Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FcPTf_engvbGbvNAfsdGBewPhzU.roa
File:                     FcPTf_engvbGbvNAfsdGBewPhzU.roa (raw, json)
Hash identifier:          f0dWLJCsUn85ozSLkFu0NP3lfP5KHj+3ifLdiNN0Ilw=
Subject key identifier:   15:C3:D3:7F:F7:A7:82:F6:C6:6E:F3:40:7E:C7:46:05:EC:0F:87:35
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3553
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FcPTf_engvbGbvNAfsdGBewPhzU.roa
Signing time:             Mon 10 Feb 2025 13:53:14 +0000
ROA not before:           Mon 10 Feb 2025 13:53:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13651 (0x3553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=15C3D37FF7A782F6C66EF3407EC74605EC0F8735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:5e:32:18:ba:6b:d6:bc:cf:95:f7:a3:9a:
                    42:f7:47:c6:dd:be:93:4e:a4:52:6c:d4:39:48:9f:
                    1c:2a:72:f1:c4:2f:94:8a:3f:89:1d:a9:25:7e:2b:
                    bd:aa:e3:03:35:48:24:af:a2:f9:86:4c:65:e3:1b:
                    2c:ce:2a:7c:f1:0f:f9:61:01:7a:6e:c1:a3:62:4c:
                    59:b1:8d:45:38:6e:b8:3c:14:d7:78:28:8c:b7:31:
                    18:b9:3f:b9:3b:7f:8b:c8:61:e7:7a:31:7c:8d:50:
                    f7:8f:4a:1f:80:40:29:70:2e:6d:e6:9e:c6:14:91:
                    c1:04:0c:4e:11:a5:18:cc:bd:66:0e:a1:3b:cb:13:
                    02:64:5b:fa:3b:e0:58:84:d1:bf:54:76:68:67:be:
                    02:33:c5:2c:ad:98:62:a2:f3:73:a6:db:86:f2:d5:
                    1d:9e:49:7a:16:73:3a:c4:5a:0c:7c:ec:5a:2c:4d:
                    34:24:c6:5d:3e:45:74:0f:6d:b4:a2:cd:8b:6f:c2:
                    a7:53:68:ff:ea:ba:6d:42:d3:01:ae:86:97:d3:e1:
                    bc:99:c0:80:37:aa:3a:a4:b6:25:d0:cc:3e:fc:f8:
                    5d:d8:b0:19:a6:be:32:60:6d:c0:12:53:c4:49:75:
                    68:1a:fb:74:33:87:ab:1f:fd:85:e5:9b:1d:a8:76:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C3:D3:7F:F7:A7:82:F6:C6:6E:F3:40:7E:C7:46:05:EC:0F:87:35
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FcPTf_engvbGbvNAfsdGBewPhzU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:58:e8:c0:fa:c3:9f:9d:e1:88:2a:80:f0:0b:59:5e:be:
         4a:9b:31:d3:de:75:3a:15:a9:4c:10:50:9a:ee:3d:2c:f8:c3:
         96:b3:2e:29:12:82:8a:3f:ab:ee:b8:24:f6:ef:3e:7e:63:54:
         08:41:f3:b1:a7:1d:a6:86:3f:25:a5:1a:39:b6:c6:50:00:30:
         62:4f:26:25:a8:8c:a1:ab:51:7d:b7:ae:8f:8d:c3:73:23:56:
         95:3f:2a:44:0a:4a:f6:55:d8:d1:d5:94:c9:a1:a7:b3:c0:bf:
         1b:a0:3f:6c:e8:3b:b6:36:63:6c:ee:a3:0b:6e:41:ce:59:11:
         4d:74:36:d3:48:0d:74:f9:73:43:96:f0:a6:1d:64:f1:58:ac:
         ea:d3:f1:87:d1:ee:20:a2:c8:2c:9b:1f:d9:f4:46:66:61:37:
         85:89:3b:80:28:91:4e:86:16:b2:75:dc:d3:0d:f6:da:87:6a:
         c4:2e:87:cf:59:17:7b:1e:0a:91:a9:15:8c:0b:0d:00:7c:78:
         0f:4e:52:4a:db:8c:5f:5f:27:34:66:84:3e:fa:fe:cd:d6:de:
         f1:c7:24:7c:50:1b:0f:fb:ba:aa:f8:f1:ef:fe:e8:e2:b3:c2:
         b8:39:15:fb:4c:43:a3:1e:90:dc:04:cc:d9:d1:96:1d:99:07:
         f2:41:58:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:51 2025 by rpki-client