Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/VBwRnigHm7-g8JfFAzky33XmiLQ.roa
File:                     VBwRnigHm7-g8JfFAzky33XmiLQ.roa (raw, json)
Hash identifier:          nEyrsFtW85qNrpgTuMJxnzqgU+wii5an1KpLU2lAIT0=
Subject key identifier:   54:1C:11:9E:28:07:9B:BF:A0:F0:97:C5:03:39:32:DF:75:E6:88:B4
Certificate issuer:       /CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
Certificate serial:       0914
Authority key identifier: 4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/VBwRnigHm7-g8JfFAzky33XmiLQ.roa
Signing time:             Wed 29 Sep 2021 02:44:21 +0000
ROA not before:           Wed 29 Sep 2021 02:44:21 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131149
IP address blocks:        2403:81c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E609BA74186D0B0E3A1A9C010DA1DF0559A1982
        Validity
            Not Before: Sep 29 02:44:21 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=541C119E28079BBFA0F097C5033932DF75E688B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ec:88:f9:18:67:d2:b6:84:5a:15:c9:e9:7e:
                    bf:df:68:18:4b:a5:ce:6d:0f:ea:65:9b:5e:9a:10:
                    cc:34:9e:de:e4:a5:c1:15:27:84:67:24:36:a9:af:
                    e5:2e:b7:a9:8e:66:c5:b0:7b:7c:9d:4f:52:c3:e2:
                    83:85:2e:ca:b3:bb:66:8c:e4:89:4a:47:7f:03:23:
                    00:45:33:e1:21:3c:c4:e8:fa:77:ce:af:eb:d1:0e:
                    25:87:89:93:d3:ac:2e:8f:ae:03:00:33:f1:97:f2:
                    c2:f6:d5:49:e0:00:e8:44:49:92:8d:f4:ec:88:16:
                    30:da:0d:31:21:00:aa:92:f2:86:63:cb:6f:7c:32:
                    02:27:d5:47:8d:e1:c3:2f:82:6f:c7:43:c8:75:b0:
                    9a:a9:3b:ca:3f:9f:97:2f:d7:3a:6d:e8:d4:4c:d7:
                    72:67:61:7b:10:57:8f:7b:3a:ad:32:9a:fa:9e:bd:
                    93:6a:56:d0:97:b3:00:5e:f9:26:a5:99:e7:7a:90:
                    2c:ca:3d:e4:a9:ca:80:07:00:79:b4:5a:8f:95:3c:
                    91:9d:5c:90:60:8e:2a:f5:cb:29:b0:80:3d:f0:ef:
                    83:e6:0c:67:c2:01:70:15:12:97:79:f9:1b:0a:2f:
                    d0:79:19:f0:ad:26:c0:6b:24:c4:a9:58:13:b1:8c:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1C:11:9E:28:07:9B:BF:A0:F0:97:C5:03:39:32:DF:75:E6:88:B4
            X509v3 Authority Key Identifier:
                keyid:4E:60:9B:A7:41:86:D0:B0:E3:A1:A9:C0:10:DA:1D:F0:55:9A:19:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/TmCbp0GG0LDjoanAENod8FWaGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TmCbp0GG0LDjoanAENod8FWaGYI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTCOMTW/VBwRnigHm7-g8JfFAzky33XmiLQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:81c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:a3:cc:a9:bb:40:97:ca:65:89:f3:53:02:7d:92:93:cc:34:
         c0:7d:97:4f:95:1e:0d:ed:2f:48:2e:4a:a6:b0:de:84:0c:75:
         b1:5f:e2:52:a4:c5:89:b1:aa:60:c9:aa:0a:15:61:aa:16:12:
         f8:9f:28:28:af:6a:5e:70:e6:4a:c5:2a:fa:1d:59:5b:22:3a:
         25:8b:08:33:75:f6:44:2b:d1:12:0d:c7:d2:12:12:bc:15:3e:
         ab:ee:10:37:6b:33:30:6f:d4:fa:bd:e9:a5:67:dd:ec:6a:cd:
         5f:7e:f0:99:80:15:a4:d3:9d:47:f4:a9:91:a7:72:d6:c1:18:
         41:0e:fe:64:62:13:35:18:c6:67:86:91:54:d2:a6:1f:9a:e3:
         88:25:89:da:7a:22:f8:fd:94:08:1b:5e:32:e9:0c:af:82:4f:
         50:85:74:00:e9:38:82:8d:36:75:a9:20:42:a8:1f:96:31:96:
         8d:67:81:14:5f:de:1c:7d:2d:74:d3:a9:d9:ec:3c:3a:06:9d:
         29:63:b5:7c:3c:0f:3d:24:2d:6b:25:53:36:57:d9:bb:c1:f7:
         55:0c:c8:c9:a6:d8:b9:78:e1:ed:7f:59:93:46:a4:36:d7:de:
         98:2d:f7:f1:50:bd:e3:58:ad:06:42:e5:3e:8f:5a:67:6f:f2:
         ad:25:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:11 2025 by rpki-client