Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/gwI6F3_xa6tQgR5OljSO-BvcyIk.roa
File:                     gwI6F3_xa6tQgR5OljSO-BvcyIk.roa (raw, json)
Hash identifier:          2UANB4DxCokcA99ZyEfslUl7WtOydqIktxHm3563bbE=
Subject key identifier:   83:02:3A:17:7F:F1:6B:AB:50:81:1E:4E:96:34:8E:F8:1B:DC:C8:89
Certificate issuer:       /CN=5E53F5889A765A085446E1DEB6526659FB380D21
Certificate serial:       03
Authority key identifier: 5E:53:F5:88:9A:76:5A:08:54:46:E1:DE:B6:52:66:59:FB:38:0D:21
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XlP1iJp2WghURuHetlJmWfs4DSE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/gwI6F3_xa6tQgR5OljSO-BvcyIk.roa
Signing time:             Tue 02 Jan 2024 09:23:58 +0000
ROA not before:           Tue 02 Jan 2024 09:23:58 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     18180
IP address blocks:        119.75.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E53F5889A765A085446E1DEB6526659FB380D21
        Validity
            Not Before: Jan  2 09:23:58 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=83023A177FF16BAB50811E4E96348EF81BDCC889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:88:31:b8:94:25:e7:a6:4a:d0:da:ec:da:
                    f7:bb:81:44:13:03:b5:0a:cd:94:a2:aa:8e:2b:14:
                    f0:d2:9b:2d:6c:8a:21:b4:61:7d:11:c4:f4:02:fe:
                    ea:28:6e:ba:a7:44:90:ab:a8:30:0d:91:90:7d:48:
                    56:5c:f5:97:cb:b2:ad:26:cc:89:bb:82:91:bf:de:
                    f9:a7:49:f0:fe:e9:11:b3:15:ba:b1:8f:26:ac:3c:
                    a5:f3:23:d1:66:70:5c:26:fb:bc:8f:45:5b:c5:f4:
                    cf:83:5c:ba:07:88:79:67:40:20:ad:57:0f:f5:7a:
                    31:87:cf:2a:86:02:8a:bc:0e:2a:a1:b4:6b:e7:bf:
                    74:19:08:c3:8f:da:c7:29:73:be:14:24:ee:24:14:
                    85:3f:60:4c:89:aa:f2:a4:00:d6:4a:ea:45:2a:54:
                    2f:46:fb:45:45:77:dc:2d:79:ea:83:59:f5:8b:cc:
                    04:20:de:27:42:2a:cb:e0:68:d1:43:65:cb:c4:2e:
                    6a:6b:79:fc:22:20:ef:41:04:c1:87:6b:45:77:01:
                    0d:70:65:c5:62:2f:8e:b4:91:02:84:aa:32:62:c5:
                    7b:e1:9e:ea:1b:96:00:36:bb:1b:63:a1:e3:0c:49:
                    8b:01:33:9c:73:c5:65:62:0b:53:9e:4c:f6:20:d3:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:3A:17:7F:F1:6B:AB:50:81:1E:4E:96:34:8E:F8:1B:DC:C8:89
            X509v3 Authority Key Identifier:
                keyid:5E:53:F5:88:9A:76:5A:08:54:46:E1:DE:B6:52:66:59:FB:38:0D:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/XlP1iJp2WghURuHetlJmWfs4DSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XlP1iJp2WghURuHetlJmWfs4DSE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IPV6PO/gwI6F3_xa6tQgR5OljSO-BvcyIk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:32:25:0b:c4:e7:b5:3b:e4:a7:8e:3a:32:67:4c:56:b1:
         a9:07:81:19:0f:77:db:fc:02:0a:42:b7:1f:ed:db:7d:b4:57:
         59:b2:39:3c:3f:be:6e:b6:8e:61:00:11:6b:54:8f:f7:a0:7d:
         72:1a:8e:d8:da:5a:e5:07:f3:e8:63:28:82:bb:92:5f:4d:72:
         73:ed:68:e0:68:47:a5:79:62:fa:7b:e0:7d:9d:0b:65:7e:14:
         4d:37:d4:2e:40:26:37:8b:c2:b8:4f:8d:15:bc:a8:a9:27:14:
         3a:25:65:a2:37:c9:83:5d:d6:be:4f:fb:eb:29:5e:e2:21:69:
         b1:bc:08:90:e0:84:ca:f5:23:05:1f:0d:43:2f:52:5c:c9:ff:
         86:7b:a3:2a:31:d3:a7:06:18:1b:f1:0b:de:81:97:b7:6a:6c:
         88:ad:28:ac:c1:48:f8:7c:ea:8c:b4:6f:96:83:15:a2:de:e2:
         72:36:52:b0:91:eb:b1:a9:e1:0d:37:43:59:4b:ec:03:31:5c:
         38:0b:05:4f:46:9b:f3:97:27:9e:a7:90:a9:51:a1:72:af:89:
         c7:d4:ea:e7:cc:da:f6:25:82:54:f5:ac:62:84:94:57:dd:f5:
         55:ca:7e:3a:b6:be:6e:46:41:a7:fe:01:23:25:cd:d8:6a:51:
         a7:39:63:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:35:21 2025 by rpki-client