Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/j2txO-1uU0yor-gOVggZ3X7ZrHU.roa
File:                     j2txO-1uU0yor-gOVggZ3X7ZrHU.roa (raw, json)
Hash identifier:          O+o/AGxCvKvKwBE97uMgeE2RYD5rx6I1yk5C+XWbDXQ=
Subject key identifier:   8F:6B:71:3B:ED:6E:53:4C:A8:AF:E8:0E:56:08:19:DD:7E:D9:AC:75
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0CD3
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/j2txO-1uU0yor-gOVggZ3X7ZrHU.roa
Signing time:             Mon 10 Feb 2025 14:12:58 +0000
ROA not before:           Mon 10 Feb 2025 14:12:58 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        61.60.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3283 (0xcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Feb 10 14:12:58 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8F6B713BED6E534CA8AFE80E560819DD7ED9AC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:24:fb:b2:a5:f2:c6:fb:83:e1:8e:49:9f:
                    5b:a4:8c:71:c5:7a:2f:a2:1a:56:58:a5:3d:9e:f8:
                    ef:aa:e0:47:28:f1:59:db:eb:a6:6f:bd:0d:33:79:
                    52:41:06:9c:d8:60:c7:f1:80:bc:f5:8a:a6:d6:72:
                    a7:72:be:3e:c6:f5:02:5e:9f:c5:ff:25:df:7b:4b:
                    b4:ac:ac:95:97:e2:ae:ca:16:84:3d:fe:2b:73:e3:
                    79:21:e0:16:fd:30:4a:a8:a4:ab:ef:8d:3f:fa:fb:
                    1b:2b:19:b9:63:bb:92:b7:00:2f:48:4d:05:66:08:
                    e6:61:69:1b:b5:de:23:f8:b7:47:b9:6e:99:45:10:
                    cf:f8:b7:f4:8e:ef:cd:79:c3:b2:54:94:8b:64:33:
                    e4:e0:71:44:2c:53:1d:71:48:9b:d3:f5:70:4b:f4:
                    a9:77:6d:fa:af:c9:6b:b4:f0:3b:bf:6d:61:dc:a3:
                    1a:2a:4b:f3:67:aa:c0:d0:eb:6d:c6:4b:bc:b3:e1:
                    86:ff:f2:8e:f5:1f:db:da:58:6f:56:52:2a:3b:5a:
                    92:e8:8b:7e:fe:47:b7:7f:10:d4:2c:e2:0a:5c:7f:
                    47:e0:d6:fe:5c:e4:db:2a:68:b3:84:59:31:3d:b3:
                    78:92:d1:08:af:a4:2b:35:a2:e7:17:65:c8:ab:e0:
                    bc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6B:71:3B:ED:6E:53:4C:A8:AF:E8:0E:56:08:19:DD:7E:D9:AC:75
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/j2txO-1uU0yor-gOVggZ3X7ZrHU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:96:e6:a6:66:94:68:9a:71:23:40:ef:71:0e:f0:4e:8a:fc:
         9e:c4:70:73:85:ca:98:25:eb:0b:86:d4:2e:1f:ef:67:a0:87:
         6d:12:2a:ef:7b:d2:7c:40:7a:b5:66:26:d0:56:65:43:20:b1:
         33:a9:21:78:90:4c:35:fe:5a:e6:c2:a0:3d:6d:f8:fe:dc:ca:
         7a:9e:c8:bb:a2:80:9c:cd:dc:35:cf:bf:c0:5e:46:aa:4c:8a:
         8b:84:05:d1:b3:2f:f9:1f:9b:64:b0:7f:84:81:20:46:28:4f:
         7f:61:f3:6e:a6:9e:04:55:ce:92:94:e8:7e:b4:88:ab:43:26:
         0b:38:d8:f1:25:5b:b7:cf:46:f6:ed:71:2f:b3:fb:0b:a6:32:
         45:7b:ec:13:cd:32:27:a4:d6:65:ee:c3:69:de:51:f4:ad:6a:
         7e:99:38:ef:bf:2b:b2:33:f0:59:a6:c0:70:d5:95:97:e4:c7:
         33:c1:59:93:48:26:a4:f5:48:eb:cb:fa:c2:81:6a:42:4d:87:
         81:e9:5c:66:a3:31:1d:71:9c:bc:4a:62:1d:ca:da:b6:b1:45:
         2c:83:88:dc:b7:fc:a5:ca:ae:8b:fb:30:cc:25:6c:fb:9e:7d:
         94:68:37:e4:9d:96:a5:de:dd:13:b0:38:9c:e0:47:7b:fe:e0:
         9d:7e:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:02:48 2025 by rpki-client