Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/135RM48px4DMCBSs9LZn73wiqsQ.roa
File:                     135RM48px4DMCBSs9LZn73wiqsQ.roa (raw, json)
Hash identifier:          0J6oBSxp7gPdQ53AMx+0fiq64+8wZhzJ0jSebtrIvxo=
Subject key identifier:   D7:7E:51:33:8F:29:C7:80:CC:08:14:AC:F4:B6:67:EF:7C:22:AA:C4
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       129E
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/135RM48px4DMCBSs9LZn73wiqsQ.roa
Signing time:             Mon 10 Feb 2025 14:15:03 +0000
ROA not before:           Mon 10 Feb 2025 14:15:03 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131636
IP address blocks:        150.116.6.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4766 (0x129e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Feb 10 14:15:03 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D77E51338F29C780CC0814ACF4B667EF7C22AAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:37:ed:18:da:35:46:2a:91:fa:63:58:76:
                    27:f8:3c:2e:e2:23:9e:11:2e:4c:e6:84:c1:b1:98:
                    d8:63:fc:c5:dc:5c:bf:90:69:d0:aa:15:a3:a6:52:
                    7f:13:3c:90:f7:5b:ac:c8:54:dc:20:f6:e4:c5:28:
                    11:e5:1f:d6:2b:30:70:2e:a0:86:09:43:47:61:ed:
                    39:b8:0e:47:6e:eb:47:9e:a1:38:44:8b:fe:56:06:
                    b7:41:f8:1c:64:08:ce:03:f9:51:41:bb:19:e1:15:
                    86:ae:54:b3:8b:6f:5e:86:c7:db:65:76:ad:78:6e:
                    25:fb:2a:31:d6:1d:ae:81:aa:5a:4a:20:54:af:4c:
                    52:dd:e4:02:29:fb:a9:0b:5f:88:51:81:52:8d:b4:
                    fa:73:67:75:ed:f4:aa:58:d1:42:67:02:72:41:22:
                    f9:4a:d5:0d:6f:cf:a4:7c:dc:dd:2c:91:0f:55:27:
                    5f:7e:e5:0b:fd:76:3c:05:22:59:5f:c7:67:bb:ee:
                    ae:fe:4b:61:41:28:a5:fe:22:14:94:b6:ca:b9:84:
                    a0:85:09:0c:99:31:3e:b2:f5:ce:bb:73:83:ba:fa:
                    8b:8b:9c:6b:03:97:ab:2c:a3:dd:a0:67:01:f8:db:
                    9d:ef:33:b6:2d:89:aa:78:10:d6:3b:20:4b:64:1e:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7E:51:33:8F:29:C7:80:CC:08:14:AC:F4:B6:67:EF:7C:22:AA:C4
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/135RM48px4DMCBSs9LZn73wiqsQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:6a:8e:5a:31:95:8d:37:62:ba:bd:b9:bd:01:7b:52:f5:1e:
         06:37:03:04:7f:5b:e6:f1:5d:0d:f2:52:34:c7:b9:68:e2:0f:
         ba:c1:d3:61:cf:7d:bb:36:53:37:87:67:2e:d4:0d:58:a6:a6:
         93:21:ec:42:b5:05:e7:e2:ae:3b:51:c0:17:ea:3d:2a:fc:ab:
         1e:e0:e0:cb:05:27:5f:81:d0:83:5a:03:c3:95:1d:4e:f1:c1:
         98:42:f4:37:48:cf:93:76:78:b9:f9:11:2a:60:14:e8:00:52:
         ac:39:08:b5:8e:5c:28:4e:48:aa:a4:bb:3e:87:13:fc:07:56:
         f3:cf:c1:4f:12:2f:be:79:9b:af:7f:63:14:dd:06:72:a4:dd:
         68:93:a6:7d:05:97:25:6b:6a:65:df:15:cc:85:b6:ac:ec:fa:
         51:92:1f:a5:46:48:b8:d6:f6:86:65:16:1d:ae:e7:93:7e:9c:
         8a:a6:f0:58:8e:bb:2e:40:47:93:f7:50:40:4f:5b:f0:14:e1:
         02:5d:82:82:5f:92:b2:26:b7:9c:e2:71:3e:11:12:45:a4:e6:
         52:fc:76:c9:b1:14:7c:fe:92:f4:a2:b3:77:5e:32:ca:6e:59:
         92:42:c4:7e:9c:86:5c:1b:f2:cd:08:83:e9:3b:00:65:ef:95:
         05:db:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:02:17 2025 by rpki-client