Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/AhpBwA6DigIYFU0kh2opKo3UgoM.roa
File:                     AhpBwA6DigIYFU0kh2opKo3UgoM.roa (raw, json)
Hash identifier:          EuyROugNb9aotCr1SzAQ/oG/Bx/PzN9KSIT9qy031bI=
Subject key identifier:   02:1A:41:C0:0E:83:8A:02:18:15:4D:24:87:6A:29:2A:8D:D4:82:83
Certificate issuer:       /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Certificate serial:       022B
Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/AhpBwA6DigIYFU0kh2opKo3UgoM.roa
Signing time:             Mon 10 Feb 2025 14:31:51 +0000
ROA not before:           Mon 10 Feb 2025 14:31:51 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131657
IP address blocks:        103.51.88.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
        Validity
            Not Before: Feb 10 14:31:51 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=021A41C00E838A0218154D24876A292A8DD48283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:01:71:94:f6:8a:54:42:55:8b:84:35:02:
                    69:36:ab:5a:f4:a0:9b:fe:62:3e:ea:23:f5:11:af:
                    ef:3f:2d:66:b3:bf:66:e8:ef:82:02:28:df:d1:ae:
                    18:d1:83:17:6e:1b:b6:47:ee:02:1e:a0:20:32:f3:
                    2b:c6:e0:62:50:2c:21:93:c2:d4:cf:ef:2c:60:a2:
                    40:4b:24:30:fb:b6:de:3e:0b:b8:e2:6c:a6:5d:1e:
                    ad:1c:de:3b:79:c0:4f:ca:98:20:4b:51:71:a1:aa:
                    ea:2c:d8:b3:fc:f1:fa:9a:f7:1f:c7:2a:7a:21:51:
                    e4:3f:5e:cb:a5:94:99:67:f2:dd:ab:49:ad:55:09:
                    e7:1d:ce:ee:0d:24:a6:2b:2a:87:c5:1e:13:9b:2c:
                    0a:89:c2:d0:39:af:bc:d5:fd:fa:47:af:ad:8f:75:
                    db:51:78:7b:82:4a:2e:8a:6e:ca:6f:0c:32:bd:26:
                    b0:04:00:2b:ae:be:40:a9:70:c6:50:a6:95:af:39:
                    ba:73:fa:41:54:da:ce:98:dd:ab:57:cd:bd:26:f8:
                    86:5a:c2:3e:c1:b3:6e:0c:56:ea:ed:aa:e1:f9:66:
                    74:7e:6c:17:9e:02:fe:9d:bb:06:d6:88:a1:87:bf:
                    cf:10:1c:cb:44:ab:25:d5:f1:9c:6b:71:91:82:94:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:41:C0:0E:83:8A:02:18:15:4D:24:87:6A:29:2A:8D:D4:82:83
            X509v3 Authority Key Identifier:
                keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/AhpBwA6DigIYFU0kh2opKo3UgoM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:0c:1d:fb:44:66:83:f1:ef:fe:36:10:10:e2:b8:fb:50:c3:
         ba:20:6a:79:53:4c:ec:4f:d0:b2:37:d2:01:cd:e1:b1:12:b3:
         c7:53:a4:a8:db:49:5f:ff:77:0e:12:09:e4:90:14:a0:60:e4:
         b3:a2:fd:e6:b6:33:f7:ce:93:db:ba:59:74:3b:8e:a3:2f:26:
         28:4f:de:7a:90:ee:3f:8d:d9:dc:41:79:4e:db:7c:fe:3d:5e:
         ef:eb:fc:af:cc:06:d7:a9:e3:24:be:b6:fe:e1:72:1b:75:3e:
         28:cc:1a:7a:c9:c7:ef:ce:fa:75:e3:f6:c1:cd:bb:ec:b2:46:
         b5:d0:3d:15:57:17:c8:e3:ae:3a:82:a9:ff:39:c1:27:03:f1:
         a0:1b:99:bf:82:1b:7a:ea:62:a5:8d:ce:a9:a0:e8:3d:e4:9e:
         a3:81:8d:40:d3:bf:ff:9a:46:3d:d9:4c:49:5d:f6:5e:3e:a7:
         c6:70:3e:2d:7b:1d:1f:ea:71:25:ce:a1:5f:2b:c4:79:63:97:
         de:72:6e:8c:6c:f1:00:9e:50:bf:9f:9a:8b:2e:22:b9:a0:a4:
         b0:df:19:68:32:da:11:80:59:3e:16:bf:e3:d7:3e:d4:03:5a:
         6b:8f:b9:83:dd:a7:af:74:86:fb:76:04:f5:f9:c9:be:49:19:
         fd:c0:d8:63
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG
Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTAyMTAx
NDMxNTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDAyMUE0MUMwMEU4MzhB
MDIxODE1NEQyNDg3NkEyOTJBOERENDgyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7KgFxlPaKVEJVi4Q1Amk2q1r0oJv+Yj7qI/URr+8/LWazv2bo
74ICKN/RrhjRgxduG7ZH7gIeoCAy8yvG4GJQLCGTwtTP7yxgokBLJDD7tt4+C7ji
bKZdHq0c3jt5wE/KmCBLUXGhquos2LP88fqa9x/HKnohUeQ/XsullJln8t2rSa1V
Cecdzu4NJKYrKofFHhObLAqJwtA5r7zV/fpHr62PddtReHuCSi6KbspvDDK9JrAE
ACuuvkCpcMZQppWvObpz+kFU2s6Y3atXzb0m+IZawj7Bs24MVurtquH5ZnR+bBee
Av6duwbWiKGHv88QHMtEqyXV8ZxrcZGClEdtAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUAhpBwA6DigIYFU0kh2opKo3UgoMwHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0
wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS
SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vQWhwQndBNkRp
Z0lZRlUwa2gyb3BLbzNVZ29NLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAWczWDANBgkqhkiG9w0BAQsFAAOCAQEAEAwd+0Rmg/Hv/jYQEOK4+1DD
uiBqeVNM7E/QsjfSAc3hsRKzx1OkqNtJX/93DhIJ5JAUoGDks6L95rYz986T27pZ
dDuOoy8mKE/eepDuP43Z3EF5Ttt8/j1e7+v8r8wG16njJL62/uFyG3U+KMwaesnH
7876deP2wc277LJGtdA9FVcXyOOuOoKp/znBJwPxoBuZv4IbeupipY3OqaDoPeSe
o4GNQNO//5pGPdlMSV32Xj6nxnA+LXsdH+pxJc6hXyvEeWOX3nJujGzxAJ5Qv5+a
iy4iuaCksN8ZaDLaEYBZPha/49c+1ANaa4+5g92nr3SG+3YE9fnJvkkZ/cDYYw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:04:41 2025 by rpki-client