Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASGC/QVoxU4Z9MKp3j6cfNry-oZ9en60.roa
File:                     QVoxU4Z9MKp3j6cfNry-oZ9en60.roa (raw, json)
Hash identifier:          ulOAYqUOIXos2yBfQNEoPT0uCf6e+R3kGWEHTwXtUsE=
Subject key identifier:   41:5A:31:53:86:7D:30:AA:77:8F:A7:1F:36:BC:BE:A1:9F:5E:9F:AD
Certificate issuer:       /CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
Certificate serial:       0773
Authority key identifier: 76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/QVoxU4Z9MKp3j6cfNry-oZ9en60.roa
Signing time:             Tue 29 Sep 2020 09:59:00 +0000
ROA not before:           Tue 29 Sep 2020 09:59:00 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24167
IP address blocks:        2400:4500:0:2::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=760EA9F7833EDC6366FD5E23A426BCF62BB01E6C
        Validity
            Not Before: Sep 29 09:59:00 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=415A3153867D30AA778FA71F36BCBEA19F5E9FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:7c:11:cf:d6:c3:3c:43:39:2f:28:da:bb:
                    b1:56:6c:dc:d9:7a:df:be:40:59:42:83:14:ca:90:
                    36:9b:da:cf:d3:5a:99:4a:71:e9:66:4f:09:43:ac:
                    24:39:b4:cf:2f:d1:73:92:13:b0:83:c9:ff:49:a8:
                    e4:8a:53:41:23:90:23:ca:5b:6c:37:3c:61:83:b8:
                    5c:40:0c:86:66:e2:5a:b7:c5:9a:94:13:f5:7f:90:
                    ea:bb:72:45:e2:e2:2d:b3:d7:ee:94:a0:18:3f:56:
                    4d:6e:f1:f6:22:cb:a6:84:6b:67:d5:ab:fd:b6:3b:
                    0d:f9:2b:0a:00:9e:d1:ff:75:22:f9:91:eb:60:9a:
                    90:2d:08:50:19:69:b8:ce:c4:67:04:93:c6:ff:3f:
                    57:67:e2:7b:8b:dd:ee:0a:68:64:1d:b9:69:27:c5:
                    4b:3d:2c:14:c5:ea:2c:7b:14:ce:06:2e:e1:70:b1:
                    b1:c2:15:61:f7:0a:27:87:88:66:52:47:f6:90:28:
                    77:d0:af:fe:bf:93:0f:fd:a4:47:35:d6:99:bf:3f:
                    68:21:46:a0:53:9d:e4:cb:18:65:29:18:f5:9e:3a:
                    71:f1:59:a9:86:b8:cd:ff:64:ee:28:14:51:ac:bf:
                    bd:48:6c:58:28:ab:ff:87:9f:97:e1:c3:dd:48:d5:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5A:31:53:86:7D:30:AA:77:8F:A7:1F:36:BC:BE:A1:9F:5E:9F:AD
            X509v3 Authority Key Identifier:
                keyid:76:0E:A9:F7:83:3E:DC:63:66:FD:5E:23:A4:26:BC:F6:2B:B0:1E:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/dg6p94M-3GNm_V4jpCa89iuwHmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dg6p94M-3GNm_V4jpCa89iuwHmw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASGC/QVoxU4Z9MKp3j6cfNry-oZ9en60.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4500:0:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         15:01:bc:62:4c:b0:6e:05:ff:e0:c4:7d:07:51:50:4b:bd:08:
         da:1d:35:70:2b:31:63:4c:9a:a9:56:72:0b:80:a5:a4:27:4f:
         0f:00:d3:21:bf:62:5d:72:01:75:30:6c:c9:94:0f:8c:e5:f8:
         50:57:99:d5:89:ec:f2:45:30:d7:d4:2c:62:35:df:fe:71:d3:
         f1:ad:6d:27:c2:68:c7:e4:81:0d:35:37:57:7a:f6:92:08:90:
         2f:e7:cb:2a:4a:91:0f:f3:73:0a:54:ef:22:ff:cc:56:79:74:
         83:0f:a0:56:dd:f3:7c:07:91:80:7a:ed:e7:de:1f:89:94:88:
         52:a9:a0:fc:a3:de:e7:3d:e9:a3:93:92:3f:19:94:ff:1f:c9:
         81:01:87:9e:c1:7b:0f:b4:6f:5c:51:13:21:ca:2f:c9:75:37:
         51:51:34:ab:d1:2b:9c:26:fe:fb:09:a2:2a:69:8e:6e:11:7c:
         0a:d6:c8:4a:a0:9d:e4:2d:84:0e:c8:2a:b4:87:ea:58:15:57:
         67:59:91:91:4f:57:db:3a:14:d2:89:49:d6:c2:f0:5e:09:47:
         14:6f:7a:89:25:5c:3b:22:fd:ae:8e:80:52:94:9c:da:fb:0a:
         9f:f2:fa:9f:c1:01:30:5d:d7:fd:23:21:22:5a:23:2d:78:28:
         f1:c2:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:54 2025 by rpki-client