Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/rE1I25yYwvd285qP8k2uC-MeAuA.roa
File:                     rE1I25yYwvd285qP8k2uC-MeAuA.roa (raw, json)
Hash identifier:          nAbSXUO1UTlzFXYstmZ4Hj3aPorfziH2SH36/q2fnGM=
Subject key identifier:   AC:4D:48:DB:9C:98:C2:F7:76:F3:9A:8F:F2:4D:AE:0B:E3:1E:02:E0
Certificate issuer:       /CN=6E181085902F896294602D8B121C1E2E22B58CE7
Certificate serial:       1186
Authority key identifier: 6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/rE1I25yYwvd285qP8k2uC-MeAuA.roa
Signing time:             Mon 10 Feb 2025 13:57:19 +0000
ROA not before:           Mon 10 Feb 2025 13:57:19 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     396982
IP address blocks:        103.125.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4486 (0x1186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E181085902F896294602D8B121C1E2E22B58CE7
        Validity
            Not Before: Feb 10 13:57:19 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=AC4D48DB9C98C2F776F39A8FF24DAE0BE31E02E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:00:17:34:96:28:86:76:b1:f6:c7:fa:31:
                    41:6f:84:f4:27:1e:a5:c2:aa:c7:d5:08:ac:a6:f8:
                    89:f4:58:ce:bd:48:7c:3d:63:ee:4a:74:e7:4e:47:
                    67:84:97:42:fc:80:12:ca:32:fd:5b:88:a7:cf:1f:
                    b9:bb:a8:55:c6:ed:ad:4b:84:69:45:d6:2f:97:71:
                    9f:aa:c9:9c:e3:6b:eb:62:a6:f3:51:e8:f3:f3:2d:
                    af:5c:5a:d7:4e:51:1d:8b:4b:84:ce:36:a2:6f:a4:
                    21:6d:a8:93:7e:10:fc:4c:89:ca:03:1e:2b:0b:fd:
                    64:a2:56:54:71:f3:bf:5b:94:79:29:d8:67:ee:cd:
                    03:b5:a1:13:e4:8d:68:f6:b2:de:c9:66:aa:fa:3f:
                    dd:df:6d:76:11:60:33:84:2f:02:f0:76:94:b2:c6:
                    5a:bf:89:14:da:53:80:35:1b:d0:7f:cc:e1:09:f5:
                    b7:27:90:04:9c:4a:3c:45:c5:4e:c3:a2:0f:49:09:
                    a0:11:8e:81:93:ee:33:52:36:9d:72:6a:fd:20:7c:
                    f3:c5:46:34:10:50:96:d1:58:69:4d:42:b7:91:ae:
                    3e:40:99:00:08:44:ca:33:df:8a:84:0b:4e:d3:88:
                    43:37:0e:6c:2b:89:2c:28:f0:1c:e0:87:51:89:0c:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4D:48:DB:9C:98:C2:F7:76:F3:9A:8F:F2:4D:AE:0B:E3:1E:02:E0
            X509v3 Authority Key Identifier:
                keyid:6E:18:10:85:90:2F:89:62:94:60:2D:8B:12:1C:1E:2E:22:B5:8C:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/bhgQhZAviWKUYC2LEhweLiK1jOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bhgQhZAviWKUYC2LEhweLiK1jOc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MLYTICS/rE1I25yYwvd285qP8k2uC-MeAuA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:a5:7c:18:54:16:cf:0a:03:b9:d4:9d:97:36:a2:af:bb:2a:
         fd:2f:4c:a6:13:0b:c4:44:6e:35:ed:04:a8:e4:20:d7:ae:46:
         30:ab:bb:35:11:54:bc:c1:07:0f:e1:27:75:52:b5:21:35:cc:
         28:e2:fb:a8:02:6c:73:8f:4b:e5:6b:c3:03:d0:ed:cc:82:51:
         0b:1b:2d:f9:3e:f6:36:8c:92:9c:46:98:3b:6a:8b:b4:da:52:
         50:d8:2c:dd:77:05:e3:29:c7:5e:c7:5a:3d:e5:ba:48:38:65:
         0d:d9:58:2b:d5:44:4e:3a:e2:da:29:c7:81:e0:f3:17:3e:df:
         a6:dc:bd:21:df:71:3f:2e:d9:be:50:81:6e:87:da:51:e5:77:
         34:aa:78:8b:1d:bd:de:ca:f3:68:55:dc:2b:41:f0:9b:8b:c7:
         d8:49:ca:41:98:96:19:18:53:b1:2b:b4:3f:c6:8d:7e:93:a1:
         32:04:c3:36:c2:ac:a5:c7:c5:26:e0:90:2c:9f:1d:fe:13:5b:
         fd:7f:3a:56:ef:04:56:2e:8e:f7:ab:5f:f9:f4:a4:0e:3c:10:
         05:e1:2b:d2:e8:d4:af:d3:f9:35:2d:67:b8:11:24:df:77:60:
         ae:20:a6:c5:04:1f:27:88:ca:81:2f:9b:f6:38:3b:71:33:f0:
         c2:97:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:49 2025 by rpki-client