Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/djvANNZbAIWbkl_ut7bQ4InmAvs.roa
File:                     djvANNZbAIWbkl_ut7bQ4InmAvs.roa (raw, json)
Hash identifier:          Yb4z3vaWo9vfCebZgNZfqNPpy4dJlYM6LyFftgcRoSk=
Subject key identifier:   76:3B:C0:34:D6:5B:00:85:9B:92:5F:EE:B7:B6:D0:E0:89:E6:02:FB
Certificate issuer:       /CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
Certificate serial:       037C
Authority key identifier: 00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/djvANNZbAIWbkl_ut7bQ4InmAvs.roa
Signing time:             Mon 10 Feb 2025 13:57:04 +0000
ROA not before:           Mon 10 Feb 2025 13:57:04 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38852
IP address blocks:        2407:a740::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00DCF050C4CEAE5021AA8D311953F02D6121FD8D
        Validity
            Not Before: Feb 10 13:57:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=763BC034D65B00859B925FEEB7B6D0E089E602FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:48:f7:4d:e9:d0:75:1b:8d:fb:fd:33:69:
                    6d:8e:eb:84:cb:d8:08:22:f9:28:82:b2:76:f2:19:
                    bf:5e:bb:28:8c:ed:13:fe:29:f1:ab:7b:43:08:4c:
                    12:df:83:97:b7:e4:a6:6d:64:66:fd:77:a7:23:89:
                    56:f9:b7:4c:2a:1f:4d:10:2e:ae:d4:17:a7:89:21:
                    5d:35:81:7b:13:9c:61:16:db:7f:87:c0:6d:a4:07:
                    08:e8:30:cd:a6:61:ec:2d:9a:a7:fa:5f:e7:0d:e1:
                    e1:cc:25:47:81:97:56:0d:34:0b:8e:6a:29:13:dd:
                    63:6e:e7:cc:a0:09:2e:5c:87:c9:eb:e1:a7:1f:7e:
                    cb:dd:d8:68:cc:f2:20:6c:f9:47:c0:80:6e:47:47:
                    98:db:d3:ed:73:22:05:6a:b2:5a:48:bc:96:cc:01:
                    be:6c:81:7c:1b:b5:0e:12:0a:a5:4f:f9:af:8b:91:
                    cf:fd:7a:99:ab:b3:93:c6:86:f4:4b:73:2e:05:ac:
                    8a:8a:60:b9:81:90:fd:94:55:90:43:ba:ce:75:81:
                    c7:f4:26:b8:7a:ef:b5:95:af:8d:c6:61:59:97:38:
                    49:08:07:d7:47:5f:41:af:e4:57:94:3d:22:27:95:
                    94:cf:5d:02:23:04:4d:de:dc:04:f6:d6:a1:e8:10:
                    1a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3B:C0:34:D6:5B:00:85:9B:92:5F:EE:B7:B6:D0:E0:89:E6:02:FB
            X509v3 Authority Key Identifier:
                keyid:00:DC:F0:50:C4:CE:AE:50:21:AA:8D:31:19:53:F0:2D:61:21:FD:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ANzwUMTOrlAhqo0xGVPwLWEh_Y0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HAPPYMONEY/djvANNZbAIWbkl_ut7bQ4InmAvs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a740::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:59:a5:0f:d7:38:a3:0c:64:2b:ca:5a:8c:95:a3:9a:87:e2:
         38:a8:98:b7:ce:4c:12:db:9b:20:b5:31:ad:e4:ad:49:59:d5:
         c3:18:2a:62:35:6b:0a:fe:39:9e:77:a6:1d:49:04:24:ab:d9:
         bc:22:f4:c8:54:d3:fd:42:63:b3:30:bb:a7:4b:b3:b8:b3:aa:
         63:5d:a8:0e:05:26:55:ee:73:2f:6b:bf:ac:5d:bc:f3:9c:e9:
         a4:ee:59:4f:01:ce:cb:5e:1e:23:72:0d:bc:a9:31:30:7e:cb:
         01:48:48:1b:d9:99:25:fd:97:ef:c8:f2:9c:fb:26:aa:fe:6e:
         c4:b1:da:de:7d:17:49:6e:57:6e:ef:be:a6:02:56:e9:3d:24:
         8d:ba:92:e3:ed:84:92:c7:70:89:f0:60:48:06:08:e1:96:1c:
         a0:ff:fc:52:0b:c7:c4:4c:fe:e6:88:b8:8d:da:6e:97:95:3a:
         cd:3d:1d:4f:db:7e:ab:f9:e2:bd:31:9b:32:d7:c6:94:9c:87:
         86:9b:a9:8f:e7:5c:ab:b9:15:64:88:39:f0:22:42:93:5c:3f:
         da:04:64:bc:75:80:42:e0:8f:05:b0:4b:16:ac:6d:b0:53:25:
         f6:05:b3:b2:d2:2d:20:43:f7:56:b7:f4:14:40:ed:1d:83:c1:
         7b:c3:b0:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:38 2025 by rpki-client