Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa
File:                     pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa (raw, json)
Hash identifier:          skXbnNkZBb6E5Pr2NbOTgJamQewyF5LYiZR/qaewRs4=
Subject key identifier:   A4:F3:50:89:70:44:69:3F:73:FF:7E:93:65:7E:0C:F5:96:8F:D4:67
Certificate issuer:       /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial:       0C39
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa
Signing time:             Sun 07 Feb 2021 11:35:19 +0000
ROA not before:           Sun 07 Feb 2021 11:35:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     9311
IP address blocks:        210.63.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
        Validity
            Not Before: Feb  7 11:35:19 2021 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=A4F350897044693F73FF7E93657E0CF5968FD467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:06:28:aa:7c:19:5c:b6:a8:69:79:ba:3c:
                    9a:76:a6:55:93:e6:6e:5e:63:66:d3:c6:12:b7:71:
                    df:b8:84:a6:0f:fe:ae:d7:bd:92:93:d6:a2:db:77:
                    6b:7e:56:8c:f1:43:05:9d:98:fb:e4:9b:6a:13:b3:
                    03:74:f9:87:e5:49:34:7b:12:96:1f:8b:87:72:06:
                    31:ad:d6:18:ab:60:68:b0:50:6e:67:c6:fe:6f:fd:
                    6e:b3:6c:d6:29:0a:1e:08:de:03:05:94:50:10:db:
                    d2:73:5c:ff:18:90:08:e6:99:32:6c:f9:b7:c9:b1:
                    08:8b:d4:2b:31:9a:03:95:63:30:f7:53:6b:f6:31:
                    e2:bb:4b:56:12:4a:57:28:f1:7a:e6:ff:83:e5:d6:
                    af:0a:8a:8f:b7:04:35:c9:29:9e:20:60:2e:de:f9:
                    94:87:b3:a8:8f:5d:53:d8:75:93:6a:04:16:e6:9e:
                    2f:8c:cd:a0:d0:ca:35:dc:5a:84:d5:de:9d:2b:92:
                    5d:d2:de:76:c3:bf:9a:75:1c:35:73:8c:15:7b:61:
                    34:a7:72:73:6b:f3:d6:20:85:a9:54:f3:60:07:d3:
                    a2:88:f2:97:35:f4:8f:db:f0:08:61:07:ec:cd:59:
                    db:a5:58:7f:f4:b2:60:94:6b:48:b0:27:81:e1:3c:
                    a3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F3:50:89:70:44:69:3F:73:FF:7E:93:65:7E:0C:F5:96:8F:D4:67
            X509v3 Authority Key Identifier:
                keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/pPNQiXBEaT9z_36TZX4M9ZaP1Gc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d7:b2:2d:be:d7:7d:0a:02:a8:03:db:55:e8:1a:05:90:8a:
         d8:70:ea:79:df:69:85:71:4c:87:47:dd:7c:c9:be:da:5b:f5:
         0e:65:b9:b4:7c:af:81:3c:08:a6:12:e7:5e:cc:f4:a4:99:13:
         da:e2:99:2e:2d:72:3b:c4:6b:70:6a:76:c0:9d:e8:6e:08:96:
         bf:a3:4e:73:60:ce:1b:5b:b0:d3:5a:49:a6:01:05:79:83:b5:
         c5:2a:47:38:08:b8:11:b4:84:9f:ea:2a:78:7e:54:fd:61:eb:
         39:6b:1f:66:f8:69:17:78:6c:5f:0c:0b:5a:29:a4:48:9d:97:
         b6:5b:ba:bf:53:03:d4:3a:dd:91:09:f2:14:42:35:31:28:ab:
         c0:3c:30:bc:60:88:62:2e:29:af:b3:c6:66:ac:7c:38:39:db:
         31:6a:b1:7d:1c:d2:6c:0d:28:aa:b0:14:49:d5:cd:d2:7f:d3:
         1f:9d:58:16:90:46:3a:3b:db:8d:f0:35:71:7c:4d:7e:33:b8:
         fc:7c:63:10:17:66:a6:6b:8d:ce:80:b6:50:a3:92:79:e3:ef:
         a5:6b:f1:b0:31:2f:9b:99:40:91:99:f2:5b:b1:84:6e:a5:aa:
         66:6f:1b:bd:28:65:7c:0d:48:b0:25:62:9f:ff:80:9e:c4:8a:
         f4:a2:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:18 2025 by rpki-client