Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/PUoyGdavExwhF9sKkOenZNA9rgE.roa
File:                     PUoyGdavExwhF9sKkOenZNA9rgE.roa (raw, json)
Hash identifier:          GMLRvnRlUi2ugGfDdmT9vlx22ndxbaGUP2l0sWPR8J0=
Subject key identifier:   3D:4A:32:19:D6:AF:13:1C:21:17:DB:0A:90:E7:A7:64:D0:3D:AE:01
Certificate issuer:       /CN=ADC7E450F1C2BB9FED0413B26CC08732E2C1C0F9
Certificate serial:       02A8
Authority key identifier: AD:C7:E4:50:F1:C2:BB:9F:ED:04:13:B2:6C:C0:87:32:E2:C1:C0:F9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rcfkUPHCu5_tBBOybMCHMuLBwPk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/PUoyGdavExwhF9sKkOenZNA9rgE.roa
Signing time:             Mon 26 Aug 2024 05:26:11 +0000
ROA not before:           Mon 26 Aug 2024 05:26:11 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     396982
IP address blocks:        103.177.50.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADC7E450F1C2BB9FED0413B26CC08732E2C1C0F9
        Validity
            Not Before: Aug 26 05:26:11 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=3D4A3219D6AF131C2117DB0A90E7A764D03DAE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:6e:e6:5f:0f:87:27:7b:cc:6b:9c:e3:52:
                    f6:be:87:17:4b:b4:75:dc:2a:01:30:c9:e3:c0:5d:
                    69:95:9c:48:07:e6:f2:3d:c5:5a:26:b5:7c:26:bf:
                    2a:c8:ab:09:69:27:f0:dc:61:fb:f3:3a:e3:14:d5:
                    14:74:31:da:5f:73:fc:db:c0:a8:1b:40:6d:03:30:
                    d6:73:46:aa:cd:00:97:1f:b1:56:5b:27:3d:5e:e9:
                    3b:f6:8b:5c:fc:e2:3a:b5:20:2d:69:0e:1f:1f:f1:
                    ed:5c:2c:99:b3:b0:ad:8a:ef:46:fa:5e:5e:03:4b:
                    82:f8:61:5f:59:0d:0f:73:04:d9:09:35:20:24:97:
                    c9:0b:82:11:bd:49:25:38:d1:ff:95:99:eb:2f:7b:
                    b6:a3:5e:fa:e5:ee:df:bc:11:17:5f:51:da:b0:55:
                    4d:b1:80:37:c9:60:78:b6:69:00:cd:12:d8:71:a5:
                    e9:6e:5c:1c:b4:63:83:c3:fb:5e:0d:7a:76:f4:58:
                    ee:b4:b2:91:0a:df:db:cd:93:a3:d5:76:0c:31:cc:
                    81:a9:85:47:4b:44:30:fb:af:19:dc:c1:b1:d9:50:
                    ea:ea:5e:38:a7:5f:c7:05:21:d5:34:c9:b5:24:b8:
                    fa:e8:cf:80:e2:d9:d2:2a:4a:26:88:5d:1b:19:3d:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:32:19:D6:AF:13:1C:21:17:DB:0A:90:E7:A7:64:D0:3D:AE:01
            X509v3 Authority Key Identifier:
