Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/ZEUQavx2S0GzFem7_prIQyfCXT0.roa
File:                     ZEUQavx2S0GzFem7_prIQyfCXT0.roa (raw, json)
Hash identifier:          W2f0/ln+vtbaq0aohooTTgzH1sl7xFilVWxxAz/0mO0=
Subject key identifier:   64:45:10:6A:FC:76:4B:41:B3:15:E9:BB:FE:9A:C8:43:27:C2:5D:3D
Certificate issuer:       /CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
Certificate serial:       09F2
Authority key identifier: ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/ZEUQavx2S0GzFem7_prIQyfCXT0.roa
Signing time:             Thu 15 Sep 2022 02:50:19 +0000
ROA not before:           Thu 15 Sep 2022 02:50:19 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     9676
IP address blocks:        103.123.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2546 (0x9f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDC0457A140B2D436CE7FAE67D8491CFFC6E7F3E
        Validity
            Not Before: Sep 15 02:50:19 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=6445106AFC764B41B315E9BBFE9AC84327C25D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:3c:76:01:40:75:08:2a:5a:be:40:3d:49:
                    1d:e9:f9:46:26:e3:6a:29:e7:3f:c8:f3:f8:1f:02:
                    53:48:27:3a:23:56:dc:0b:0b:89:b9:90:a7:f4:d8:
                    53:04:c2:77:ce:0e:74:71:c5:73:e6:47:a1:8f:97:
                    ac:49:47:1f:94:1a:d7:90:57:c3:7d:39:8c:53:c2:
                    0d:e6:c9:52:76:8e:d9:9a:9d:99:b8:5a:2d:07:38:
                    13:ee:66:65:84:2e:73:26:be:59:3c:22:3f:54:b3:
                    f4:a7:39:06:be:2a:cc:a4:3c:65:01:ec:77:65:c5:
                    25:99:59:ca:c2:02:9b:78:fa:c7:45:e3:66:47:9e:
                    fe:ea:4c:0f:ee:e1:75:af:74:a9:aa:b3:10:0f:0f:
                    55:3c:af:fc:87:24:80:e1:28:d4:84:42:ec:5b:6c:
                    19:03:ec:c7:b6:e0:02:cc:c9:d7:69:01:1a:ee:15:
                    9f:11:4e:87:1a:53:5a:8e:5a:91:2a:f9:37:e5:35:
                    2f:b3:88:df:92:96:f7:e5:6c:29:14:ce:24:fe:10:
                    f8:e8:a5:ad:34:64:53:14:02:13:5e:5d:66:bb:0d:
                    7f:e3:0d:5c:06:bb:cf:b2:94:16:8e:4b:dc:24:f2:
                    0d:3b:88:f2:7e:8c:e4:2b:9c:81:8d:ec:95:23:b4:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:10:6A:FC:76:4B:41:B3:15:E9:BB:FE:9A:C8:43:27:C2:5D:3D
            X509v3 Authority Key Identifier:
                keyid:ED:C0:45:7A:14:0B:2D:43:6C:E7:FA:E6:7D:84:91:CF:FC:6E:7F:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/7cBFehQLLUNs5_rmfYSRz_xufz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7cBFehQLLUNs5_rmfYSRz_xufz4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN/ZEUQavx2S0GzFem7_prIQyfCXT0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:d8:8b:81:66:cf:bf:61:48:d3:7d:2d:0a:cb:fe:93:2e:
         70:75:7f:50:af:d8:c0:79:da:ef:7e:71:26:00:57:af:11:5c:
         d0:f8:5b:ad:8b:a9:4f:69:4e:da:9f:c0:f6:56:d6:d0:14:2d:
         79:85:18:6f:88:0d:47:9b:9f:bb:66:06:df:71:b7:d8:1d:77:
         81:e0:9b:98:44:c4:e9:11:f4:0a:6f:71:09:b2:c3:b4:ab:63:
         6c:21:30:fa:54:b1:3b:c6:b6:d3:eb:34:4e:7f:44:09:29:36:
         c2:74:6e:3f:d6:e0:e7:08:15:75:4e:97:29:82:18:c7:fd:ae:
         24:19:cf:2a:7b:14:09:a7:51:18:1d:7b:9a:16:ee:8f:ab:8f:
         c3:48:6f:d6:04:36:db:21:35:cb:bb:69:d1:ac:3d:54:73:59:
         51:c7:4c:f0:78:7b:6f:b1:08:f1:04:e6:4d:6b:f2:f8:ff:c5:
         fc:63:a3:53:0a:44:30:73:4a:bd:0a:33:62:ef:87:b9:de:80:
         d2:a8:1c:cb:57:4e:ce:53:f4:a2:4d:67:bc:d0:48:85:09:7e:
         4e:41:1f:44:8a:0c:f1:4c:e9:e0:d9:2c:75:83:6d:74:90:c5:
         0d:4b:d7:3b:c9:17:b4:a6:e0:e9:99:67:a1:73:fd:a5:ad:e7:
         1a:74:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:55 2025 by rpki-client