Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/heWJBlps54okDsNNj3dalgVqQUA.roa
File:                     heWJBlps54okDsNNj3dalgVqQUA.roa (raw, json)
Hash identifier:          LhekOR+P+a9OpGanl9t4UfjYmtBhX/9v2H0Ums6lAfo=
Subject key identifier:   85:E5:89:06:5A:6C:E7:8A:24:0E:C3:4D:8F:77:5A:96:05:6A:41:40
Certificate issuer:       /CN=3EEECD25278C89CD0DD3FCCCBCFDD5AE6DDD15F4
Certificate serial:       04
Authority key identifier: 3E:EE:CD:25:27:8C:89:CD:0D:D3:FC:CC:BC:FD:D5:AE:6D:DD:15:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Pu7NJSeMic0N0_zMvP3Vrm3dFfQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/heWJBlps54okDsNNj3dalgVqQUA.roa
Signing time:             Thu 17 Feb 2022 04:54:28 +0000
ROA not before:           Thu 17 Feb 2022 04:54:28 +0000
ROA not after:            Fri 17 Feb 2023 04:38:03 +0000
asID:                     131653
IP address blocks:        103.178.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EEECD25278C89CD0DD3FCCCBCFDD5AE6DDD15F4
        Validity
            Not Before: Feb 17 04:54:28 2022 GMT
            Not After : Feb 17 04:38:03 2023 GMT
        Subject: CN=85E589065A6CE78A240EC34D8F775A96056A4140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:7a:f8:d5:58:61:9e:e2:78:0b:b9:03:e8:
                    a0:f8:6b:da:07:f5:a3:75:06:ad:14:22:68:38:57:
                    c8:07:31:13:d8:84:d9:cf:77:66:6b:43:37:ef:76:
                    61:70:1e:99:fd:aa:41:4c:fb:e7:05:08:62:c3:96:
                    79:50:fa:e0:fb:16:1c:99:09:43:98:c6:e3:ab:96:
                    73:3a:b3:e1:84:f2:2f:e7:d8:4f:d0:09:c4:1f:86:
                    01:b3:14:05:16:a5:3f:28:85:60:f2:31:97:03:1a:
                    3f:dd:38:7c:6a:82:54:ee:e9:b1:8a:61:e0:0b:54:
                    6a:d4:9b:45:b9:82:03:6b:d8:84:10:f5:ab:d7:16:
                    f7:7b:aa:f0:6a:3d:fe:46:29:88:46:bf:5f:5d:3b:
                    d7:56:86:c3:47:4d:ef:d2:50:2a:86:7f:9b:b4:43:
                    e4:b1:32:e9:11:01:66:5e:40:bb:cc:ab:3e:60:05:
                    ef:b0:fd:05:35:6a:89:63:35:ee:96:81:bd:48:3c:
                    c7:c3:80:8b:86:5c:30:2b:bc:65:a2:12:d6:89:d0:
                    1e:49:b8:f3:f1:7a:b6:02:92:69:c3:8d:e6:6e:0f:
                    f2:2b:0a:cc:0a:84:b7:1b:81:af:d3:df:3e:5b:ce:
                    77:80:eb:97:5f:f1:27:1e:d0:72:8a:93:02:bd:0f:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E5:89:06:5A:6C:E7:8A:24:0E:C3:4D:8F:77:5A:96:05:6A:41:40
            X509v3 Authority Key Identifier:
                keyid:3E:EE:CD:25:27:8C:89:CD:0D:D3:FC:CC:BC:FD:D5:AE:6D:DD:15:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/Pu7NJSeMic0N0_zMvP3Vrm3dFfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Pu7NJSeMic0N0_zMvP3Vrm3dFfQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FORCECLOUD/heWJBlps54okDsNNj3dalgVqQUA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:70:94:fe:89:30:dc:c4:d5:71:09:5b:60:25:9e:17:27:
         04:a8:96:20:72:8f:03:70:59:a0:b5:c6:38:8a:3f:2d:ca:85:
         9e:db:64:33:7f:30:42:5e:cc:c8:18:9d:98:90:3d:aa:d6:c9:
         f0:85:8e:9c:7b:16:b0:c2:1e:26:14:ac:e6:72:f3:a0:8e:ce:
         76:a5:e9:be:ab:31:ed:a7:d8:b3:b3:e2:a7:27:fb:8f:b9:de:
         16:5b:9d:7f:90:b6:cb:98:d5:eb:b2:f3:ab:62:13:6a:a7:68:
         dc:a9:f0:e4:a6:4e:9d:34:dc:88:b8:ce:99:4b:75:cd:b2:3f:
         ce:40:50:03:40:7e:c6:26:cb:11:af:75:81:ad:05:0d:3e:14:
         ee:8a:c9:12:be:b7:76:95:1e:1b:b6:a2:c7:17:24:eb:99:1c:
         30:06:bc:b8:72:a4:8a:f7:e1:7c:0d:26:46:96:cf:6b:af:8f:
         9d:30:d7:69:3f:ce:45:91:11:24:f9:98:5d:03:b2:ae:a6:33:
         1e:1d:de:ee:5d:04:08:76:1f:92:5d:23:7e:1b:95:bf:41:d8:
         dd:9e:b3:8d:9f:ba:64:ab:77:fb:40:8f:fc:7f:96:3d:c4:ec:
         d9:5c:59:a7:c8:aa:a5:76:76:9f:ef:aa:37:89:5c:cc:29:a8:
         0c:e2:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:15 2025 by rpki-client