Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LILIANG/8jSQtSDDSrghjS_Izm_UUk9nuJY.roa
File:                     8jSQtSDDSrghjS_Izm_UUk9nuJY.roa (raw, json)
Hash identifier:          cM1hBGF8VLfD1XsBIt9MGftDGeWjhW3JgpY//+wdP4Y=
Subject key identifier:   F2:34:90:B5:20:C3:4A:B8:21:8D:2F:C8:CE:6F:D4:52:4F:67:B8:96
Certificate issuer:       /CN=FBE0E2FD417A37B1B56BB37DA16834229A399256
Certificate serial:       0171
Authority key identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/8jSQtSDDSrghjS_Izm_UUk9nuJY.roa
Signing time:             Mon 10 Feb 2025 13:43:32 +0000
ROA not before:           Mon 10 Feb 2025 13:43:32 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131642
IP address blocks:        103.69.52.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE0E2FD417A37B1B56BB37DA16834229A399256
        Validity
            Not Before: Feb 10 13:43:32 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F23490B520C34AB8218D2FC8CE6FD4524F67B896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:85:f4:09:f0:d5:7f:3c:62:1c:e1:e7:91:
                    d6:be:c5:34:0c:a3:15:81:cf:54:a3:f6:08:08:de:
                    3b:c9:62:96:aa:a1:db:65:86:d3:9b:9f:8c:06:7f:
                    68:0d:52:7b:b2:66:24:5d:1b:32:91:bf:21:60:e4:
                    0b:a2:1c:0f:7f:2d:98:54:ec:fe:a9:5f:58:13:49:
                    c7:d8:38:bf:73:c5:bc:44:bd:cf:d0:32:e5:69:94:
                    d3:64:a9:2f:45:ac:3b:7e:38:33:ef:bf:84:8a:57:
                    4d:34:d8:ef:c8:ac:d3:5e:8f:a8:69:0f:8f:da:10:
                    99:ec:2f:d1:67:87:ea:a6:02:1d:50:d7:ba:f9:33:
                    21:e4:b0:7d:56:6e:80:77:7c:fa:70:76:2c:5b:6c:
                    8f:36:4f:3b:1f:31:ee:3a:c7:cf:3b:d2:31:cc:c7:
                    bc:42:42:7d:1d:b5:a8:6a:4d:f2:ef:57:23:90:2f:
                    35:a5:c0:9b:2c:e4:34:4a:53:89:b2:a5:30:24:fb:
                    72:41:f9:0b:d0:32:05:51:7b:6d:4a:d0:05:f9:a3:
                    fc:9e:34:db:0c:4e:15:d1:4e:5d:f6:5f:f4:52:88:
                    9e:61:76:d7:0c:53:b6:5e:74:a0:28:14:7b:d0:f0:
                    e4:23:b5:6a:74:09:7a:28:22:83:11:84:d3:12:14:
                    0c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:34:90:B5:20:C3:4A:B8:21:8D:2F:C8:CE:6F:D4:52:4F:67:B8:96
            X509v3 Authority Key Identifier:
                keyid:FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/8jSQtSDDSrghjS_Izm_UUk9nuJY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:71:a8:ae:44:a3:91:c7:23:ba:44:f5:fd:ce:ba:42:05:21:
         0e:e7:14:5e:03:59:6c:db:91:25:a6:bf:dd:5e:55:23:e2:fb:
         fd:9d:ca:ad:5c:35:1b:33:74:48:cc:39:09:e5:2f:e3:d3:c9:
         1e:78:50:7e:99:fc:48:65:a5:3e:b9:1c:ed:31:c6:c9:fb:c2:
         68:5b:a5:12:85:04:59:33:9e:0d:25:70:49:c1:2a:84:be:94:
         c9:4b:b8:09:d5:de:73:d6:4f:b6:8f:d1:a8:af:98:10:46:45:
         c9:e8:a6:8e:a7:e2:a7:b0:ae:a6:64:fd:7e:c2:3b:99:6c:24:
         96:7b:8d:78:1a:e3:ab:7c:e5:c7:13:dc:b9:17:27:8d:82:66:
         2d:05:cc:44:96:5a:8c:76:40:d5:fd:b1:e3:82:28:29:27:28:
         be:3e:05:a3:be:c8:1c:ce:48:67:76:6e:dd:cc:49:aa:fb:8a:
         fc:28:b8:f7:d6:dd:c7:2a:8a:87:34:ce:6e:4a:16:f7:c4:a7:
         8c:42:00:56:ea:d7:7c:ce:6e:01:42:a9:b3:a7:20:6b:e0:a3:
         c5:a2:61:c3:13:35:29:e8:9a:6c:54:c8:80:92:0e:0c:51:11:
         20:4f:d1:ed:68:a8:91:65:89:4e:c8:32:44:ef:df:27:f9:6d:
         28:53:fb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:12:40 2025 by rpki-client