Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/nRn3MwUS7Orin0tgbpkeKieqLm8.roa
File:                     nRn3MwUS7Orin0tgbpkeKieqLm8.roa (raw, json)
Hash identifier:          JEfEegBRh1sKFXOwskKNoFI+r6MbcljqVe/y+eVp/k8=
Subject key identifier:   9D:19:F7:33:05:12:EC:EA:E2:9F:4B:60:6E:99:1E:2A:27:AA:2E:6F
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0C6E
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/nRn3MwUS7Orin0tgbpkeKieqLm8.roa
Signing time:             Mon 10 Feb 2025 14:20:10 +0000
ROA not before:           Mon 10 Feb 2025 14:20:10 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     40065
IP address blocks:        103.229.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3182 (0xc6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Feb 10 14:20:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9D19F7330512ECEAE29F4B606E991E2A27AA2E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:1e:c8:34:1a:b1:11:da:c2:87:98:1a:b9:
                    c4:5d:43:55:6f:3b:c5:85:bd:6e:2f:b9:d2:d5:29:
                    5c:e4:ba:5a:ff:62:77:ba:98:3f:f0:aa:16:e8:5f:
                    3d:5f:84:ad:75:4b:ab:92:78:3e:30:f2:d6:e5:28:
                    81:71:23:30:36:f0:24:fb:c3:f2:4e:f6:cf:89:d0:
                    66:9a:9f:ea:44:36:d5:ed:79:23:80:ae:b8:f4:02:
                    b3:65:d5:35:ce:4f:20:bf:e0:50:89:8f:b0:14:6a:
                    6d:fc:81:81:10:10:27:b1:a2:8a:b2:76:52:55:2b:
                    35:e1:7d:4c:06:ac:f7:ad:54:dd:64:1c:e5:57:ca:
                    6a:de:12:af:5b:23:86:d5:e6:11:16:9f:a2:8d:de:
                    34:28:49:71:a3:04:83:b4:fc:a2:18:81:ce:1e:0e:
                    8d:4c:07:f6:25:3a:ef:42:91:b9:03:b2:e7:cb:ca:
                    5d:1d:49:7c:f3:38:6f:72:60:69:05:f8:26:4e:eb:
                    49:d0:06:52:cf:b1:8b:21:f9:bc:31:6d:17:b3:54:
                    a5:59:9d:60:90:e2:d1:d5:59:37:4f:6c:c5:9d:b9:
                    e1:f0:b4:6b:9e:52:a5:59:51:ae:40:86:5f:5e:ec:
                    e1:8d:de:5e:5c:e7:03:52:f2:4b:fe:ed:a8:8e:ff:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:F7:33:05:12:EC:EA:E2:9F:4B:60:6E:99:1E:2A:27:AA:2E:6F
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/nRn3MwUS7Orin0tgbpkeKieqLm8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:3c:ef:83:9d:c1:7d:75:f6:90:3d:f4:f2:33:bd:63:5e:b5:
         3d:21:cd:80:4f:cd:f8:14:39:bc:ab:a4:7c:9d:ba:39:00:94:
         86:96:52:37:5b:57:d6:8d:f8:af:16:04:5f:d5:ad:41:42:89:
         b9:60:4a:99:aa:2d:08:ce:43:8e:e5:64:22:41:21:2a:1d:f4:
         39:eb:11:0a:2d:6f:12:6f:94:d7:64:ed:a9:4c:96:10:f8:44:
         95:15:4a:75:7f:fb:c1:5e:7f:0a:d6:e2:45:2c:e3:25:40:1a:
         fe:59:68:92:68:e1:ff:5d:36:66:38:ce:d1:14:28:b9:75:5d:
         84:06:9d:fb:1f:c2:c9:c1:15:6f:9a:be:f1:e8:c5:e6:86:81:
         85:f5:e4:39:df:52:8b:bd:a0:46:e7:19:8f:80:25:21:92:c1:
         b6:9f:b2:c0:05:83:8f:1c:ca:a3:65:0e:ef:62:c0:e8:3b:09:
         d4:04:c2:7b:05:75:7e:a8:83:35:95:59:a4:76:d9:21:6d:c7:
         9d:f2:9c:a1:3f:6e:70:96:a4:10:23:33:a3:16:5b:a0:32:1b:
         b2:21:d4:e5:b1:2c:a8:95:fe:4f:3d:8e:a7:eb:a9:25:a2:36:
         ec:e5:66:2f:53:3d:f7:2d:a3:a7:ee:cb:f0:a3:cc:36:55:a1:
         86:ae:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:37:02 2025 by rpki-client