d6:a1:dc:4e:03:e9:e7:ce:d6:
                    30:27:7c:29:af:d3:71:d7:0c:09:1f:25:bf:67:41:
                    d0:3b:6f:77:27:cd:26:cf:a2:3d:49:26:41:9a:f2:
                    60:c3:24:aa:5e:78:0e:1f:60:e6:63:fe:1b:d6:d8:
                    bc:1d:eb:97:7d:4f:d1:2f:50:91:b4:0c:4d:cc:5f:
                    c9:fa:a9:0f:95:d9:2d:a8:ac:c0:87:91:19:ac:38:
                    7f:f6:1f:90:8d:8b:b5:a8:fe:ef:b4:07:b1:f0:93:
                    57:b7:09:03:cd:8d:b2:7e:01:0e:3d:af:de:9d:bc:
                    01:ef:c6:a8:6f:44:07:f0:a8:d1:67:a3:b8:7e:b0:
                    9b:b1:73:93:c4:ab:f6:d5:ca:78:f3:19:26:06:85:
                    63:f9:63:95:b7:f2:46:3f:7d:ba:e8:4c:92:35:23:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:EF:A1:8B:E5:90:FD:9F:92:14:78:37:1F:72:B7:D9:A7:C3:CB
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/V8HvoYvlkP2fkhR4Nx9yt9mnw8s.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f10::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:c2:65:b1:59:4c:52:1d:c8:e1:f9:2a:40:02:78:a3:a2:
         55:ce:84:ae:65:0d:2a:87:4f:fc:06:e8:e0:2d:76:af:70:29:
         f4:e1:db:f9:dc:4e:cd:3d:54:91:20:d5:dd:84:51:59:65:93:
         87:03:c3:68:b6:84:a5:fe:1d:45:ca:83:68:46:c4:25:e1:6d:
         73:a6:15:ab:4c:0b:88:01:5b:1e:89:60:12:1e:f2:f8:00:9f:
         fe:50:1e:26:4a:b8:3c:63:b4:4b:8a:0a:da:d7:1e:38:dc:9f:
         5f:c1:78:28:b2:f0:68:91:ac:1d:74:6c:ae:c4:83:f5:1b:a0:
         9a:e7:39:8e:a9:4a:cc:09:35:8b:35:34:ad:d1:7f:66:d9:72:
         41:9e:7d:5b:88:a6:ef:a7:57:12:2c:f1:37:cd:49:23:be:fe:
         73:95:13:cf:c7:8e:5d:d9:90:01:3a:9c:a2:ac:5e:b5:76:57:
         36:26:31:73:87:35:60:3b:f8:b2:68:39:c7:0e:1b:16:e4:05:
         32:42:42:4a:49:aa:e9:31:fd:38:21:d6:3d:50:64:35:60:7f:
         0b:27:c4:94:50:73:ef:e3:ed:b4:8e:1d:b9:17:7c:fe:c3:44:
         3f:6f:0b:01:aa:e2:bb:c1:a3:aa:9b:2b:94:77:54:69:74:9a:
         c3:0e:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:01 2025 by rpki-client