Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GUNwV4xLfQHjOHl6nNDgWAbEweU.roa
File:                     GUNwV4xLfQHjOHl6nNDgWAbEweU.roa (raw, json)
Hash identifier:          SRf1mdQUrjtn8WfH/Wu/fFlEif0vjcHDxlF5Z2s129A=
Subject key identifier:   19:43:70:57:8C:4B:7D:01:E3:38:79:7A:9C:D0:E0:58:06:C4:C1:E5
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       358C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GUNwV4xLfQHjOHl6nNDgWAbEweU.roa
Signing time:             Mon 10 Feb 2025 13:53:27 +0000
ROA not before:           Mon 10 Feb 2025 13:53:27 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13708 (0x358c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:27 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=194370578C4B7D01E338797A9CD0E05806C4C1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b6:6a:0f:5d:62:0a:b7:a8:ab:b0:8e:a6:d5:
                    66:49:79:8f:1d:2d:81:53:75:43:25:29:75:de:20:
                    90:4c:c8:a8:6f:da:22:08:c9:2d:ab:9a:2c:d6:4b:
                    78:f6:c5:4c:31:86:ea:81:9f:45:51:23:48:a4:42:
                    55:00:02:3d:f1:4e:e4:ff:0c:0b:26:aa:eb:d2:00:
                    e5:83:69:85:62:08:54:8a:66:73:d9:3a:c5:f8:5f:
                    b5:b2:24:0b:6c:54:01:26:c9:52:3e:5e:59:86:a5:
                    f0:3e:ea:1e:fa:19:ef:19:b5:9e:48:f9:68:86:a3:
                    58:36:67:28:ae:58:4a:4a:e5:d6:e4:bd:7d:04:b7:
                    22:77:23:da:6a:c1:d1:4d:07:62:f8:96:0e:0e:c3:
                    5a:57:ee:b7:e4:c5:cf:e1:de:53:c9:be:bf:c6:5c:
                    fc:ed:e6:e7:5c:80:4b:08:f5:56:1e:37:70:31:c6:
                    a6:e5:3f:7e:a2:df:3d:df:85:d3:09:37:cc:30:58:
                    77:b8:1b:96:fe:78:ca:6e:ed:03:7b:47:ef:b5:35:
                    9a:72:03:0e:4e:c8:02:18:4b:5b:36:9b:4c:df:eb:
                    10:67:b2:ab:0f:3e:ed:29:b7:01:c9:d4:14:d5:1c:
                    91:ce:88:d2:56:69:b6:16:3a:59:cc:fc:e0:2f:36:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:43:70:57:8C:4B:7D:01:E3:38:79:7A:9C:D0:E0:58:06:C4:C1:E5
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GUNwV4xLfQHjOHl6nNDgWAbEweU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:e5:d4:8c:ab:f8:5e:b2:b1:e2:e4:ab:42:b8:89:fa:11:
         ab:c1:d2:7a:89:c4:41:fa:2a:63:b1:62:4f:6e:7a:1c:37:47:
         d0:e0:cb:5d:5b:67:0b:f5:06:e4:5c:f6:ba:84:00:92:46:e9:
         90:3b:d2:7f:b9:5c:30:ca:67:97:96:d8:f4:4e:18:02:7e:e2:
         87:33:a9:50:8b:e6:81:6c:02:b7:1f:6e:ba:9c:aa:9a:fc:22:
         4e:74:9b:bc:1c:64:96:8f:aa:f5:88:7d:0b:eb:a5:a2:42:17:
         4f:f8:72:51:74:01:7c:01:52:7e:07:be:96:bc:10:a7:87:ac:
         7c:6b:6a:e9:d8:29:55:9a:6f:d2:1d:c1:0a:e0:5f:6c:f2:05:
         f1:27:a8:bc:23:41:b1:2a:31:3b:99:c8:5e:01:32:f9:72:94:
         24:50:2f:4d:92:31:9c:db:f1:32:6f:c5:36:f3:fd:a4:f0:c8:
         83:2f:47:fb:3a:9e:69:55:37:5d:a9:34:6c:9c:22:9a:a5:b1:
         23:ce:e0:bc:8f:7b:30:a8:88:ed:7e:e2:9d:e0:7e:a5:46:12:
         5c:66:80:9e:29:14:07:2d:9d:df:e1:54:80:a9:e1:2a:81:32:
         aa:97:39:97:e7:9d:cc:df:56:14:ed:1e:b7:7d:3a:37:96:61:
         11:3a:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:56 2025 by rpki-client