Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ARCHE/E_JWqcoO7EcFuEzGnzKrBjWldqM.roa
File:                     E_JWqcoO7EcFuEzGnzKrBjWldqM.roa (raw, json)
Hash identifier:          O8oWogY+TrtvEq6X8MLndGGGVT9NMHXVNZFqZUWczmA=
Subject key identifier:   13:F2:56:A9:CA:0E:EC:47:05:B8:4C:C6:9F:32:AB:06:35:A5:76:A3
Certificate issuer:       /CN=069CE651DD7D716A89A8EE84873DCCBF41354799
Certificate serial:       0106
Authority key identifier: 06:9C:E6:51:DD:7D:71:6A:89:A8:EE:84:87:3D:CC:BF:41:35:47:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/E_JWqcoO7EcFuEzGnzKrBjWldqM.roa
Signing time:             Mon 10 Feb 2025 13:45:26 +0000
ROA not before:           Mon 10 Feb 2025 13:45:26 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131668
IP address blocks:        2401:7a60::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=069CE651DD7D716A89A8EE84873DCCBF41354799
        Validity
            Not Before: Feb 10 13:45:26 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=13F256A9CA0EEC4705B84CC69F32AB0635A576A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:e1:72:de:ec:c9:06:f3:ed:b5:eb:30:e2:
                    3b:df:7f:f8:b9:b4:59:e3:c8:45:bd:ed:51:be:21:
                    ac:bd:d4:66:c5:49:81:1b:41:cc:cb:8d:33:14:84:
                    ca:1f:14:5b:10:3d:25:89:1d:e2:1c:1a:f0:03:3b:
                    51:0a:24:05:8d:74:6a:1c:5f:45:60:29:e6:65:fb:
                    cd:bc:85:9e:30:b9:46:12:b6:e1:9d:80:59:3d:fd:
                    a8:e9:28:58:6e:12:cd:39:1b:e0:ad:8a:c4:25:59:
                    cc:89:11:e3:3a:96:7a:32:ff:53:d1:5f:0d:5c:c9:
                    24:ef:50:df:60:29:4c:ef:12:ae:4b:8a:ef:38:62:
                    74:6a:73:84:43:b3:90:1c:da:af:2d:dd:12:86:02:
                    2e:50:c8:78:d7:e8:20:6e:bb:dd:b2:1d:b1:39:45:
                    5b:b6:fe:45:f2:0c:ec:61:36:e7:f6:9c:19:cd:53:
                    11:7e:3d:c4:b9:f0:b5:0c:d5:1b:55:60:ad:87:af:
                    67:89:ea:71:25:3b:6b:71:a6:f3:9b:bd:44:6a:36:
                    df:91:0b:1a:21:3a:e9:5e:1a:0f:10:69:af:59:7f:
                    b2:a6:ce:e9:43:f7:65:5e:ca:46:c6:e5:6b:f2:91:
                    ef:4f:e5:fb:89:e9:fa:ba:cf:19:6b:de:84:45:e6:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F2:56:A9:CA:0E:EC:47:05:B8:4C:C6:9F:32:AB:06:35:A5:76:A3
            X509v3 Authority Key Identifier:
                keyid:06:9C:E6:51:DD:7D:71:6A:89:A8:EE:84:87:3D:CC:BF:41:35:47:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BpzmUd19cWqJqO6Ehz3Mv0E1R5k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ARCHE/E_JWqcoO7EcFuEzGnzKrBjWldqM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:bc:3c:3b:67:83:0c:12:51:f6:38:17:16:c2:7c:7e:7f:22:
         0c:a1:65:4a:61:1c:7f:79:74:17:5d:bc:5d:38:4a:ac:a0:f1:
         da:aa:b9:05:6b:09:2f:37:dd:f9:26:54:4c:fc:86:91:2a:74:
         bd:ea:58:7d:f3:9c:91:9a:5c:4e:b3:3f:a5:b6:dc:d3:cc:f5:
         ef:fc:d9:4c:7b:0a:fb:c0:fe:ee:bd:b8:74:a5:4c:02:e7:e0:
         c1:9e:7a:1b:de:2e:67:91:e2:c8:5f:07:96:83:ec:c5:07:5c:
         d2:8e:9d:70:a4:09:6f:9b:08:25:b8:d5:4d:9e:cc:9a:e5:28:
         33:da:50:28:23:70:1b:4d:5e:fc:ce:dd:0f:aa:c9:ef:78:bc:
         c9:f6:a4:d8:24:58:03:83:0f:09:03:04:7e:db:9a:52:36:31:
         d2:b9:ae:eb:77:8b:4b:84:0a:41:64:d6:c1:ce:4b:bb:92:af:
         1a:e4:b8:ea:19:0e:88:44:1c:af:5b:37:1c:cb:7f:de:60:7d:
         25:88:ff:da:53:b5:21:9e:25:7a:4f:0e:8d:60:4c:5d:69:9e:
         3a:c4:90:13:c3:d7:ea:e1:57:a8:9e:17:dd:1b:4e:b5:c1:b7:
         e8:d5:69:34:1e:8a:92:2a:62:f8:e2:56:e7:db:1a:31:a1:5c:
         02:f4:8d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:42 2025 by rpki-client