Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yujenw_C965SN_Y6t8T8VLtoN6E.roa
File:                     Yujenw_C965SN_Y6t8T8VLtoN6E.roa (raw, json)
Hash identifier:          Ee0FzNpJvB5xpdS0bJpR0epmEzOYjsmyEJOH4PFmQdQ=
Subject key identifier:   62:E8:DE:9F:0F:C2:F7:AE:52:37:F6:3A:B7:C4:FC:54:BB:68:37:A1
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       354F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yujenw_C965SN_Y6t8T8VLtoN6E.roa
Signing time:             Mon 10 Feb 2025 13:53:13 +0000
ROA not before:           Mon 10 Feb 2025 13:53:13 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9924
IP address blocks:        123.195.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13647 (0x354f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:13 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=62E8DE9F0FC2F7AE5237F63AB7C4FC54BB6837A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3f:43:4e:fa:ea:8f:26:74:d8:ef:e3:63:c4:
                    73:d8:c1:2d:c7:95:a8:ad:79:88:4f:37:a2:ed:98:
                    5b:7d:bc:61:bd:22:a0:4d:0c:0a:43:75:81:3a:04:
                    e6:8d:4b:e7:82:f8:60:34:75:c5:53:a0:ab:02:ff:
                    5f:94:86:7a:48:17:ac:da:1a:97:b3:de:16:5e:c5:
                    09:6b:e3:12:11:a8:6c:cb:11:28:ea:c4:5d:17:74:
                    1d:64:1c:a3:93:91:9a:e1:36:e9:94:63:a2:7d:83:
                    35:b9:08:49:c4:59:14:5f:44:9c:f7:07:93:59:7b:
                    77:a2:d8:a3:ea:db:15:d0:79:de:56:ec:15:99:cb:
                    8f:b1:82:41:76:80:62:24:26:0b:ab:91:ab:6c:15:
                    7f:ff:7c:70:74:f3:c0:26:18:4e:77:7d:9d:d7:1b:
                    c8:91:3c:e2:12:1d:29:8d:dc:9f:b3:4e:c5:82:26:
                    fc:99:23:08:78:b5:80:ac:72:6f:c0:e2:0f:30:83:
                    19:d5:63:00:f8:b6:28:5c:f8:fd:c1:4d:6f:01:27:
                    3f:03:bb:a2:f9:1e:bf:a3:79:a1:36:c1:81:ac:43:
                    c5:ae:26:0f:7e:51:bb:8f:63:2a:9f:b6:5b:43:17:
                    4c:83:26:ec:5d:64:1e:95:ed:d4:3a:0d:f1:30:8c:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E8:DE:9F:0F:C2:F7:AE:52:37:F6:3A:B7:C4:FC:54:BB:68:37:A1
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Yujenw_C965SN_Y6t8T8VLtoN6E.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.195.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:68:3e:05:cb:9a:bf:14:87:a2:e9:0b:85:cf:ef:66:8c:66:
         09:c9:89:1f:19:f7:dc:1b:a5:3e:8d:f8:56:b0:e5:dd:03:02:
         dc:1f:38:a8:b7:0e:76:cd:01:1a:59:a2:f0:73:37:75:b8:d6:
         b1:c5:c9:0c:bf:ce:80:0b:fa:40:85:2f:ac:7e:8a:4c:23:f2:
         cb:6b:36:5d:7d:81:b9:0c:d2:49:70:d8:f3:2c:8f:df:36:3d:
         8f:fe:b6:93:cd:c6:24:66:77:52:62:5f:e1:77:3c:f4:a5:bd:
         0d:da:4b:06:f9:e2:61:d2:01:53:ad:1e:64:c1:f4:4c:80:ed:
         96:07:1c:68:d9:52:8b:bc:d1:cd:28:6f:8b:09:84:22:3b:9f:
         06:2c:47:c3:4d:3b:09:42:d4:81:45:c0:64:b3:fc:36:5b:7b:
         1c:1d:13:3b:1e:1d:26:e2:c8:2d:76:a4:d2:b5:f9:e1:35:2a:
         28:8e:c6:29:97:57:c3:3f:57:d7:15:c9:9f:03:c9:4e:bc:b7:
         b0:fd:a2:8f:8e:c9:c1:f6:f8:24:23:7b:2c:19:13:d0:41:74:
         e8:38:e8:ff:b8:1c:89:3c:22:ec:5a:63:4e:8c:f9:64:e1:e7:
         e4:a4:be:cd:8c:85:03:72:61:87:0c:8e:9c:14:e8:07:2e:8c:
         56:01:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:51 2025 by rpki-client