Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/79jaa3KW1BX49iynPVA8_Yk-Ly4.roa
File:                     79jaa3KW1BX49iynPVA8_Yk-Ly4.roa (raw, json)
Hash identifier:          9eigHpHl8K1C+DHq+/l1rzr+VMKG92zrNmMYDTTg41o=
Subject key identifier:   EF:D8:DA:6B:72:96:D4:15:F8:F6:2C:A7:3D:50:3C:FD:89:3E:2F:2E
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0CCB
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/79jaa3KW1BX49iynPVA8_Yk-Ly4.roa
Signing time:             Mon 10 Feb 2025 14:12:56 +0000
ROA not before:           Mon 10 Feb 2025 14:12:56 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18046
IP address blocks:        103.130.40.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Feb 10 14:12:56 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=EFD8DA6B7296D415F8F62CA73D503CFD893E2F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f7:e5:cc:2a:17:92:fd:a3:7a:ec:23:ab:13:
                    ad:55:c4:2b:87:c7:68:16:46:0e:63:e3:9c:48:7e:
                    48:1a:ff:2d:dd:31:94:7e:d8:e3:60:77:01:d5:6c:
                    2b:7b:2a:a3:a8:79:a4:7b:0d:a9:65:9a:2c:a1:df:
                    c2:48:fb:76:35:58:0e:ec:81:ed:e3:dc:dd:94:5f:
                    00:71:ab:ec:ba:55:0a:80:7e:7c:39:6d:bc:93:6d:
                    09:02:48:2d:4b:86:7e:74:8e:f9:ad:1d:8f:26:21:
                    ed:f1:d9:88:7c:91:98:d5:f7:b5:a4:b1:69:d5:5e:
                    ea:6f:b7:7a:da:e8:b1:eb:cf:cc:db:72:72:a0:ad:
                    3b:6e:f2:97:14:04:e4:85:d8:eb:74:58:5e:00:7a:
                    f4:82:5e:a2:99:cb:2e:66:1f:fd:b7:e9:86:60:61:
                    ca:a2:d6:7a:16:c5:99:21:37:04:6e:8c:b8:12:2c:
                    9a:c0:8b:68:27:6e:18:a8:50:e6:b6:3d:70:56:e8:
                    9a:ce:cc:64:79:c7:38:92:cc:3e:f2:ee:f7:79:ce:
                    81:59:9d:85:8f:0d:46:31:31:48:79:81:3b:5c:ff:
                    86:dc:ef:4d:3b:15:41:de:63:26:7c:53:d9:68:f8:
                    d3:99:b1:70:ad:db:8e:f1:b8:62:46:2d:47:7d:2c:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:DA:6B:72:96:D4:15:F8:F6:2C:A7:3D:50:3C:FD:89:3E:2F:2E
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/79jaa3KW1BX49iynPVA8_Yk-Ly4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:e0:90:af:11:36:f7:0e:ef:88:22:16:d3:a5:bd:ec:70:
         75:88:bb:ce:85:4e:71:b9:54:f3:ec:b6:0f:95:5c:12:6e:1d:
         c6:b2:75:67:ad:99:bc:6b:c6:ec:b2:23:f3:dd:d7:7a:95:b4:
         65:fc:79:81:c3:69:7e:10:49:6e:b0:d3:74:3b:b0:2d:2b:b6:
         d2:99:96:93:83:5b:ee:bd:18:c7:a2:00:2c:3f:b9:b5:2b:98:
         60:38:a0:e2:97:f3:a6:e2:f6:70:22:a4:11:50:a4:8e:8a:76:
         b9:3a:e6:8f:f0:1b:f3:cd:1a:be:d1:6a:6c:98:c1:77:59:ce:
         3e:bf:49:54:8e:03:1e:6e:4b:0b:f2:76:ea:92:4c:7b:61:0c:
         a5:4c:3a:fb:bb:06:6a:dc:37:98:5f:99:66:5d:3a:3f:e5:d0:
         fa:a6:0a:0b:7f:d5:7e:c8:27:e1:a4:cb:7e:c7:81:03:bc:81:
         ff:3c:68:24:97:10:1f:0e:ed:64:15:31:e7:ee:ac:dd:92:70:
         bb:48:bf:fa:ea:5b:c8:3b:34:8a:fa:d5:c1:ab:b6:ee:a2:40:
         0e:0b:d0:1e:c0:fa:ff:e6:0f:83:e8:88:f5:18:33:03:d9:e2:
         e4:3a:60:2e:08:73:bb:db:e8:56:f7:de:ec:dd:11:0b:ca:e7:
         30:92:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:26:41 2025 by rpki-client