Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PQS/uyhAuDGEk1Mjx2DzgARPSXyf7qQ.roa
File:                     uyhAuDGEk1Mjx2DzgARPSXyf7qQ.roa (raw, json)
Hash identifier:          skuag+DsyGtTSSZCyHFTm88sAA7LzFUxAEr55IsKorQ=
Subject key identifier:   BB:28:40:B8:31:84:93:53:23:C7:60:F3:80:04:4F:49:7C:9F:EE:A4
Certificate issuer:       /CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
Certificate serial:       0C64
Authority key identifier: C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/uyhAuDGEk1Mjx2DzgARPSXyf7qQ.roa
Signing time:             Wed 29 Sep 2021 02:37:19 +0000
ROA not before:           Wed 29 Sep 2021 02:37:19 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18178
IP address blocks:        103.137.62.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3172 (0xc64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C14FACFD45C2C02768E8272F4FB83FB2EDAF7439
        Validity
            Not Before: Sep 29 02:37:19 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=BB2840B83184935323C760F380044F497C9FEEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:d3:8e:73:76:4a:88:43:29:0c:b1:14:0f:
                    0e:48:3f:56:5c:4c:9f:68:9e:4a:6f:98:c1:c3:0d:
                    de:50:d3:4a:88:a9:ee:b1:6d:4d:76:2a:62:7a:12:
                    de:02:48:4c:db:5b:fe:9a:27:f6:60:9a:23:da:e1:
                    ab:fa:8b:2c:56:c2:5d:b7:c0:4c:0b:d7:c3:97:d6:
                    32:fb:90:b8:87:b9:05:d8:2a:4a:5b:30:2e:14:46:
                    ba:7d:b5:ca:a9:cd:76:18:8c:1c:da:0a:44:77:47:
                    45:43:d6:32:7a:05:13:23:26:36:27:c1:cf:c3:77:
                    07:c5:f5:97:eb:60:f4:fe:73:00:d4:86:16:18:32:
                    94:7d:9e:6e:20:72:91:f5:85:23:0f:34:e7:cf:27:
                    81:d5:09:71:7e:62:1f:2b:bf:1c:4c:a7:01:01:0b:
                    9a:57:41:e3:ab:73:ff:69:e2:04:38:71:e6:a6:bb:
                    5a:bb:02:8d:bf:ac:5d:ee:5e:34:1d:53:a8:da:75:
                    cb:fe:6e:e3:22:04:93:62:f4:ef:48:86:b1:3a:84:
                    ef:77:2a:f5:15:07:47:84:ad:80:5a:4e:5f:d3:d7:
                    e8:9b:54:24:54:97:79:49:82:b4:c1:05:f4:a4:fe:
                    11:ba:fa:aa:6f:bb:9d:f2:b6:70:9b:ff:0e:12:76:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:28:40:B8:31:84:93:53:23:C7:60:F3:80:04:4F:49:7C:9F:EE:A4
            X509v3 Authority Key Identifier:
                keyid:C1:4F:AC:FD:45:C2:C0:27:68:E8:27:2F:4F:B8:3F:B2:ED:AF:74:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/wU-s_UXCwCdo6CcvT7g_su2vdDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wU-s_UXCwCdo6CcvT7g_su2vdDk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PQS/uyhAuDGEk1Mjx2DzgARPSXyf7qQ.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:bb:c4:a2:4a:84:3b:18:ea:5b:86:17:51:24:ae:d7:de:
         b1:f6:df:56:72:49:f2:6f:8f:06:04:17:75:09:0b:06:66:c0:
         86:e4:d9:00:e3:e1:05:02:4e:f5:3a:63:71:b6:47:63:ae:72:
         bc:82:10:f4:5f:d5:2b:84:04:2a:9b:6a:62:8f:a2:2b:5e:eb:
         0b:b5:3e:c4:d2:49:82:c7:9a:1f:95:3f:de:7d:08:87:12:b5:
         70:b7:ad:5b:1e:66:5b:d3:8b:70:ad:59:4d:8b:0a:7d:82:38:
         94:72:5c:5f:7b:3e:9d:60:dd:e7:a4:a2:61:71:cc:63:a5:9a:
         ca:c6:3e:3e:75:4a:07:75:15:83:c5:69:0f:61:25:69:f3:5e:
         5b:c8:90:39:d1:39:97:a9:56:2c:ce:a2:23:73:10:06:6d:5c:
         ef:5f:23:23:9b:9d:eb:a8:a7:64:a7:d6:d1:75:cf:b4:b6:08:
         e7:12:10:da:82:5f:d3:1c:c1:63:b1:2c:6a:d6:ee:d0:6e:d4:
         2e:fa:8a:4b:e4:7c:58:86:c2:5a:94:44:c1:f8:ab:fb:2c:d7:
         38:94:ae:0f:45:cc:37:0e:44:88:03:df:7b:a0:49:53:0c:80:
         5d:7a:c3:66:2d:50:b8:f0:20:fe:86:4b:fc:ba:cc:35:a3:88:
         3b:fb:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:02 2025 by rpki-client