Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIDC/V_qjM6rEZNIZ23Bq0J8N83ubk0o.roa
File:                     V_qjM6rEZNIZ23Bq0J8N83ubk0o.roa (raw, json)
Hash identifier:          lZVrpZE0cOVj64RuOpXX4ic28a2TdF1CylixCgpH5TM=
Subject key identifier:   57:FA:A3:33:AA:C4:64:D2:19:DB:70:6A:D0:9F:0D:F3:7B:9B:93:4A
Certificate issuer:       /CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
Certificate serial:       094D
Authority key identifier: C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/V_qjM6rEZNIZ23Bq0J8N83ubk0o.roa
Signing time:             Wed 29 Sep 2021 02:44:32 +0000
ROA not before:           Wed 29 Sep 2021 02:44:32 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     131609
IP address blocks:        103.99.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C08515C8B9FB53F8CED489D2134F6441FFADA05E
        Validity
            Not Before: Sep 29 02:44:32 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=57FAA333AAC464D219DB706AD09F0DF37B9B934A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:6a:d2:58:49:21:ab:eb:e1:04:2f:59:2a:
                    31:4a:e9:33:0b:ea:00:ff:e7:b9:b2:5b:ab:e7:7b:
                    a2:57:76:5d:be:1a:c5:72:2a:be:1a:3c:4e:94:4e:
                    76:e4:bc:f1:44:52:69:79:0e:89:1f:9b:bc:35:fb:
                    33:b2:3c:cd:b7:68:e0:df:61:44:5b:6a:1e:10:2a:
                    c6:dd:6a:86:2d:2c:36:a4:c1:56:fe:e7:b5:67:ff:
                    4a:aa:88:db:ef:fd:4f:8d:59:61:9f:72:5c:63:59:
                    ac:16:57:d0:09:46:30:0e:5d:a9:95:e4:eb:e2:85:
                    a5:22:4d:a3:53:86:09:fd:c1:eb:26:47:74:38:a9:
                    a5:cb:89:92:f9:df:b2:5b:ab:24:9d:61:5c:79:3b:
                    77:79:f9:25:4f:2b:ac:99:0b:5e:a7:a6:d7:32:73:
                    64:40:3a:5b:be:55:b9:73:4f:f7:57:f7:c8:40:d0:
                    81:8b:64:9b:0b:96:ee:a4:df:3c:e9:23:81:97:55:
                    60:c7:05:56:ef:25:af:8c:18:94:e9:c7:a0:49:62:
                    92:f7:49:ac:06:78:ff:5b:97:99:57:e0:03:1d:bc:
                    9f:ab:e0:68:3b:49:be:b0:f1:2c:c0:6d:e3:18:6c:
                    c5:b7:6c:93:af:9d:ad:7c:46:e2:62:81:26:8f:75:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:A3:33:AA:C4:64:D2:19:DB:70:6A:D0:9F:0D:F3:7B:9B:93:4A
            X509v3 Authority Key Identifier:
                keyid:C0:85:15:C8:B9:FB:53:F8:CE:D4:89:D2:13:4F:64:41:FF:AD:A0:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/wIUVyLn7U_jO1InSE09kQf-toF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wIUVyLn7U_jO1InSE09kQf-toF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIDC/V_qjM6rEZNIZ23Bq0J8N83ubk0o.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:c9:1d:b8:53:d8:10:2b:0d:96:3c:02:c9:c0:39:bf:80:bf:
         7c:dd:77:6d:d9:5b:3b:a5:11:71:99:ea:42:02:93:40:91:83:
         d1:49:9a:e9:95:cb:45:9e:e6:d7:20:03:51:ab:76:78:99:f9:
         e4:c6:1d:a9:93:7e:9d:f6:6c:32:73:42:bb:c7:6d:23:2d:3b:
         9c:c2:d5:01:13:84:6c:7a:bd:98:f3:9f:d5:7d:dd:de:2c:1d:
         34:84:d9:30:58:c6:03:15:cc:ba:cb:02:c8:29:89:7f:3e:dc:
         5e:26:b7:bc:0c:b5:77:d0:ee:c7:cb:62:f0:86:97:07:ad:7d:
         be:33:43:17:c8:99:0b:c8:74:68:d2:38:37:57:09:ac:78:f8:
         8b:dd:9a:e7:d4:81:73:6a:8c:31:e6:13:32:69:6d:db:2d:4c:
         34:a1:ae:43:b7:2a:9a:08:16:20:de:98:4a:54:4f:fc:d6:fc:
         9e:75:b6:63:50:89:48:b3:27:c1:d3:f8:c4:e7:4a:ca:84:35:
         2c:ac:8a:67:24:40:4c:d9:61:d6:8d:69:dd:86:9a:17:6a:10:
         c6:ae:05:8b:5b:63:97:62:20:12:4a:c9:f1:3a:a2:69:0c:07:
         b6:b7:c6:88:e2:ac:b0:74:a9:7d:a6:cf:6e:28:9b:be:a3:55:
         df:7a:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:28 2025 by rpki-client