Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jU4b6jxu_NSKCXq38So5K2iF2Nw.roa
File:                     jU4b6jxu_NSKCXq38So5K2iF2Nw.roa (raw, json)
Hash identifier:          qY9gKM53JuqjvpZ5hjnJcaeVSwIMrIBkMA0M1PkF9+M=
Subject key identifier:   8D:4E:1B:EA:3C:6E:FC:D4:8A:09:7A:B7:F1:2A:39:2B:68:85:D8:DC
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       17BC
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jU4b6jxu_NSKCXq38So5K2iF2Nw.roa
Signing time:             Wed 12 Feb 2025 01:37:01 +0000
ROA not before:           Wed 12 Feb 2025 01:37:01 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     3462
IP address blocks:        61.224.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6076 (0x17bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 12 01:37:01 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8D4E1BEA3C6EFCD48A097AB7F12A392B6885D8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:29:41:18:89:43:37:2b:da:db:61:db:e1:
                    67:76:ba:d8:66:93:ba:fc:5c:4f:90:c9:09:35:d2:
                    bb:9e:4c:77:83:78:de:5b:43:00:11:a6:c5:23:62:
                    23:98:48:46:55:08:94:49:37:d0:90:ee:75:93:88:
                    b0:c3:ac:8e:c8:52:dd:ba:21:44:96:2a:93:e2:6c:
                    9a:07:50:08:cf:9f:fd:29:48:bc:32:e9:91:af:a6:
                    5a:28:91:de:95:ab:99:d5:9f:e4:4d:a8:42:fa:df:
                    c9:25:bb:7d:eb:17:80:5f:0b:a7:64:19:90:70:47:
                    e5:54:12:1b:05:33:8a:36:aa:af:8d:d5:2d:57:b0:
                    1a:dc:77:9a:e2:ec:ff:ca:89:cf:a8:ed:ee:57:48:
                    73:9a:d2:0a:14:cb:80:43:1e:30:36:55:c1:3d:f3:
                    2d:1a:5a:2a:a7:40:7c:91:93:eb:87:3d:4a:e0:d5:
                    de:a7:38:60:23:9f:0a:27:2a:00:c9:b5:8b:f9:24:
                    ec:e3:ce:75:73:54:e2:3c:19:79:17:59:c1:44:d2:
                    a6:0a:a6:48:5a:c5:03:bb:d7:af:b9:23:b7:76:73:
                    27:f3:bb:0d:81:f8:8a:8e:12:27:36:6d:99:97:c8:
                    70:91:60:8f:6f:5a:03:e7:cc:63:8f:44:2d:c0:37:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:1B:EA:3C:6E:FC:D4:8A:09:7A:B7:F1:2A:39:2B:68:85:D8:DC
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jU4b6jxu_NSKCXq38So5K2iF2Nw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         50:67:b9:4a:f0:f3:c5:a9:df:51:2d:2f:4e:b8:db:fd:33:ab:
         87:5f:aa:79:a8:09:d2:ff:26:45:fe:35:e1:ed:0e:0c:ba:a9:
         28:9e:47:01:7c:b1:ed:44:ff:3d:9a:93:ab:b5:fd:1e:9a:d0:
         02:57:c9:16:49:07:08:42:ab:57:da:1f:6d:d9:fb:5d:ad:4d:
         86:33:f5:f1:08:97:a7:b4:22:ac:bd:fe:26:97:80:51:60:90:
         37:ba:23:6b:e6:52:60:a2:74:c3:9e:d1:8b:4a:5e:53:c9:e9:
         c3:bc:09:1a:48:e0:42:6b:ce:b3:c0:70:2d:9b:45:97:a9:cb:
         0d:14:e4:57:9c:81:74:68:a1:55:c3:bb:09:e6:a5:c1:51:c3:
         2b:4a:d4:5e:38:a9:a9:66:57:f1:a6:85:75:22:9a:68:4a:84:
         14:6b:1c:54:3b:b5:94:0f:6b:2a:a3:09:78:a7:52:ff:a2:ca:
         3d:55:6c:0c:bd:e8:0f:f5:ed:b8:2e:d3:ee:88:85:3f:fa:76:
         57:d1:5f:d7:05:98:4a:a3:a2:6e:e5:5e:40:d6:7b:6d:68:45:
         ee:3c:20:60:43:8f:4a:ca:98:a4:90:c7:50:75:6c:e6:65:3e:
         9f:af:17:38:68:26:ea:1e:aa:cd:2f:bc:91:50:7d:f7:85:64:
         77:3c:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----