Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LM_upifEbe52ssbF3K9Se0fBKZY.roa
File:                     LM_upifEbe52ssbF3K9Se0fBKZY.roa (raw, json)
Hash identifier:          ZSl+1w3cHUdkATSx7MDuWfxN90Aa4owEh662NiMv78I=
Subject key identifier:   2C:CF:EE:A6:27:C4:6D:EE:76:B2:C6:C5:DC:AF:52:7B:47:C1:29:96
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       339A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LM_upifEbe52ssbF3K9Se0fBKZY.roa
Signing time:             Mon 10 Feb 2025 13:51:35 +0000
ROA not before:           Mon 10 Feb 2025 13:51:35 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        118.233.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13210 (0x339a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:35 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=2CCFEEA627C46DEE76B2C6C5DCAF527B47C12996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:d5:2d:0c:7e:d1:46:75:15:59:2e:c0:ef:
                    ad:90:51:7c:be:07:e1:0b:2c:bf:f0:91:29:5a:b6:
                    41:5b:75:71:ec:27:a5:c0:f0:c9:de:19:e1:97:fa:
                    7c:0a:5d:c8:a5:b6:ea:00:70:15:3f:74:20:96:7c:
                    6f:88:9e:e8:76:45:13:b4:cd:c0:8e:0a:01:22:9c:
                    08:2b:44:b2:16:3f:56:f3:73:c4:ff:ff:74:b8:fd:
                    1d:7c:57:be:1e:2e:6e:f8:f3:d4:b6:7f:c6:24:ee:
                    4b:81:cc:d1:32:09:1f:34:65:3a:76:e9:be:0a:ef:
                    56:68:fa:7b:aa:8d:2d:31:a1:f2:79:ab:61:dc:88:
                    e2:fa:f0:32:a0:15:7c:a0:01:87:26:54:19:dc:a9:
                    eb:32:78:5b:30:1e:20:ad:54:ff:cb:67:0a:b5:bd:
                    1d:d1:39:1b:79:62:71:95:e3:b0:40:e9:24:75:b1:
                    1d:89:33:d4:aa:42:f8:99:de:05:0a:a6:63:21:11:
                    5d:73:44:a8:11:74:8c:0f:89:bd:dc:29:72:49:e0:
                    ff:94:b8:f3:f5:dc:56:6d:06:f4:79:b0:db:f4:eb:
                    e8:aa:a8:c6:58:d2:62:4e:33:d2:22:8d:50:2b:d0:
                    d8:c0:1f:a6:0b:a9:50:64:7c:9c:b8:02:2a:da:a1:
                    ba:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:EE:A6:27:C4:6D:EE:76:B2:C6:C5:DC:AF:52:7B:47:C1:29:96
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LM_upifEbe52ssbF3K9Se0fBKZY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.233.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:da:21:ce:d2:1f:98:be:68:4b:62:1f:c6:f7:16:49:fb:
         40:b6:32:d6:8d:92:0b:66:d7:9f:14:c0:9a:79:77:28:a1:ae:
         96:28:4b:53:18:4c:2e:28:11:d0:4d:b1:57:dc:02:72:5f:d8:
         d4:de:fa:45:b7:1a:cb:57:c0:57:c5:b6:88:b0:dd:04:58:64:
         67:81:a4:a1:e2:05:14:de:51:70:3a:9d:17:73:c0:7c:51:59:
         f1:ec:d9:2c:58:9a:bb:6b:36:4a:b7:7f:99:23:6d:a1:68:c1:
         22:ef:90:3a:d4:e5:1c:b6:88:09:1e:47:2c:da:b3:4c:61:b4:
         0d:67:f4:06:e4:1d:7d:65:07:ba:b9:ba:ba:a3:e8:b3:84:69:
         0c:c1:68:d9:42:00:1f:06:51:9b:81:b5:dd:19:e9:84:e5:8e:
         ac:bf:c6:a6:f9:70:8c:73:86:08:b9:e1:67:00:82:c2:f0:a3:
         d9:36:73:56:20:6d:cc:f6:1b:1f:ba:1e:c7:7e:5a:5c:87:d5:
         e8:18:d5:58:b9:60:73:c4:c5:91:02:4c:13:0b:01:cb:42:8d:
         7b:eb:ff:48:ea:a7:c5:09:bc:a2:6e:d8:9d:d0:59:db:4b:17:
         0f:ec:9e:13:c9:a2:ee:86:ed:8b:bb:21:89:78:42:f9:d7:d2:
         5f:19:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:23 2025 by rpki-client