Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G6np8Fot0Klb2B1w_PvZTyVUigI.roa
File:                     G6np8Fot0Klb2B1w_PvZTyVUigI.roa (raw, json)
Hash identifier:          v9fzSSaEbtOIRPIrjSFToz2X7V/NRvTQbnZozyt8Q7w=
Subject key identifier:   1B:A9:E9:F0:5A:2D:D0:A9:5B:D8:1D:70:FC:FB:D9:4F:25:54:8A:02
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       36C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G6np8Fot0Klb2B1w_PvZTyVUigI.roa
Signing time:             Mon 10 Feb 2025 13:54:39 +0000
ROA not before:           Mon 10 Feb 2025 13:54:39 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14018 (0x36c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:54:39 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1BA9E9F05A2DD0A95BD81D70FCFBD94F25548A02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:8b:bd:c8:04:6f:f6:48:7f:55:ec:1f:f6:
                    bd:4a:df:90:e5:b1:f8:25:ec:c7:a6:5b:bb:57:80:
                    ba:0d:78:ab:d5:eb:a7:26:70:e3:4e:6c:b7:f4:15:
                    0c:3b:1f:5e:92:07:f8:93:d4:c4:1b:ac:60:32:34:
                    3b:c9:fa:c0:64:96:0d:7b:86:a3:9d:aa:e3:c8:a7:
                    ed:cd:73:df:c3:2f:f6:12:00:86:4b:f5:be:ba:41:
                    90:d1:2d:2d:37:ce:00:c3:d8:5e:9d:89:1d:ea:4f:
                    a2:f0:90:03:9e:23:07:ed:f0:c5:a2:e5:40:65:32:
                    4b:2e:bc:3e:2a:98:90:cc:96:ca:03:d3:5b:2d:72:
                    80:84:ad:28:40:10:64:15:00:db:69:1e:59:e7:78:
                    b0:f3:4a:e9:a9:34:ca:1f:30:7c:c5:8d:a3:d9:a9:
                    56:d0:e4:aa:1d:71:a9:ea:3e:4f:47:91:2c:24:26:
                    6c:1a:76:b3:aa:1c:f2:1d:fa:cd:7c:48:38:32:e0:
                    a5:55:0c:64:72:59:27:7b:7d:7e:fd:b3:a5:7b:5e:
                    48:7c:c8:f8:a4:f2:22:ba:be:31:ff:f8:1d:e0:27:
                    ab:83:eb:94:87:65:d2:fd:c4:88:01:bc:67:94:0c:
                    cf:30:ca:38:ff:b1:1f:ef:d9:f5:d2:dd:ca:aa:57:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:E9:F0:5A:2D:D0:A9:5B:D8:1D:70:FC:FB:D9:4F:25:54:8A:02
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G6np8Fot0Klb2B1w_PvZTyVUigI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:24:c8:61:7d:07:92:68:0c:42:99:57:2f:61:7a:30:84:88:
         9a:23:d8:be:25:23:1d:71:ae:69:42:0a:e6:e6:db:2c:8c:3c:
         fd:c9:8f:9c:04:ff:f8:79:84:a3:ab:86:7e:fe:7a:e0:f1:31:
         eb:33:6e:93:f4:64:e4:13:6d:2b:a9:2c:86:52:eb:d2:11:ad:
         f7:d1:60:0a:6e:78:51:b7:29:44:7c:98:2f:f4:68:bb:33:87:
         2a:dd:39:87:60:fd:15:e3:0a:27:35:65:c0:02:bc:84:cb:85:
         ca:04:5a:fc:7a:65:37:d4:8d:0a:e2:1d:91:fc:07:54:8e:43:
         cb:2c:ba:66:92:44:dd:c2:c2:8b:d6:92:5d:9c:04:a0:66:df:
         44:31:1b:46:4f:61:b7:e3:36:40:26:18:13:17:85:52:5b:05:
         c5:35:da:5e:02:4e:9f:aa:ae:d0:31:cf:41:1f:4c:5e:b7:a8:
         63:d7:4c:81:63:82:76:2c:ce:37:f0:c4:0d:c0:04:a0:78:8e:
         d0:fc:b3:81:27:33:e6:c0:00:cd:71:f8:4c:da:49:3d:b5:50:
         6d:ba:ed:79:f5:c2:97:41:4b:6c:ed:dc:a6:00:6d:3e:04:eb:
         a0:35:02:c8:b9:3a:d1:2e:24:67:80:99:10:b3:75:7e:83:38:
         fe:f9:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:23 2025 by rpki-client