Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa
File:                     pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa (raw, json)
Hash identifier:          J6hXIXFz8nEqq1MKQ7z2MnOjT2yjCfpGFKOxegpeS1U=
Subject key identifier:   A5:1C:DB:C4:17:E3:2C:C8:DC:B3:53:30:48:35:46:88:03:15:33:29
Certificate issuer:       /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial:       0CEF
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa
Signing time:             Mon 10 Feb 2025 14:10:18 +0000
ROA not before:           Mon 10 Feb 2025 14:10:18 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18046
IP address blocks:        121.50.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3311 (0xcef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
        Validity
            Not Before: Feb 10 14:10:18 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A51CDBC417E32CC8DCB353304835468803153329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:a2:5d:b0:9c:c0:fc:5a:93:35:a9:22:34:
                    6e:73:09:cd:25:fb:53:e9:7f:fb:66:0e:b1:80:f4:
                    1c:25:50:a5:3e:b7:d7:0e:46:5f:e7:f2:02:fd:d2:
                    71:3c:d7:4d:6e:38:bb:8b:55:c1:6c:72:ed:3b:04:
                    19:1a:82:97:a3:16:18:f6:5a:80:d3:d9:7f:45:34:
                    44:21:bb:7e:63:96:4c:c4:40:6e:dc:77:82:ac:31:
                    ca:dd:f2:6d:18:23:96:06:70:94:eb:bb:68:68:ff:
                    65:58:75:ac:9c:2e:74:09:c3:ea:9a:0b:10:1c:a4:
                    cf:37:75:70:9f:ae:45:9f:3d:a7:e4:33:c6:70:a4:
                    2a:16:49:48:9b:53:ed:9c:2b:04:8d:ed:60:d4:ca:
                    f3:8e:84:69:61:42:10:3e:ff:3a:a9:40:fa:a0:6e:
                    7f:f7:12:57:02:f7:f5:f9:77:06:af:90:b3:36:c1:
                    6c:0a:c4:45:38:eb:0b:e7:78:62:60:db:fd:50:a8:
                    0e:bb:4f:aa:a8:6f:90:9b:ca:1c:0d:e2:16:2c:6d:
                    16:91:68:b7:ee:49:3c:57:0a:a4:7d:6e:ca:ec:32:
                    44:95:12:93:8e:fd:40:4b:4a:6b:02:8f:0d:b2:9f:
                    ef:0a:c5:ff:ce:b0:75:d4:98:ac:b3:a6:c6:b0:66:
                    5c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1C:DB:C4:17:E3:2C:C8:DC:B3:53:30:48:35:46:88:03:15:33:29
            X509v3 Authority Key Identifier:
                keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/pRzbxBfjLMjcs1MwSDVGiAMVMyk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:2d:6a:fc:ea:4d:ff:aa:a9:46:e3:63:1b:0f:94:8a:16:15:
         65:d3:05:d0:38:1c:51:f6:06:06:35:9c:53:8b:24:75:db:5b:
         c7:42:83:c2:99:2e:84:69:17:39:4d:a7:af:ac:df:1c:89:e9:
         cf:98:85:79:35:c7:6a:ed:d9:1e:27:c3:89:00:f3:84:eb:7d:
         e3:0f:e8:49:84:7d:03:ea:b7:72:c9:e9:c5:c0:5e:fd:ca:48:
         57:00:ed:15:91:ff:4d:93:c4:13:ab:b2:c1:e6:9b:69:5d:f2:
         82:82:2a:ba:06:a4:fd:f3:b3:c7:f7:7c:05:b5:f0:a6:46:0f:
         24:8f:4c:d9:c4:2a:da:45:64:56:ec:40:38:51:5d:d7:a3:a7:
         24:e1:09:d1:91:c7:82:66:a3:43:e1:1a:55:90:fd:87:bf:24:
         12:ad:62:fa:f6:89:f3:db:53:be:f6:cb:a9:30:49:ac:e5:ce:
         4b:5c:3c:4a:d5:70:f2:20:40:7b:02:ee:cf:9d:83:b4:6e:0b:
         45:b6:8b:e8:b4:ba:8c:c6:8c:e2:2a:fb:6d:cb:bf:9d:7a:eb:
         b9:42:55:c6:c2:0d:de:ec:5b:c1:bc:77:54:44:29:12:d1:1d:
         02:d2:68:10:de:19:95:6d:39:c4:96:ed:43:95:68:48:f2:fe:
         3c:69:9b:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:16:41 2025 by rpki-client