Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/kRENSVDoLbBA9bgH7XZIffNqPgM.roa
File:                     kRENSVDoLbBA9bgH7XZIffNqPgM.roa (raw, json)
Hash identifier:          K4//PJVXH0NMYmfESUOzQoeEtKDI3QK4sf5CCTUUzTc=
Subject key identifier:   91:11:0D:49:50:E8:2D:B0:40:F5:B8:07:ED:76:48:7D:F3:6A:3E:03
Certificate issuer:       /CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
Certificate serial:       0167
Authority key identifier: CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/kRENSVDoLbBA9bgH7XZIffNqPgM.roa
Signing time:             Mon 10 Feb 2025 13:43:45 +0000
ROA not before:           Mon 10 Feb 2025 13:43:45 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        103.99.142.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAA8405CBD8CE6AE1EA3A9DAA6779756EC6EDC42
        Validity
            Not Before: Feb 10 13:43:45 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=91110D4950E82DB040F5B807ED76487DF36A3E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:12:fd:ff:b8:25:8f:64:86:40:1d:bb:72:
                    d7:1a:3a:02:3f:a5:fd:33:af:e1:52:6e:66:6e:c7:
                    ef:df:9a:7e:83:80:98:b3:57:e8:2b:03:eb:9f:78:
                    03:14:3d:d4:2b:ff:46:73:e6:cd:24:3e:b1:6a:69:
                    1a:44:93:16:10:d1:8b:fd:94:7e:04:a8:80:28:8c:
                    69:25:5e:d8:a4:6e:02:54:f7:78:8e:e2:d0:37:9b:
                    60:2c:e8:cf:26:98:e9:42:5f:a3:bb:88:01:67:a8:
                    fb:27:10:14:c3:f1:01:8d:d4:c5:59:13:0d:da:55:
                    bb:56:96:d7:50:b1:d2:53:6d:77:a4:55:35:86:39:
                    55:7d:f2:37:01:27:7e:a9:6e:c6:a6:28:80:91:4e:
                    bb:60:2a:84:37:51:95:57:d5:57:1b:e4:3a:c7:93:
                    c7:52:67:b5:98:b7:24:c3:06:db:62:79:77:0e:53:
                    44:95:1e:c8:e3:1d:ed:4b:dc:11:7a:7b:4f:02:8a:
                    dd:8e:8c:99:b7:a0:69:91:a4:8e:46:a2:7f:0e:ce:
                    7f:77:7b:96:d7:b7:10:f1:16:c2:e0:99:aa:4e:b3:
                    80:71:09:c6:d5:70:f4:5d:51:1a:13:66:bf:fe:47:
                    d8:27:a5:5c:84:fe:32:02:78:72:a8:ca:4a:d2:91:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:11:0D:49:50:E8:2D:B0:40:F5:B8:07:ED:76:48:7D:F3:6A:3E:03
            X509v3 Authority Key Identifier:
                keyid:CA:A8:40:5C:BD:8C:E6:AE:1E:A3:A9:DA:A6:77:97:56:EC:6E:DC:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/yqhAXL2M5q4eo6napneXVuxu3EI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yqhAXL2M5q4eo6napneXVuxu3EI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HUANGDEXIA/kRENSVDoLbBA9bgH7XZIffNqPgM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:de:11:10:d4:ed:9c:33:40:0f:79:96:3b:db:bc:a9:35:
         8c:a2:d7:a8:eb:bf:d3:d1:20:af:3f:51:ed:b6:7f:51:9a:bf:
         6e:2b:50:69:7f:20:d5:bf:e3:14:5d:f1:60:11:89:30:61:04:
         e9:dc:5b:98:88:83:8c:1e:9e:15:8a:12:33:62:a5:1f:2b:78:
         9b:ab:0f:3f:10:d6:23:ea:cb:ac:45:e4:46:2d:a3:a3:a5:a1:
         f4:44:b1:13:17:3b:0f:cf:5c:bb:29:5f:1e:3f:95:f6:c5:91:
         f3:ac:22:e9:2d:45:9c:92:32:fd:46:d2:34:91:8f:ab:08:ef:
         0a:52:25:85:f4:b7:93:2a:60:2f:87:41:ea:ca:c3:41:c3:87:
         b6:2b:01:7a:d4:a1:1d:94:14:6a:f8:9e:c8:39:42:94:05:c3:
         8c:96:d0:cb:ba:de:2a:94:c9:fc:99:2d:c0:fb:76:b7:5e:82:
         3b:1e:12:13:49:bc:e5:0a:76:fb:fc:9c:94:46:af:d2:4d:7c:
         e4:ba:f4:8e:6e:54:a3:cc:af:5f:a2:23:0d:75:dc:22:ec:bd:
         4e:fa:d5:60:ec:6d:d6:ef:44:aa:e7:d5:ae:f0:9d:ad:c6:70:
         fe:ef:f3:79:b0:38:75:c1:08:93:40:39:52:23:01:d3:96:68:
         fa:ac:9e:d0
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0FB
ODQwNUNCRDhDRTZBRTFFQTNBOURBQTY3Nzk3NTZFQzZFREM0MjAeFw0yNTAyMTAx
MzQzNDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkxMTEwRDQ5NTBFODJE
QjA0MEY1QjgwN0VENzY0ODdERjM2QTNFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6vxL9/7glj2SGQB27ctcaOgI/pf0zr+FSbmZux+/fmn6DgJiz
V+grA+ufeAMUPdQr/0Zz5s0kPrFqaRpEkxYQ0Yv9lH4EqIAojGklXtikbgJU93iO
4tA3m2As6M8mmOlCX6O7iAFnqPsnEBTD8QGN1MVZEw3aVbtWltdQsdJTbXekVTWG
OVV98jcBJ36pbsamKICRTrtgKoQ3UZVX1Vcb5DrHk8dSZ7WYtyTDBttieXcOU0SV
HsjjHe1L3BF6e08Cit2OjJm3oGmRpI5Gon8Ozn93e5bXtxDxFsLgmapOs4BxCcbV
cPRdURoTZr/+R9gnpVyE/jICeHKoykrSkSnxAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUkRENSVDoLbBA9bgH7XZIffNqPgMwHwYDVR0jBBgwFoAUyqhAXL2M5q4eo6na
pneXVuxu3EIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSFVBTkdE
RVhJQS95cWhBWEwyTTVxNGVvNm5hcG5lWFZ1eHUzRUkuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL3lxaEFYTDJNNXE0ZW82bmFwbmVYVnV4dTNFSS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0hVQU5HREVYSUEva1JFTlNWRG9M
YkJBOWJnSDdYWklmZk5xUGdNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWdjjjANBgkqhkiG9w0BAQsFAAOCAQEAbr3eERDU7ZwzQA95ljvbvKk1
jKLXqOu/09Egrz9R7bZ/UZq/bitQaX8g1b/jFF3xYBGJMGEE6dxbmIiDjB6eFYoS
M2KlHyt4m6sPPxDWI+rLrEXkRi2jo6Wh9ESxExc7D89cuylfHj+V9sWR86wi6S1F
nJIy/UbSNJGPqwjvClIlhfS3kypgL4dB6srDQcOHtisBetShHZQUavieyDlClAXD
jJbQy7reKpTJ/JktwPt2t16COx4SE0m85Qp2+/yclEav0k185Lr0jm5Uo8yvX6Ij
DXXcIuy9TvrVYOxt1u9EqufVrvCdrcZw/u/zebA4dcEIk0A5UiMB05Zo+qye0A==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:17:26 2025 by rpki-client