Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hyZ0OZq_gyBk9xDdba59jcIGToE.roa
File:                     hyZ0OZq_gyBk9xDdba59jcIGToE.roa (raw, json)
Hash identifier:          DT9PWcBwH5xQdeH/nmWEMqj8F1UPpaqWJTHPLhndDEY=
Subject key identifier:   87:26:74:39:9A:BF:83:20:64:F7:10:DD:6D:AE:7D:8D:C2:06:4E:81
Certificate issuer:       /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial:       1814
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hyZ0OZq_gyBk9xDdba59jcIGToE.roa
Signing time:             Mon 10 Feb 2025 14:07:33 +0000
ROA not before:           Mon 10 Feb 2025 14:07:33 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4780
IP address blocks:        123.205.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6164 (0x1814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
        Validity
            Not Before: Feb 10 14:07:33 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=872674399ABF832064F710DD6DAE7D8DC2064E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:08:ad:d3:1d:b9:23:ce:b8:97:cc:d5:eb:dc:
                    70:36:2b:21:3d:b9:01:2d:cd:08:8a:61:31:30:d6:
                    c1:fe:2a:ed:fc:23:83:6f:58:44:30:d7:c9:66:a5:
                    e8:02:c2:fe:3e:d2:ee:56:59:4c:3f:7c:fe:61:ed:
                    06:bb:f9:da:fc:e8:3d:18:70:a6:7d:f6:42:0b:9f:
                    f7:74:33:f8:49:9d:4e:8f:63:9f:6c:2c:cd:ca:3c:
                    80:4c:e6:66:21:87:64:8a:ab:b6:2f:94:55:81:00:
                    67:a9:60:15:d8:6c:a1:e1:6d:51:e0:92:ce:6c:cc:
                    7a:73:29:ca:8a:10:84:0a:03:e3:47:2f:02:f5:73:
                    61:6f:cf:e6:e8:7a:29:a9:d5:aa:c2:b1:17:7a:96:
                    db:cd:16:f7:93:1a:0c:75:de:f9:e0:a6:9f:38:ea:
                    71:75:8f:ee:06:b0:ee:59:25:42:dd:7e:9c:01:e4:
                    a9:c0:1d:19:92:24:af:97:c4:fc:89:96:8e:e7:eb:
                    34:53:a4:ff:a8:d1:b5:0d:5c:73:b2:08:11:d5:c2:
                    de:08:5d:72:36:bb:de:1a:90:e4:60:83:ac:fb:cf:
                    3b:8d:9e:50:c0:ea:09:ef:83:49:eb:c1:3d:4f:db:
                    5d:25:58:42:e8:26:51:14:99:60:d6:d4:f4:f4:b3:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:26:74:39:9A:BF:83:20:64:F7:10:DD:6D:AE:7D:8D:C2:06:4E:81
            X509v3 Authority Key Identifier:
                keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hyZ0OZq_gyBk9xDdba59jcIGToE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.205.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:b8:e6:e9:86:f9:31:d4:f0:6c:2c:ff:9f:49:85:cb:62:0d:
         75:08:c0:e0:fa:3c:3a:2f:78:8d:5e:4c:f5:d8:9b:9e:32:7d:
         2a:11:b6:bb:9e:a3:28:cc:67:85:8f:f0:a4:85:f1:b8:7c:89:
         7f:ac:93:90:25:eb:21:f6:72:93:c7:7a:e7:e1:4d:76:06:93:
         40:fd:05:c2:a3:11:c8:90:25:2b:b9:e8:52:bc:1e:6e:38:a4:
         ae:8b:6d:29:ff:5a:ad:b5:90:2b:ce:fb:8f:c0:a9:75:cd:6d:
         0c:6a:17:d1:c7:0c:cc:54:26:28:9b:c4:46:df:fe:18:81:69:
         18:a6:c6:ee:59:02:a5:58:dc:53:cd:e6:24:07:6c:a8:b0:5d:
         99:17:a5:e1:a5:f2:74:03:0f:a2:0c:36:f5:0a:15:e5:c7:21:
         5c:b7:b6:b2:f1:49:56:49:02:64:7b:c7:2f:76:db:f1:81:69:
         0b:2a:63:9f:92:3e:3f:85:7f:4d:fb:89:c8:8a:40:12:42:ab:
         6d:6b:a5:37:31:c3:99:25:eb:68:5a:0d:86:e7:3f:df:90:af:
         e9:f6:36:5f:b7:be:1f:5d:3a:be:e2:2f:e8:f5:70:e4:d2:0b:
         a6:e1:f8:5c:0e:a5:22:40:35:ae:63:3d:e6:71:5a:9d:2d:88:
         c6:45:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:06:24 2025 by rpki-client