Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/e6TaqBe9W8P68A3gmuvjLzruSGE.roa
File:                     e6TaqBe9W8P68A3gmuvjLzruSGE.roa (raw, json)
Hash identifier:          VKUBKmYiXeBdOXqHEUCt2D2WPLKQpE0Imj5FOBuOYzQ=
Subject key identifier:   7B:A4:DA:A8:17:BD:5B:C3:FA:F0:0D:E0:9A:EB:E3:2F:3A:EE:48:61
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       17A0
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e6TaqBe9W8P68A3gmuvjLzruSGE.roa
Signing time:             Wed 12 Feb 2025 01:36:54 +0000
ROA not before:           Wed 12 Feb 2025 01:36:54 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     54994
IP address blocks:        203.74.117.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6048 (0x17a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 12 01:36:54 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=7BA4DAA817BD5BC3FAF00DE09AEBE32F3AEE4861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:1b:ea:04:ad:1a:bb:7c:29:e2:08:f0:25:
                    5b:95:b5:ba:3c:64:d6:76:bb:af:d8:72:ec:3a:c2:
                    cd:f5:4b:e2:bf:18:59:87:a2:d1:d2:14:20:5c:8d:
                    61:d4:24:ec:4b:ce:80:fc:ca:29:7d:99:2b:81:f1:
                    3e:0f:75:b6:27:f7:bb:b1:d4:3d:6c:ef:76:77:2d:
                    45:15:d0:9d:de:60:14:1b:03:b0:93:f7:f7:9b:30:
                    b5:3c:c3:0a:6e:32:1d:7a:7e:ef:83:c8:26:7f:48:
                    0e:b6:15:68:4b:da:ba:d9:f8:cc:e3:45:a8:d2:b8:
                    b9:02:22:dd:ae:ce:16:89:38:2d:f2:6a:4c:34:35:
                    06:b2:0c:d7:e1:84:9c:06:f2:0a:4a:ac:de:ab:31:
                    05:21:92:2f:65:6b:5c:f9:01:bf:74:d5:df:a7:f5:
                    b1:fd:a4:08:c9:af:fb:8e:e4:92:48:40:c9:fe:21:
                    8a:41:4e:ae:8e:b8:9e:21:e1:98:02:1a:dc:78:0a:
                    19:02:94:85:97:2b:8a:1b:33:b5:07:34:f4:36:8e:
                    d8:c8:70:90:04:ec:5e:f2:e4:5b:8e:55:ee:eb:e5:
                    4f:81:7f:3c:b7:6d:de:8a:55:60:52:9b:b2:5e:9b:
                    f6:46:0b:98:1f:77:50:9d:26:0b:65:25:ab:56:d7:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:DA:A8:17:BD:5B:C3:FA:F0:0D:E0:9A:EB:E3:2F:3A:EE:48:61
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/e6TaqBe9W8P68A3gmuvjLzruSGE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.74.117.0/25

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:e4:95:7e:92:7c:ec:29:ad:4c:43:a8:6d:d5:13:93:e6:
         09:d4:87:b4:22:3b:45:24:16:9e:a3:a2:18:5e:e1:a6:27:96:
         be:1c:de:1b:0e:ca:16:b2:54:2d:05:73:e3:81:b5:12:5f:7c:
         67:ce:88:0a:99:9f:fb:62:01:e3:10:9b:71:2b:eb:06:14:9e:
         4d:15:bf:11:55:15:7b:22:54:47:0d:65:71:4e:8c:4c:75:a3:
         3e:7e:d9:ba:31:fb:0c:8c:d4:83:72:15:f0:38:c0:b2:4b:8b:
         32:fb:83:fd:7b:64:d6:9c:23:d1:2f:8b:84:79:53:a7:d1:80:
         67:9b:84:ac:b1:a8:a3:72:b0:d7:79:80:30:6a:c4:f7:01:88:
         b8:93:c1:b7:71:3b:e5:6f:78:3f:46:ba:52:a6:ef:ee:8d:85:
         b1:86:8c:88:45:51:b0:ed:61:4f:99:b7:8e:a4:4b:aa:30:eb:
         ce:19:f1:43:a8:98:27:0a:8a:2f:55:51:73:20:67:1f:38:9e:
         9c:04:e2:19:8d:82:88:c3:d5:5a:74:6a:15:ed:3a:a8:ed:1c:
         31:7b:b0:03:ab:4c:d4:85:c2:c8:9a:80:a9:17:5c:aa:0d:b9:
         3b:3e:10:fb:e3:a2:53:b3:73:c6:91:cf:07:30:ca:2e:d8:4d:
         ba:18:50:19
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICF6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTIw
MTM2NTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdCQTREQUE4MTdCRDVC
QzNGQUYwMERFMDlBRUJFMzJGM0FFRTQ4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFrRvqBK0au3wp4gjwJVuVtbo8ZNZ2u6/Ycuw6ws31S+K/GFmH
otHSFCBcjWHUJOxLzoD8yil9mSuB8T4PdbYn97ux1D1s73Z3LUUV0J3eYBQbA7CT
9/ebMLU8wwpuMh16fu+DyCZ/SA62FWhL2rrZ+MzjRajSuLkCIt2uzhaJOC3yakw0
NQayDNfhhJwG8gpKrN6rMQUhki9la1z5Ab901d+n9bH9pAjJr/uO5JJIQMn+IYpB
Tq6OuJ4h4ZgCGtx4ChkClIWXK4obM7UHNPQ2jtjIcJAE7F7y5FuOVe7r5U+Bfzy3
bd6KVWBSm7Jem/ZGC5gfd1CdJgtlJatW107fAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUe6TaqBe9W8P68A3gmuvjLzruSGEwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9lNlRhcUJlOVc4UDY4QTNnbXV2
akx6cnVTR0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHy0p1
ADANBgkqhkiG9w0BAQsFAAOCAQEAYEzklX6SfOwprUxDqG3VE5PmCdSHtCI7RSQW
nqOiGF7hpieWvhzeGw7KFrJULQVz44G1El98Z86ICpmf+2IB4xCbcSvrBhSeTRW/
EVUVeyJURw1lcU6MTHWjPn7ZujH7DIzUg3IV8DjAskuLMvuD/Xtk1pwj0S+LhHlT
p9GAZ5uErLGoo3Kw13mAMGrE9wGIuJPBt3E75W94P0a6Uqbv7o2FsYaMiEVRsO1h
T5m3jqRLqjDrzhnxQ6iYJwqKL1VRcyBnHzienATiGY2CiMPVWnRqFe06qO0cMXuw
A6tM1IXCyJqAqRdcqg25Oz4Q++OiU7NzxpHPBzDKLthNuhhQGQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:24:25 2025 by rpki-client