Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Js9GXOazWs4tYKhLGOrAhsL00p0.roa
File:                     Js9GXOazWs4tYKhLGOrAhsL00p0.roa (raw, json)
Hash identifier:          lFEyA8PP9lFbE1mbwLCx1Pr5Iazc+VblCzdVtwwcrJQ=
Subject key identifier:   26:CF:46:5C:E6:B3:5A:CE:2D:60:A8:4B:18:EA:C0:86:C2:F4:D2:9D
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3457
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Js9GXOazWs4tYKhLGOrAhsL00p0.roa
Signing time:             Mon 10 Feb 2025 13:52:17 +0000
ROA not before:           Mon 10 Feb 2025 13:52:17 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        118.232.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13399 (0x3457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:17 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=26CF465CE6B35ACE2D60A84B18EAC086C2F4D29D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:7d:a0:55:03:98:a1:10:5d:50:fc:be:fa:
                    74:70:a3:48:d4:64:0f:db:0e:53:f7:0a:3d:e5:19:
                    47:43:18:8d:8c:b7:17:f6:a7:e8:5b:cc:4a:23:31:
                    1f:d7:f2:13:b1:fa:df:7f:45:3f:a7:5a:7d:c7:60:
                    5a:34:6c:6c:66:10:c2:e6:d4:ce:cf:25:50:26:81:
                    3c:c9:54:c1:16:44:0d:a3:94:27:d7:47:b4:e2:d1:
                    01:1d:47:8b:db:bb:3a:64:e8:65:a8:af:0c:41:17:
                    d4:64:d6:6f:45:1b:39:11:e0:a5:4f:3e:d3:9e:96:
                    99:6a:a8:db:09:ac:47:a1:ff:1f:ba:44:d1:fe:dd:
                    ad:a9:4a:55:b4:ae:48:4b:cc:7e:d9:c5:db:a1:07:
                    b9:a3:44:24:b0:56:8e:b2:7a:5d:f4:88:0e:a4:c8:
                    18:f6:30:db:9a:46:7a:6b:60:d7:01:74:49:3f:52:
                    49:1d:59:99:43:80:f5:3b:ad:44:25:7e:30:87:56:
                    2c:68:a0:5e:c5:77:00:43:dd:6d:97:60:68:2d:66:
                    1d:1d:40:3a:25:2f:f3:11:76:3d:11:12:ad:3c:d0:
                    e7:e4:2d:5f:af:14:54:00:38:66:3f:29:ab:47:bf:
                    d2:a6:e7:36:62:f2:33:1f:a4:24:2a:a9:91:b2:1f:
                    aa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:46:5C:E6:B3:5A:CE:2D:60:A8:4B:18:EA:C0:86:C2:F4:D2:9D
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Js9GXOazWs4tYKhLGOrAhsL00p0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.232.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:1e:3c:4d:cc:5b:6a:61:f4:7e:3e:1b:1a:81:ba:e0:64:23:
         27:eb:9e:08:02:20:5f:ec:71:48:df:40:6a:11:bb:6d:a4:74:
         fa:10:5c:96:e0:c6:09:80:b6:ad:a3:75:88:9b:78:3d:62:cc:
         22:64:70:68:ee:32:db:1e:2e:f6:45:d1:be:0e:94:07:6c:0a:
         d5:a8:6f:6a:2e:99:bc:98:df:fe:e9:56:33:cb:24:13:41:0a:
         cb:9b:87:94:d0:d7:01:8f:06:e6:08:93:56:a4:02:f3:be:1e:
         cb:9c:51:82:03:6f:a7:23:50:29:28:d6:86:d4:2c:4b:03:67:
         da:b0:8e:b3:30:97:fa:3d:60:fd:6a:ae:8f:05:26:26:df:92:
         c2:23:0d:15:be:a4:27:e5:51:8d:a7:11:9e:ed:1b:d0:fc:9d:
         93:c7:e6:a5:59:11:8f:b6:f9:5b:fd:c2:28:7e:09:7a:37:69:
         9c:b8:d2:af:7b:df:50:a8:d8:ba:52:a6:49:50:2d:6b:66:14:
         15:c3:1d:a9:ef:82:31:74:7a:f8:50:c5:14:8d:de:b3:d3:57:
         c8:76:2f:fe:7c:7f:6e:a8:14:21:a1:ec:4f:74:f2:74:e1:15:
         e5:a3:76:0a:aa:1c:32:f8:ef:fa:2e:8b:21:c5:5d:f8:f5:b4:
         fb:0a:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:07 2025 by rpki-client