Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZVSyGfGcLTUDo7zQ6cagxofbio8.roa
File:                     ZVSyGfGcLTUDo7zQ6cagxofbio8.roa (raw, json)
Hash identifier:          Zrc9XL7ojMXjfU17jRjUMqYFZ3Buy6OAqLtwEwqEEI4=
Subject key identifier:   65:54:B2:19:F1:9C:2D:35:03:A3:BC:D0:E9:C6:A0:C6:87:DB:8A:8F
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       360E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZVSyGfGcLTUDo7zQ6cagxofbio8.roa
Signing time:             Mon 10 Feb 2025 13:53:56 +0000
ROA not before:           Mon 10 Feb 2025 13:53:56 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.120.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13838 (0x360e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:53:56 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6554B219F19C2D3503A3BCD0E9C6A0C687DB8A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:f0:e7:00:f7:bb:c5:d9:27:20:28:b0:92:
                    e7:0f:10:b3:33:5f:de:0f:c9:56:6d:96:c9:32:96:
                    2b:55:60:b9:98:48:d1:b1:f3:e1:2d:f0:29:38:30:
                    89:c8:4b:5d:6e:13:36:18:da:47:41:4f:92:02:10:
                    34:82:2b:fd:b2:c2:d0:79:e8:ac:a2:58:e0:bc:04:
                    f3:bc:6a:4e:9d:c5:58:37:e0:e5:55:6c:81:77:b5:
                    0b:6c:0a:2e:7f:a5:0c:7b:7b:09:7c:c0:5e:59:cc:
                    40:3f:cb:8e:b0:d3:23:2a:4a:76:ec:10:d8:9d:ad:
                    3b:0f:1a:0e:a0:52:b8:3b:36:f9:9c:cc:e7:fe:23:
                    b0:c7:2f:4b:ba:fb:3f:6e:97:16:3d:07:f8:e5:01:
                    d4:07:09:69:de:05:d0:95:bb:f0:be:33:c0:97:ee:
                    0e:bf:d9:7d:45:73:2b:b2:c4:64:d2:32:4c:61:23:
                    c4:0a:47:88:b8:a9:06:76:40:83:43:72:b2:44:9e:
                    41:a4:4d:80:35:02:e9:30:7d:4d:dd:5c:8b:7f:7e:
                    c6:21:c1:6f:f5:9e:5a:1e:bb:69:6d:99:b6:6a:e1:
                    79:f7:0b:0b:ba:32:92:d6:10:ff:bd:4d:19:9b:ba:
                    19:1b:8e:5b:f1:a2:e2:8b:29:36:43:be:86:74:89:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:54:B2:19:F1:9C:2D:35:03:A3:BC:D0:E9:C6:A0:C6:87:DB:8A:8F
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZVSyGfGcLTUDo7zQ6cagxofbio8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:03:df:80:85:f9:1c:cd:1c:87:1e:7f:69:20:d6:9b:ac:5c:
         bf:39:2c:0e:f6:63:98:82:e8:f1:ed:01:21:bf:f0:b8:79:a7:
         4b:2e:e3:37:66:9d:af:9b:08:e5:27:db:bd:0d:24:a0:10:9d:
         df:b9:a5:cf:14:70:96:c6:48:43:61:0b:8f:c9:24:11:54:f8:
         3d:10:46:2c:64:3b:2c:43:21:ef:49:81:5c:93:db:59:19:84:
         c5:7d:3a:17:54:2c:76:14:30:e7:71:8e:31:81:94:89:de:bf:
         ea:16:da:ca:61:91:34:ec:1d:e9:65:1f:1d:a1:bf:ad:f6:ec:
         ec:f4:55:07:79:28:58:79:9d:9f:6a:87:7d:c4:81:8e:e1:2b:
         73:76:28:69:64:53:0a:df:5f:0a:83:04:6a:77:5e:ad:ce:96:
         36:fb:cc:ee:30:9a:8b:c4:a2:30:c8:bb:e1:7b:b7:f6:c0:c2:
         d3:49:53:16:51:dd:a0:ca:c3:68:e2:dc:e9:ff:f8:f8:aa:96:
         20:35:c4:76:02:2c:b8:73:bb:1d:e0:ef:5b:6f:42:0b:21:c0:
         61:1d:34:ff:ef:02:a3:30:b0:2f:2a:60:5c:9e:78:ee:a7:6a:
         6a:38:cb:ce:4e:3d:9e:94:01:e2:20:7b:92:b1:54:ad:61:99:
         da:b5:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:27 2025 by rpki-client