Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5j9D299wZEj1Q4z49I5Eh9lj6hs.roa
File:                     5j9D299wZEj1Q4z49I5Eh9lj6hs.roa (raw, json)
Hash identifier:          IcH0u+Azm2PEIaliIPUA08XNz65+qqo1KJ/M7eBJf3k=
Subject key identifier:   E6:3F:43:DB:DF:70:64:48:F5:43:8C:F8:F4:8E:44:87:D9:63:EA:1B
Certificate issuer:       /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial:       12E0
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5j9D299wZEj1Q4z49I5Eh9lj6hs.roa
Signing time:             Tue 04 Feb 2025 07:06:36 +0000
ROA not before:           Tue 04 Feb 2025 07:06:36 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     24164
IP address blocks:        203.77.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4832 (0x12e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
        Validity
            Not Before: Feb  4 07:06:36 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E63F43DBDF706448F5438CF8F48E4487D963EA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:48:0b:2a:0e:69:74:34:e1:60:6a:f3:66:
                    0d:81:ad:f6:8e:f7:d6:c2:3c:54:be:67:75:64:66:
                    8e:d3:c9:30:2e:ba:6b:05:a7:91:9c:67:38:35:0a:
                    c6:ce:6c:ab:af:d7:62:da:02:af:9f:e0:79:56:a2:
                    2e:ed:a5:bd:a1:24:a5:c3:83:ef:86:e1:a7:84:44:
                    30:ba:fb:9f:80:6f:cc:26:6d:31:91:40:b2:ba:39:
                    bd:9a:12:14:55:8a:3d:5f:d5:0b:23:be:28:3d:cd:
                    f8:01:a0:b1:d8:8f:9f:ba:9a:bf:6d:f2:5d:d0:28:
                    be:37:f1:05:33:30:e5:2b:31:6e:57:79:01:34:6d:
                    00:0c:81:0c:d8:02:bd:e5:f0:45:25:eb:1a:ef:76:
                    bd:41:25:87:74:5a:62:ea:e1:d2:6d:4f:36:20:f2:
                    df:40:e8:8c:3e:56:88:a8:35:b8:98:49:04:bb:3b:
                    0f:81:ef:08:70:24:16:02:7f:b5:fd:94:30:76:b2:
                    8b:a4:ea:5c:9e:70:03:7f:d8:20:e6:da:bb:3a:59:
                    d8:6d:b9:c0:6b:a1:de:6c:3e:d9:44:44:0f:65:ae:
                    0e:11:3b:a8:2b:90:09:1b:1c:0b:25:2d:06:73:e7:
                    fc:57:88:0f:39:71:b9:ac:a4:1c:a9:56:3c:06:ca:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3F:43:DB:DF:70:64:48:F5:43:8C:F8:F4:8E:44:87:D9:63:EA:1B
            X509v3 Authority Key Identifier:
                keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5j9D299wZEj1Q4z49I5Eh9lj6hs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.77.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:98:fb:46:ef:c1:d5:c8:3e:91:1c:6b:dd:a3:eb:87:8e:84:
         ec:6b:a0:04:8c:79:b1:ab:b7:b0:fe:83:1b:26:3b:b6:d5:75:
         2d:a2:8b:aa:1d:2d:81:be:95:bd:06:13:eb:dd:31:d1:ef:b8:
         b0:ac:74:13:ee:08:cd:3c:95:eb:a9:5b:96:2b:12:0a:10:55:
         09:d7:ec:ab:82:7c:1c:1c:76:23:f2:de:23:61:8b:5e:27:94:
         ff:fc:7f:f2:fd:34:b9:56:55:27:89:da:6d:16:d5:9a:3e:24:
         88:5f:c7:0e:62:e5:5b:1d:3b:92:07:c5:68:11:90:2d:d9:5a:
         85:aa:5f:46:a1:97:65:09:b9:df:d2:af:6f:ba:b9:42:7b:23:
         51:cc:b3:56:49:33:0d:8f:48:15:b2:ce:95:e7:44:55:7d:8a:
         46:e7:e7:7a:5b:46:18:2d:74:14:3e:b8:65:cd:49:20:b2:79:
         c4:54:9c:7a:b8:dc:27:f9:08:1f:59:06:59:41:f0:d9:46:a8:
         dc:6f:fe:7a:61:ae:b8:14:3c:f8:1f:5c:87:6b:26:9b:d8:91:
         1f:99:c2:f1:4c:31:57:64:1d:2d:6a:ef:e1:94:dc:a2:fb:02:
         fc:b8:07:e8:77:ec:06:ca:79:b7:73:68:e8:23:c5:dc:ea:8b:
         7c:a1:27:c5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEuAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMDQw
NzA2MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2M0Y0M0RCREY3MDY0
NDhGNTQzOENGOEY0OEU0NDg3RDk2M0VBMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXCEgLKg5pdDThYGrzZg2BrfaO99bCPFS+Z3VkZo7TyTAuumsF
p5GcZzg1CsbObKuv12LaAq+f4HlWoi7tpb2hJKXDg++G4aeERDC6+5+Ab8wmbTGR
QLK6Ob2aEhRVij1f1Qsjvig9zfgBoLHYj5+6mr9t8l3QKL438QUzMOUrMW5XeQE0
bQAMgQzYAr3l8EUl6xrvdr1BJYd0WmLq4dJtTzYg8t9A6Iw+VoioNbiYSQS7Ow+B
7whwJBYCf7X9lDB2souk6lyecAN/2CDm2rs6WdhtucBrod5sPtlERA9lrg4RO6gr
kAkbHAslLQZz5/xXiA85cbmspBypVjwGyvlDAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU5j9D299wZEj1Q4z49I5Eh9lj6hswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNWo5RDI5OXdaRWoxUTR6
NDlJNUVoOWxqNmhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BctNIDANBgkqhkiG9w0BAQsFAAOCAQEAUZj7Ru/B1cg+kRxr3aPrh46E7GugBIx5
sau3sP6DGyY7ttV1LaKLqh0tgb6VvQYT690x0e+4sKx0E+4IzTyV66lblisSChBV
Cdfsq4J8HBx2I/LeI2GLXieU//x/8v00uVZVJ4nabRbVmj4kiF/HDmLlWx07kgfF
aBGQLdlahapfRqGXZQm539Kvb7q5QnsjUcyzVkkzDY9IFbLOledEVX2KRufneltG
GC10FD64Zc1JILJ5xFScerjcJ/kIH1kGWUHw2Uao3G/+emGuuBQ8+B9ch2smm9iR
H5nC8UwxV2QdLWrv4ZTcovsC/LgH6HfsBsp5t3No6CPF3OqLfKEnxQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:15:37 2025 by rpki-client