Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/DuBW_qJiBPrNW6IybNEiH42sqwc.roa
File:                     DuBW_qJiBPrNW6IybNEiH42sqwc.roa (raw, json)
Hash identifier:          52DR1LpsHmQViQuvpCI4qjnKq/WUGHBov8c+O/FGgxE=
Subject key identifier:   0E:E0:56:FE:A2:62:04:FA:CD:5B:A2:32:6C:D1:22:1F:8D:AC:AB:07
Certificate issuer:       /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
Certificate serial:       0361
Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/DuBW_qJiBPrNW6IybNEiH42sqwc.roa
Signing time:             Mon 10 Feb 2025 14:00:27 +0000
ROA not before:           Mon 10 Feb 2025 14:00:27 +0000
ROA not after:            Thu 28 Aug 2025 15:30:19 +0000
asID:                     396982
IP address blocks:        160.30.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
        Validity
            Not Before: Feb 10 14:00:27 2025 GMT
            Not After : Aug 28 15:30:19 2025 GMT
        Subject: CN=0EE056FEA26204FACD5BA2326CD1221F8DACAB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:02:d7:52:30:e8:50:b7:6d:a8:ad:20:58:
                    0c:33:a2:c5:cc:91:f8:9e:02:27:b4:39:a8:a2:8d:
                    fe:aa:38:25:7c:60:3b:29:9b:dd:6b:d0:fb:e7:b1:
                    34:b8:52:e6:9d:17:a8:85:3c:c2:83:27:f5:fb:d9:
                    36:ec:74:88:ba:3b:e1:fc:a7:af:31:2d:e8:09:8f:
                    af:66:35:25:ab:b3:3c:f6:40:5c:e8:cc:83:86:de:
                    0d:a2:c0:81:94:c4:42:c8:5c:c5:99:76:f3:23:ce:
                    bf:e2:6a:ca:59:9d:9c:ee:9a:d1:3b:b1:a8:10:ed:
                    d7:59:d3:6b:05:3b:4e:71:a3:cd:72:aa:5a:ab:62:
                    4a:f3:00:7f:db:7e:aa:0a:d4:56:14:3c:31:1e:bc:
                    d0:32:95:f6:d1:ff:cd:fb:44:c0:e1:7a:ee:56:1d:
                    d6:0d:10:a7:67:06:19:ba:65:12:9e:2f:5c:79:aa:
                    6d:bc:b6:c1:11:e2:24:7e:bb:50:16:74:c9:40:59:
                    3c:4e:0c:1a:c3:2f:b1:2e:6c:b7:c4:d7:e0:0f:7a:
                    1f:f3:06:55:af:ca:9a:1d:2b:98:67:d6:91:04:f7:
                    5a:e9:ab:6b:5a:6e:7c:44:c0:ac:13:d7:95:e8:dc:
                    91:59:c2:6f:39:a8:1e:5c:e8:9a:3e:58:5b:73:9a:
                    b8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E0:56:FE:A2:62:04:FA:CD:5B:A2:32:6C:D1:22:1F:8D:AC:AB:07
            X509v3 Authority Key Identifier:
                keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/DuBW_qJiBPrNW6IybNEiH42sqwc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:62:fd:89:8c:04:54:f7:17:1b:b7:75:d6:78:9a:02:a7:e4:
         21:72:49:77:44:24:16:f7:1b:b9:4f:fd:d6:03:dd:97:56:c6:
         5d:4c:b7:47:9a:c5:48:7b:bc:91:72:96:57:0c:48:63:4a:e6:
         e7:90:2a:b1:32:1a:94:02:67:88:31:fc:2f:8d:68:c2:4e:4e:
         f3:32:d7:ab:7d:54:f7:c0:09:7d:20:93:b5:47:ad:fa:91:c5:
         a5:82:13:59:8c:ef:9e:83:c2:d0:a7:c6:62:dc:38:08:2d:ed:
         2d:44:58:6f:82:fd:81:79:92:3b:cc:f0:6d:53:f1:c8:7e:ec:
         f7:74:48:a1:56:7a:de:07:0c:7e:bd:53:9e:64:d8:72:d2:7c:
         d5:9e:47:1a:7f:b5:de:e4:e3:40:08:68:62:7f:c4:fa:ce:2a:
         0b:0c:36:4f:87:ae:e8:ac:49:95:ad:76:a8:0c:2b:d8:a3:0a:
         3e:7f:9b:d1:d9:a9:bd:d1:66:19:45:dc:5d:7d:97:23:25:a9:
         dd:8b:72:e3:8f:89:05:ac:43:94:c7:6f:3d:6e:b7:e6:d4:e5:
         8d:1c:f0:45:53:df:bd:67:7e:97:fa:e6:5d:b9:ae:7d:ac:59:
         8e:90:c4:27:72:d8:85:fd:70:63:9e:71:7f:66:6e:9b:e9:0b:
         3e:2a:b2:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:27:34 2025 by rpki-client