Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FQeao2-R76pCU9Ep9_Lc7Ct8klM.roa
File:                     FQeao2-R76pCU9Ep9_Lc7Ct8klM.roa (raw, json)
Hash identifier:          K0yuryMDJuoFNg1Mb48oOMKO6xlWQGHfCnegHKtccTo=
Subject key identifier:   15:07:9A:A3:6F:91:EF:AA:42:53:D1:29:F7:F2:DC:EC:2B:7C:92:53
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       338D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FQeao2-R76pCU9Ep9_Lc7Ct8klM.roa
Signing time:             Mon 10 Feb 2025 13:51:32 +0000
ROA not before:           Mon 10 Feb 2025 13:51:32 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.0.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13197 (0x338d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:32 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=15079AA36F91EFAA4253D129F7F2DCEC2B7C9253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:cb:b3:5b:c4:0b:48:e1:a2:77:47:45:3a:
                    89:e8:26:97:90:04:6e:57:0b:8f:9a:de:e6:fd:d9:
                    2a:22:50:c6:e6:0d:88:2a:59:01:73:b5:39:ff:da:
                    1b:24:6e:44:ff:9c:7f:1a:44:3c:a4:a9:42:2c:aa:
                    e8:45:a1:9b:5e:f2:50:ad:9a:59:ea:17:8f:b1:bb:
                    33:44:28:92:89:2d:23:ad:6d:18:5a:d6:f8:08:89:
                    c2:1f:31:18:5f:ff:64:d6:69:ff:05:06:38:e6:eb:
                    33:09:2a:fa:5b:aa:43:d8:0a:a4:24:ba:6e:d9:48:
                    07:9a:f6:25:61:02:10:93:b3:b1:02:9f:02:41:a9:
                    fb:7b:86:6b:a7:6b:d3:a7:c6:ff:d5:ec:73:ad:56:
                    25:95:4e:f0:13:94:7b:04:ca:79:0a:ad:8c:f4:c1:
                    7e:c4:77:48:e9:9d:a6:ac:5d:15:58:3a:43:52:33:
                    16:88:dc:e2:e7:dd:6e:07:54:0c:1c:f8:60:e7:ee:
                    d5:d5:08:86:0f:86:3b:87:98:d6:e1:84:3c:39:90:
                    98:1f:70:42:d7:57:e0:01:84:5c:9e:5e:17:4f:9b:
                    16:09:a9:4b:55:8b:8f:ee:e5:c8:0e:f4:70:e2:50:
                    ea:c8:31:da:ef:21:19:0f:07:5c:95:d6:27:f7:f7:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:07:9A:A3:6F:91:EF:AA:42:53:D1:29:F7:F2:DC:EC:2B:7C:92:53
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FQeao2-R76pCU9Ep9_Lc7Ct8klM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:af:4c:23:27:7e:d2:d7:47:53:6f:90:d7:4b:45:75:af:
         67:dc:55:cd:1b:9b:72:94:85:3f:88:ec:7d:18:4d:3a:a4:88:
         74:fd:de:64:2f:4e:73:90:02:a3:44:91:73:93:84:81:21:d5:
         06:93:0a:c6:89:fc:d2:ad:af:16:2b:48:9f:7e:10:07:a5:12:
         0b:92:f9:54:99:6a:23:92:fc:21:2d:86:3f:d8:66:17:b1:2e:
         8a:01:35:e3:91:89:8b:b1:09:c5:42:bc:ed:55:26:92:0c:be:
         bd:ec:f4:88:88:e7:7f:b5:b0:d8:40:9b:da:ad:9d:7a:6e:c7:
         72:1d:b2:84:33:bf:d0:b4:45:7c:48:64:fa:7e:99:56:1f:7f:
         e7:89:24:17:3d:56:59:ad:84:e8:0c:57:d1:55:66:74:71:be:
         ae:69:93:ba:af:c3:0a:ad:c3:38:6c:ff:fe:d5:0d:54:e5:63:
         76:1a:8b:40:21:96:7e:98:0b:ba:e2:d4:af:e5:43:52:8f:03:
         95:d5:cd:92:aa:6a:10:60:9f:6b:c5:df:cd:6c:b3:f8:77:99:
         89:41:f8:f1:15:b0:33:4b:00:6c:d6:8d:77:c2:f2:98:76:96:
         32:ae:ad:15:35:f4:09:87:2a:0c:50:82:39:60:07:4e:6a:c3:
         ab:95:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:16 2025 by rpki-client