Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XduuRDbNDwVO4kiK6EsWyipvcZ8.roa
File:                     XduuRDbNDwVO4kiK6EsWyipvcZ8.roa (raw, json)
Hash identifier:          hU/8ifpWUw+nJpLUV87YtaD7uLR3Xwf9/41TKvZxbhI=
Subject key identifier:   5D:DB:AE:44:36:CD:0F:05:4E:E2:48:8A:E8:4B:16:CA:2A:6F:71:9F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3474
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XduuRDbNDwVO4kiK6EsWyipvcZ8.roa
Signing time:             Mon 10 Feb 2025 13:52:23 +0000
ROA not before:           Mon 10 Feb 2025 13:52:23 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.46.128/26 maxlen: 26
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13428 (0x3474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:23 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=5DDBAE4436CD0F054EE2488AE84B16CA2A6F719F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:b2:e2:8b:9e:84:2b:b2:c4:cd:0c:d3:f1:
                    93:f4:df:83:05:6b:be:a1:f6:2e:2c:bf:71:29:77:
                    81:a5:6c:77:1e:cd:2d:21:3a:a2:a2:58:a6:ae:c6:
                    c3:28:e6:fd:1f:9b:27:19:ab:56:f8:dd:f8:70:8f:
                    ea:54:2a:db:25:39:9b:53:35:50:57:06:94:0e:39:
                    e3:8a:25:c2:6e:3d:fd:be:0b:47:64:cd:5c:c2:5b:
                    08:b5:a4:31:81:6b:2d:69:10:d7:8b:21:e7:c3:26:
                    91:66:3c:80:b7:67:37:e3:93:9c:8f:7a:da:cb:64:
                    67:b9:83:78:7e:28:fc:1d:f6:a5:91:e0:72:77:45:
                    45:8c:8c:b9:c4:a6:7f:93:b2:8e:65:5e:76:14:b8:
                    4a:0d:c2:c3:04:fd:b3:3a:09:61:a2:c5:fd:08:94:
                    fa:f7:33:43:67:a2:55:20:00:70:6b:23:20:40:d3:
                    09:ec:84:fe:e8:47:26:6c:ec:83:2e:38:ce:d5:ad:
                    ee:12:72:ce:a2:13:16:16:fc:84:eb:36:7f:50:52:
                    01:37:33:2c:ab:8b:09:20:1f:94:bf:80:cd:8a:44:
                    16:e8:bd:40:3e:29:c3:3a:60:e6:60:9f:e2:19:b7:
                    39:f9:d9:56:dc:46:7b:f0:67:44:97:9a:8e:dd:5d:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DB:AE:44:36:CD:0F:05:4E:E2:48:8A:E8:4B:16:CA:2A:6F:71:9F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XduuRDbNDwVO4kiK6EsWyipvcZ8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.46.128/26

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:71:e9:ff:b2:0f:31:7c:3c:40:e0:c7:7a:b6:55:0e:cf:
         54:11:df:06:b0:f2:bc:a7:51:49:a8:9a:6f:5f:a3:1f:63:0f:
         c6:78:86:83:3d:6c:89:5a:08:85:ba:48:96:39:6d:d1:b8:ed:
         e5:19:c8:35:d5:53:69:da:a4:ed:53:77:20:0e:55:e3:6c:df:
         60:3d:90:3d:76:be:d0:20:f8:84:5d:26:a8:e9:cb:4e:64:0d:
         ed:24:2f:4c:87:75:c4:64:9a:e1:e2:99:dd:cc:66:66:e5:c4:
         72:46:93:e5:42:1c:55:4f:5d:31:ce:3d:f0:ba:66:6d:b8:a2:
         b3:b3:21:4f:1e:55:89:fe:9b:eb:ee:a3:02:f9:7a:f4:ae:0d:
         c7:83:a6:a2:58:57:b3:01:94:dd:eb:64:bd:76:e6:d9:cc:84:
         15:a5:19:9c:75:1d:68:d3:8e:75:7d:01:e4:b7:3e:67:cd:9e:
         03:8f:19:9c:8f:1a:62:3b:90:fc:23:03:c8:32:e4:ad:b4:26:
         53:b7:16:8f:81:00:1d:7f:ba:c7:a4:83:2c:b5:91:93:97:0f:
         5f:e4:a1:0e:cc:b2:c6:23:6e:73:1d:f5:4b:c8:11:1a:1b:96:
         af:36:49:7a:49:33:35:91:29:43:02:bf:91:f8:4a:fa:30:a9:
         3f:13:fa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:42 2025 by rpki-client