Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JqlE4b1_74xQ-sMQsZwr5Y9os8Q.roa
File:                     JqlE4b1_74xQ-sMQsZwr5Y9os8Q.roa (raw, json)
Hash identifier:          MDWu6cj3aHr8uQhxP1uzMjRMaZClemTgFtEbqY81Buo=
Subject key identifier:   26:A9:44:E1:BD:7F:EF:8C:50:FA:C3:10:B1:9C:2B:E5:8F:68:B3:C4
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       340B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JqlE4b1_74xQ-sMQsZwr5Y9os8Q.roa
Signing time:             Mon 10 Feb 2025 13:52:02 +0000
ROA not before:           Mon 10 Feb 2025 13:52:02 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.223.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13323 (0x340b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:02 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=26A944E1BD7FEF8C50FAC310B19C2BE58F68B3C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:11:68:ae:c4:cb:8e:93:33:11:54:ae:b0:
                    8a:cb:ec:ef:bf:1d:26:92:b6:37:c2:35:b8:5c:53:
                    30:af:5f:fb:36:c8:12:e1:89:a0:e5:94:27:e5:8e:
                    aa:e4:d7:9e:9a:c5:cf:2b:49:4c:af:77:a3:66:39:
                    00:a0:4f:49:17:bb:bc:c1:1f:d8:65:30:fb:cd:b9:
                    5f:b4:25:42:75:7e:4b:72:c1:ae:39:48:2f:98:53:
                    e4:e7:e6:b6:04:71:8d:e0:a3:90:e9:9f:26:a6:f7:
                    88:15:a9:d2:95:0a:e4:15:ba:e8:8d:12:d4:c2:6d:
                    a2:28:2d:99:d0:bc:db:50:e3:94:75:df:cd:51:23:
                    89:aa:cb:a3:73:82:72:ad:be:bd:c7:22:a9:84:18:
                    e8:73:79:9c:dc:84:93:31:d0:59:50:4a:e4:d7:4b:
                    41:36:d8:e6:00:79:84:f7:15:47:5d:be:05:88:e7:
                    f1:3e:7e:4f:68:27:12:e5:cb:41:fa:5d:59:38:c3:
                    24:ee:36:04:bf:7f:26:1d:05:d4:6f:e0:2f:a0:48:
                    4c:ff:e1:7c:45:a1:42:fd:e8:c9:a0:51:62:aa:b7:
                    ad:de:ab:f1:f4:d4:b1:ef:ef:8f:41:a3:24:07:fe:
                    22:64:b0:a2:d9:9d:53:d0:96:48:9a:20:db:12:32:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A9:44:E1:BD:7F:EF:8C:50:FA:C3:10:B1:9C:2B:E5:8F:68:B3:C4
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JqlE4b1_74xQ-sMQsZwr5Y9os8Q.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:e5:2e:1f:8d:b7:69:40:1f:4d:2f:54:04:4f:c6:4f:9a:
         d6:c7:da:30:ce:39:b0:a0:27:f1:3e:b8:53:e4:27:d5:13:42:
         3b:0d:4e:53:71:53:e2:1b:50:58:5c:71:a7:df:d0:a5:76:1b:
         9f:16:a3:94:de:f2:e5:b9:8c:dd:22:70:0d:c3:88:c0:a4:35:
         59:5d:c4:18:79:85:35:75:dd:2a:c9:b0:6a:0a:23:aa:3c:83:
         bb:aa:3c:04:7b:b0:77:71:08:4f:32:bc:fa:70:67:3f:5d:de:
         80:4c:c4:c4:39:00:f4:a7:2d:a4:a9:4e:e6:0a:0f:ba:de:f8:
         ca:a9:86:f7:e4:c7:c3:4a:44:3c:52:81:7f:ad:97:f5:e7:2c:
         e3:82:a7:f3:58:7f:93:b4:6d:2e:b6:ea:5c:39:2d:5e:3d:11:
         05:f3:e9:fe:52:b5:42:84:91:8f:ad:c7:5a:f8:92:ed:f0:a6:
         4c:5a:98:d6:43:76:6e:8e:f0:7c:39:36:62:89:5d:d9:ad:9a:
         15:7d:5b:cf:2a:b1:02:c3:90:d4:fb:d7:46:3d:22:db:83:ec:
         bc:b9:6f:31:79:4d:23:46:d3:9e:39:e6:9d:d3:16:16:0c:c4:
         b5:3b:6e:2b:ef:84:30:3f:e3:61:b3:7a:0c:7a:25:16:f0:07:
         cb:82:f0:23
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2QTk0NEUxQkQ3RkVG
OEM1MEZBQzMxMEIxOUMyQkU1OEY2OEIzQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrgxForsTLjpMzEVSusIrL7O+/HSaStjfCNbhcUzCvX/s2yBLh
iaDllCfljqrk156axc8rSUyvd6NmOQCgT0kXu7zBH9hlMPvNuV+0JUJ1fktywa45
SC+YU+Tn5rYEcY3go5Dpnyam94gVqdKVCuQVuuiNEtTCbaIoLZnQvNtQ45R1381R
I4mqy6NzgnKtvr3HIqmEGOhzeZzchJMx0FlQSuTXS0E22OYAeYT3FUddvgWI5/E+
fk9oJxLly0H6XVk4wyTuNgS/fyYdBdRv4C+gSEz/4XxFoUL96MmgUWKqt63eq/H0
1LHv749BoyQH/iJksKLZnVPQlkiaINsSMmrzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJqlE4b1/74xQ+sMQsZwr5Y9os8QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pxbEU0YjFfNzR4US1zTVFz
WndyNVk5b3M4US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sd8wDQYJKoZIhvcNAQELBQADggEBABI/5S4fjbdpQB9NL1QET8ZPmtbH2jDOObCg
J/E+uFPkJ9UTQjsNTlNxU+IbUFhccaff0KV2G58Wo5Te8uW5jN0icA3DiMCkNVld
xBh5hTV13SrJsGoKI6o8g7uqPAR7sHdxCE8yvPpwZz9d3oBMxMQ5APSnLaSpTuYK
D7re+Mqphvfkx8NKRDxSgX+tl/XnLOOCp/NYf5O0bS626lw5LV49EQXz6f5StUKE
kY+tx1r4ku3wpkxamNZDdm6O8Hw5NmKJXdmtmhV9W88qsQLDkNT710Y9ItuD7Ly5
bzF5TSNG05455p3TFhYMxLU7bivvhDA/42Gzegx6JRbwB8uC8CM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:37 2025 by rpki-client