Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa
File:                     Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa (raw, json)
Hash identifier:          xPG/rCGWwQ+keFNwO9LOmKuUq7mgUVdTZNa6U2OIdfg=
Subject key identifier:   26:68:67:F6:F9:35:CA:1C:E2:AD:2F:D3:78:84:6D:3D:02:CC:22:35
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       17EE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa
Signing time:             Mon 10 Feb 2025 14:07:25 +0000
ROA not before:           Mon 10 Feb 2025 14:07:25 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4780
IP address blocks:        106.104.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6126 (0x17ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:25 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=266867F6F935CA1CE2AD2FD378846D3D02CC2235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:76:d7:71:a0:dc:00:9a:71:83:31:cc:79:45:
                    de:3b:74:17:59:80:5c:7e:d7:20:a7:f6:ba:59:ff:
                    c9:26:a4:12:51:82:43:95:4a:10:64:f4:81:3d:2a:
                    6e:57:f6:f1:66:16:97:96:34:86:f2:50:d3:09:d6:
                    24:79:d3:d2:b9:54:71:96:e3:ff:ac:64:93:e1:ac:
                    70:83:67:d5:2a:d1:51:db:b9:04:48:6f:6f:90:52:
                    4c:3c:9a:8a:f0:d8:34:8b:43:f9:84:27:3c:83:0a:
                    18:3a:8b:a0:d8:71:c0:54:34:59:61:cf:1b:11:14:
                    20:70:75:fb:ea:bf:25:68:7a:ae:10:f4:16:3b:d0:
                    0b:ed:8a:ab:bc:a9:ed:8f:b8:68:e2:53:2a:7c:fd:
                    33:11:01:27:8b:54:33:45:4d:81:54:c8:c9:5a:32:
                    f1:d2:19:46:c4:ed:d3:8b:52:b1:04:df:f5:ea:3e:
                    e7:64:47:2d:bf:b7:94:19:60:97:66:d6:06:cc:e9:
                    6f:b1:96:9a:fb:bd:b9:57:96:62:e3:5d:05:cf:4e:
                    66:13:ee:d3:aa:f9:13:87:ab:c8:ba:6c:5c:0d:25:
                    bb:49:cc:de:88:7c:9e:a9:08:36:5a:6b:ac:f4:fe:
                    88:13:0c:2c:02:24:e7:c2:c9:cb:35:4a:07:e6:9d:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:68:67:F6:F9:35:CA:1C:E2:AD:2F:D3:78:84:6D:3D:02:CC:22:35
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Jmhn9vk1yhzirS_TeIRtPQLMIjU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:88:51:29:e1:9b:77:29:b2:28:e5:56:36:27:f0:91:a9:0e:
         93:d3:d9:26:24:cb:53:e2:bc:b4:a0:57:6e:29:42:2e:db:98:
         e9:77:81:c1:44:72:73:10:50:df:f3:b7:84:48:24:82:c8:93:
         75:a3:f2:b4:e5:00:16:58:62:f2:75:59:0f:65:4e:26:bd:ec:
         7d:86:c2:ef:e5:22:28:a2:5c:00:6f:a6:14:93:b8:5a:bd:26:
         19:8e:74:09:b8:4d:fe:d0:b1:2f:c3:4b:90:b3:3e:2e:2d:af:
         fc:64:01:c1:3d:b4:c3:b3:29:2e:b7:19:40:5a:bf:1b:2f:c0:
         a8:e8:b7:b6:04:29:6d:ac:dd:53:73:bd:6d:36:5f:52:10:56:
         c9:39:8e:d1:45:88:1c:a3:95:dd:0d:a8:3f:77:b9:a4:ec:d1:
         a1:4c:78:47:37:1d:e3:f9:10:65:42:55:42:ab:00:55:09:8a:
         a9:8f:63:52:4a:65:f7:9e:76:1a:62:9f:03:c9:49:d3:24:26:
         a3:1b:6c:50:f9:e1:61:fc:12:99:2f:0d:8a:08:a8:96:3d:aa:
         fc:a4:36:55:5c:1a:a1:ff:c9:08:44:28:8c:9a:86:b4:68:29:
         e9:7a:44:64:3b:7b:6a:70:56:3a:6d:95:30:3d:79:89:39:fa:
         dc:1f:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:50 2025 by rpki-client