Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/oBjpVTOnBoNBPORMSEj_T1Q18OE.roa
File:                     oBjpVTOnBoNBPORMSEj_T1Q18OE.roa (raw, json)
Hash identifier:          hM8tL/axA+0QHIkumABP5FiSmiyDUbuDPePcPxn4FHk=
Subject key identifier:   A0:18:E9:55:33:A7:06:83:41:3C:E4:4C:48:48:FF:4F:54:35:F0:E1
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0915
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/oBjpVTOnBoNBPORMSEj_T1Q18OE.roa
Signing time:             Tue 29 Sep 2020 10:01:27 +0000
ROA not before:           Tue 29 Sep 2020 10:01:27 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     17709
IP address blocks:        210.58.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Sep 29 10:01:27 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A018E95533A70683413CE44C4848FF4F5435F0E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:20:6f:d5:2d:84:c5:e5:e4:54:d9:1f:09:35:
                    5d:1b:00:81:f7:a5:44:90:ce:18:31:bf:a6:18:0c:
                    a9:80:60:54:b5:76:a3:1f:1b:9b:21:2c:2b:56:f9:
                    b8:8b:57:41:2e:3d:a9:a2:67:6e:85:3f:1a:eb:91:
                    d7:4a:f4:c6:3c:8e:86:8e:99:78:46:ca:4b:98:60:
                    93:ff:b7:4e:f1:49:ee:5e:3e:30:b2:19:fe:91:0b:
                    ef:e5:59:cc:ee:b1:4d:e7:2a:d0:19:3f:ea:5c:0a:
                    02:08:9f:c7:ba:83:3c:e8:d6:cf:d5:4b:65:16:f3:
                    de:01:ae:2f:64:d9:54:7a:1f:33:cd:81:e2:0e:eb:
                    70:f8:cb:a7:88:dd:43:c2:c0:a9:3b:33:f9:c8:11:
                    e5:f2:e7:49:83:c9:96:c1:01:c0:c7:62:2a:ab:20:
                    40:84:76:aa:00:23:a1:52:44:20:cc:ba:77:bb:e5:
                    77:1a:a2:33:32:4b:a5:db:3e:87:8d:31:9f:4b:8c:
                    aa:50:72:58:49:c0:16:e7:9c:98:1e:03:d7:70:02:
                    f9:23:e0:56:11:fc:79:25:3f:fb:44:b0:0c:6b:bc:
                    08:45:7a:16:e7:9a:61:13:ef:3f:72:25:19:39:dd:
                    fb:eb:ca:83:19:77:48:c5:b9:3b:9b:8a:e3:2d:26:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:18:E9:55:33:A7:06:83:41:3C:E4:4C:48:48:FF:4F:54:35:F0:E1
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/oBjpVTOnBoNBPORMSEj_T1Q18OE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:dc:3b:da:dd:ce:4c:11:d3:fd:96:52:56:11:e8:74:ec:
         48:6f:4b:a2:63:56:ec:ae:94:11:b7:00:87:e1:a6:42:82:fb:
         ea:e1:ce:66:60:11:f8:55:a4:82:b0:e8:4c:92:65:fd:e6:6e:
         b9:90:ec:3b:d4:53:cf:b1:a0:85:90:17:07:86:c9:cc:55:15:
         91:d2:46:27:d8:50:b7:46:53:ec:b6:61:85:82:01:bc:b6:27:
         ff:3c:f6:f3:68:ef:33:14:b4:9b:b7:6d:b7:c3:0b:f9:d9:cf:
         83:e7:78:e4:04:48:a8:1a:fa:f6:19:48:81:e6:41:2e:7b:8e:
         76:fc:1a:58:b1:31:4b:e7:63:74:a3:fa:aa:84:e3:07:fa:c9:
         59:41:18:70:27:c2:b4:85:8f:12:29:7e:9d:b1:d8:4d:dd:69:
         c4:f3:39:3f:ea:61:82:8c:5b:e0:b3:03:5a:ac:e6:67:d2:32:
         45:2f:94:62:83:27:8d:e6:2b:b0:65:d7:9e:25:0a:04:21:65:
         69:60:6b:c9:7c:ec:c9:2a:85:6e:ac:52:4e:0c:00:b8:ee:0a:
         69:11:8e:ff:06:1b:3f:63:8a:89:76:c1:f3:09:05:40:ab:c3:
         48:e7:82:d7:07:85:fd:2a:13:64:ea:71:1d:bc:7c:a7:fb:74:
         dd:ee:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:23 2025 by rpki-client