Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/gD5X77Z549QweS7og66H9Jo3Ph8.roa
File:                     gD5X77Z549QweS7og66H9Jo3Ph8.roa (raw, json)
Hash identifier:          S6xdjNLO52Aclu5M42zVXQFFCDmQqHa7ec3Tvs0oc/g=
Subject key identifier:   80:3E:57:EF:B6:79:E3:D4:30:79:2E:E8:83:AE:87:F4:9A:37:3E:1F
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       0F3E
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gD5X77Z549QweS7og66H9Jo3Ph8.roa
Signing time:             Mon 17 Feb 2025 09:01:19 +0000
ROA not before:           Mon 17 Feb 2025 09:01:19 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17716
IP address blocks:        120.96.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3902 (0xf3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb 17 09:01:19 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=803E57EFB679E3D430792EE883AE87F49A373E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:68:6b:d0:ed:67:d0:8f:84:01:e1:91:04:
                    e1:cc:41:d8:41:91:b8:19:ef:94:10:33:98:77:24:
                    07:6a:36:27:3d:ff:32:3b:e3:82:dd:a4:ac:5c:22:
                    35:60:2d:9c:e0:b4:17:c7:e5:e0:e2:38:ed:3f:7d:
                    6b:f5:cb:83:02:97:32:f1:81:16:63:91:d1:7a:7d:
                    77:78:87:e9:76:54:30:94:64:00:0a:9f:b9:a0:2c:
                    a3:93:50:29:41:d0:75:25:d7:fc:15:ca:de:46:4c:
                    46:de:42:fb:5d:1e:c8:12:40:73:aa:35:df:0d:1d:
                    2d:ae:9f:9c:94:d9:47:6d:f3:53:5a:e7:6a:b4:08:
                    37:16:db:aa:b8:90:7e:6e:07:f1:b1:6f:96:bf:5c:
                    3b:79:c4:ef:31:6d:75:3f:de:9b:8f:bc:79:f1:57:
                    f9:20:b3:2a:27:25:a8:bb:d6:ea:de:ce:57:b4:cf:
                    c3:6a:e7:81:09:f8:77:92:21:56:f0:0a:dc:3a:94:
                    2a:bd:b6:12:53:94:4f:f4:40:46:5d:9c:72:44:d2:
                    b9:60:96:e0:2c:ac:e8:78:ef:37:fd:be:86:ad:3f:
                    63:df:85:ed:f8:3c:a0:34:c3:03:85:b4:8e:5d:2a:
                    e6:37:ba:e2:31:cb:6b:a0:6b:20:5c:a6:db:29:98:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:57:EF:B6:79:E3:D4:30:79:2E:E8:83:AE:87:F4:9A:37:3E:1F
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/gD5X77Z549QweS7og66H9Jo3Ph8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.96.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         37:d6:e5:ce:81:01:57:7e:c5:ac:af:da:5f:4f:46:8a:73:3f:
         34:b0:08:ee:e4:ba:b9:7e:94:96:1d:74:5f:ec:c2:6c:80:e0:
         26:94:65:4f:e0:36:34:ae:d1:ab:45:38:5c:4f:43:28:fd:bb:
         d2:2f:3a:b5:f3:8b:88:63:0f:e8:f9:cb:c1:51:a4:8d:6c:8d:
         64:e0:82:8b:9a:d0:3f:69:c2:15:bb:c0:7d:fd:ab:04:71:be:
         3a:16:1e:db:17:2c:2e:c5:80:c2:fc:dc:07:7b:4d:a9:06:d8:
         23:dd:d8:e6:93:71:60:77:d1:f9:15:39:4d:be:d6:10:7c:da:
         47:7d:7d:ca:f8:e3:5b:32:2d:a3:6e:0b:5f:b0:47:c9:38:e0:
         e5:c7:9d:97:a8:90:83:ac:bd:a8:71:e6:0d:fb:cf:cb:e3:20:
         73:af:4d:a3:17:df:f8:30:80:71:f8:0c:6c:28:cb:44:7f:79:
         46:6e:e6:31:a1:f6:f5:6c:38:b6:ce:d7:9e:ad:cd:8e:6e:94:
         3b:6d:99:b8:ad:f8:90:f1:75:db:f4:f8:71:04:be:a3:c9:c2:
         72:62:88:c7:1d:37:5b:03:f5:15:2d:15:90:39:be:33:63:60:
         fc:43:15:dd:03:8d:cf:c9:7c:88:66:4d:f6:43:a4:2d:fc:15:
         40:b3:ca:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:16:37 2025 by rpki-client