                keyid:AD:C7:E4:50:F1:C2:BB:9F:ED:04:13:B2:6C:C0:87:32:E2:C1:C0:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/rcfkUPHCu5_tBBOybMCHMuLBwPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rcfkUPHCu5_tBBOybMCHMuLBwPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIANGYUN/PUoyGdavExwhF9sKkOenZNA9rgE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:56:ea:a5:78:93:bd:3c:cf:7d:79:32:d1:cb:e5:17:51:
         7b:35:36:6b:cf:6c:9c:a2:58:fb:83:20:ab:6f:50:b0:79:97:
         ff:d6:44:bc:fe:f8:e6:ca:2f:9f:a4:fe:33:7f:9b:22:15:8c:
         0f:e6:16:35:6a:42:2d:58:88:9d:cc:74:65:39:8e:fc:3d:29:
         4c:79:65:5a:56:90:e0:3b:af:03:ed:9d:02:b7:67:a8:ae:19:
         46:90:14:c0:88:48:2e:b7:1b:05:cf:f9:71:6e:fb:1d:94:4e:
         56:7b:d1:cb:87:27:73:8a:79:9e:c3:33:04:76:a2:a7:3f:bb:
         d1:89:99:36:11:cd:90:a6:e9:01:c6:59:23:61:9f:72:45:12:
         0b:9a:94:af:25:f1:d1:b7:c8:ed:47:45:af:5b:bc:a8:1b:8c:
         60:91:64:7b:ec:fa:91:eb:b3:97:e3:cd:7a:06:f9:a1:38:45:
         8e:a2:d8:3f:26:19:38:c9:b9:91:4d:3a:07:8d:1f:90:fc:e0:
         d6:11:58:39:4e:24:92:e7:8f:28:0d:f0:f9:43:5a:e2:1d:b4:
         b2:b7:ca:10:c7:de:3f:49:d3:1b:f1:aa:c9:56:6b:84:1d:38:
         c2:b2:2d:eb:45:5d:dd:99:5f:54:8e:f2:56:79:07:0f:be:92:
         30:da:f4:86
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURD
N0U0NTBGMUMyQkI5RkVEMDQxM0IyNkNDMDg3MzJFMkMxQzBGOTAeFw0yNDA4MjYw
NTI2MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNENEEzMjE5RDZBRjEz
MUMyMTE3REIwQTkwRTdBNzY0RDAzREFFMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDayG7mXw+HJ3vMa5zjUva+hxdLtHXcKgEwyePAXWmVnEgH5vI9
xVomtXwmvyrIqwlpJ/DcYfvzOuMU1RR0Mdpfc/zbwKgbQG0DMNZzRqrNAJcfsVZb
Jz1e6Tv2i1z84jq1IC1pDh8f8e1cLJmzsK2K70b6Xl4DS4L4YV9ZDQ9zBNkJNSAk
l8kLghG9SSU40f+Vmesve7ajXvrl7t+8ERdfUdqwVU2xgDfJYHi2aQDNEthxpelu
XBy0Y4PD+14Nenb0WO60spEK39vNk6PVdgwxzIGphUdLRDD7rxncwbHZUOrqXjin
X8cFIdU0ybUkuProz4Di2dIqSiaIXRsZPa0rAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUPUoyGdavExwhF9sKkOenZNA9rgEwHwYDVR0jBBgwFoAUrcfkUPHCu5/tBBOy
bMCHMuLBwPkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lBTkdZ
VU4vcmNma1VQSEN1NV90QkJPeWJNQ0hNdUxCd1BrLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9yY2ZrVVBIQ3U1X3RCQk95Yk1DSE11TEJ3UGsuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUFOR1lVTi9QVW95R2RhdkV4d2hG
OXNLa09lblpOQTlyZ0Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ7EyMA0GCSqGSIb3DQEBCwUAA4IBAQBl1FbqpXiTvTzPfXky0cvlF1F7NTZr
z2ycolj7gyCrb1CweZf/1kS8/vjmyi+fpP4zf5siFYwP5hY1akItWIidzHRlOY78
PSlMeWVaVpDgO68D7Z0Ct2eorhlGkBTAiEgutxsFz/lxbvsdlE5We9HLhydzinme
wzMEdqKnP7vRiZk2Ec2QpukBxlkjYZ9yRRILmpSvJfHRt8jtR0WvW7yoG4xgkWR7
7PqR67OX4816BvmhOEWOotg/Jhk4ybmRTToHjR+Q/ODWEVg5TiSS548oDfD5Q1ri
HbSyt8oQx94/SdMb8arJVmuEHTjCsi3rRV3dmV9UjvJWeQcPvpIw2vSG
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:32 2025 by rpki-client