Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/mlxXFALrzalp53y_A6e7N1cQVtg.roa
File:                     mlxXFALrzalp53y_A6e7N1cQVtg.roa (raw, json)
Hash identifier:          ex1rrrBHJ3k96+H3kRi8uCNJvdFp5GnJFsIgr93z2RM=
Subject key identifier:   9A:5C:57:14:02:EB:CD:A9:69:E7:7C:BF:03:A7:BB:37:57:10:56:D8
Certificate issuer:       /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
Certificate serial:       036E
Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/mlxXFALrzalp53y_A6e7N1cQVtg.roa
Signing time:             Mon 10 Feb 2025 14:00:26 +0000
ROA not before:           Mon 10 Feb 2025 14:00:26 +0000
ROA not after:            Thu 28 Aug 2025 15:30:19 +0000
asID:                     215262
IP address blocks:        2401:bf60:4ff9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361
        Validity
            Not Before: Feb 10 14:00:26 2025 GMT
            Not After : Aug 28 15:30:19 2025 GMT
        Subject: CN=9A5C571402EBCDA969E77CBF03A7BB37571056D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:f5:ae:53:c3:f6:7f:1b:e4:f1:2d:06:c8:
                    b2:22:fc:99:ef:9e:a4:1f:23:10:a2:7f:76:21:b1:
                    35:54:f7:9b:07:ab:05:58:70:a0:b8:10:4e:90:79:
                    ab:3f:60:56:9c:4d:fd:83:86:78:78:55:ab:32:80:
                    f0:af:ca:6b:30:8a:78:2e:45:a9:c7:eb:7c:cd:5f:
                    6e:48:ce:b7:2d:4e:32:07:d7:41:77:4d:77:89:a8:
                    5e:8d:e1:21:a8:11:6b:b7:ef:68:13:ea:6c:5e:3f:
                    bb:00:f7:b0:62:1f:3b:46:9d:3c:69:e7:b4:c2:80:
                    73:ad:7f:aa:7f:02:83:4f:74:63:d6:ad:07:ae:05:
                    19:f8:0e:4b:b5:ae:71:5e:23:5f:83:8e:c1:4b:70:
                    e8:59:f7:40:57:0f:8f:d5:8f:12:87:3c:08:ad:c1:
                    d4:a2:2b:25:2e:27:77:3e:1a:7b:b9:80:de:d0:d1:
                    8e:6d:3d:74:cf:3a:3c:6b:39:23:49:fe:26:5a:b0:
                    ea:25:c9:49:d5:06:6a:2c:de:d9:13:17:26:6d:8d:
                    7f:7d:0b:37:b3:6c:3f:87:a8:e0:25:85:ce:b8:73:
                    ff:5a:23:f6:2a:21:75:21:81:39:f3:7c:99:9e:f7:
                    cd:ad:91:c1:4b:69:c0:73:9e:5a:2c:a2:5f:c1:f8:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5C:57:14:02:EB:CD:A9:69:E7:7C:BF:03:A7:BB:37:57:10:56:D8
            X509v3 Authority Key Identifier:
                keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/mlxXFALrzalp53y_A6e7N1cQVtg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf60:4ff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:5d:ea:e1:f2:66:c2:0b:76:b5:12:ea:23:f4:86:4b:1b:
         5c:66:9c:cd:3e:4f:a4:89:01:8b:16:95:97:ae:4b:d7:30:4c:
         68:f4:96:87:5d:c3:81:08:0b:26:49:18:59:3a:de:78:be:a1:
         a5:33:0f:52:a8:84:35:93:1a:83:fd:5e:06:6d:c0:4e:89:a3:
         e0:ab:93:56:42:1d:ec:da:b7:9f:68:e4:65:8e:a2:5e:7d:9d:
         03:d2:7e:b6:ed:52:c8:ac:05:ec:29:1e:e1:91:31:be:78:13:
         ab:84:f5:01:47:0a:60:ad:56:51:71:3a:31:52:03:03:42:1d:
         90:36:c7:9a:43:3a:c6:09:ee:59:17:21:76:ea:03:84:8d:2b:
         98:36:c0:fa:58:60:8b:c7:fe:4e:19:cc:b0:22:96:62:38:a4:
         b4:7d:06:79:2c:d2:3a:b7:06:94:87:81:3e:6d:a8:80:ac:78:
         0e:84:77:62:f6:fc:32:27:5b:ae:7a:10:23:dc:92:d0:2d:90:
         4f:a3:4a:91:f5:a8:a0:25:6b:76:e5:38:b9:b3:61:b1:4d:94:
         b6:a4:90:dc:35:08:db:e4:37:2f:3e:65:73:fe:cc:16:61:30:
         13:c5:9e:4b:eb:ca:39:df:b6:95:8e:79:83:ea:2e:fd:69:0f:
         75:79:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:42 2025 by rpki-client