Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa
File:                     aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa (raw, json)
Hash identifier:          Locb6ycPYOiesyesHB9JnK97OKsZCMGgU7LSDrMAy+U=
Subject key identifier:   69:1E:97:60:99:2C:89:53:86:51:9F:7D:B3:A0:6A:BB:FB:72:E5:16
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3649
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa
Signing time:             Mon 10 Feb 2025 13:54:11 +0000
ROA not before:           Mon 10 Feb 2025 13:54:11 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        123.194.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13897 (0x3649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:54:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=691E9760992C895386519F7DB3A06ABBFB72E516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:30:ab:33:e0:b9:95:dd:ac:0b:04:d1:fb:
                    c1:29:8b:85:97:a2:0b:ba:33:d1:4c:f0:67:2a:69:
                    20:2e:d8:67:c3:17:e0:10:da:fe:59:83:3f:f7:e6:
                    87:bd:41:b5:8d:23:aa:b1:d6:e0:af:40:5f:a3:7b:
                    50:9d:e6:13:81:a0:7e:f6:59:c3:73:2c:af:45:1d:
                    3b:d3:6f:94:51:4e:64:a0:2c:76:95:9e:d0:fb:29:
                    f9:ae:58:39:0d:70:d7:92:89:3c:05:f2:0d:34:2e:
                    eb:ec:b9:0e:f2:0c:29:42:8a:cc:f1:84:38:a0:c5:
                    96:f4:4b:0b:23:7e:27:10:84:d8:eb:7d:9f:04:a2:
                    8c:49:78:94:4e:47:7c:cd:bc:65:ec:15:1c:f7:8d:
                    e5:3e:f0:c7:e6:a6:24:80:15:91:b9:71:96:b4:ed:
                    6c:ae:1b:87:bc:00:8d:6c:08:9b:59:ec:3b:10:62:
                    eb:e2:71:77:5b:51:a4:53:3a:5a:b1:85:06:1c:28:
                    03:ed:b6:03:34:c9:35:02:20:9a:87:77:7e:7c:6b:
                    5c:98:5a:34:cf:fe:5c:ed:0f:cb:dd:38:45:0a:6a:
                    40:af:1c:83:69:bf:03:57:17:44:11:f0:92:b6:ee:
                    75:64:5e:4c:ff:05:40:c3:8b:83:f9:53:0c:69:bf:
                    ed:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1E:97:60:99:2C:89:53:86:51:9F:7D:B3:A0:6A:BB:FB:72:E5:16
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aR6XYJksiVOGUZ99s6Bqu_ty5RY.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.194.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:14:2e:a7:a7:38:7d:f4:ce:66:53:7a:4d:77:e2:41:1c:
         0a:78:49:43:fc:32:e8:2b:12:24:c2:2f:9b:1d:49:14:f0:65:
         c2:bf:5b:22:70:9b:92:ba:50:ba:4a:dd:9c:28:9d:e6:9c:92:
         09:ba:ee:8c:dc:48:c0:6a:50:ed:03:e0:6a:9c:d4:08:3d:35:
         d4:d6:73:6b:a2:c9:3b:8f:10:6e:6e:3e:82:ec:70:26:f0:de:
         0f:47:1e:da:58:62:30:e4:6f:66:d5:26:29:ff:38:1d:04:a1:
         e8:13:3f:06:a3:7f:6b:8e:82:bf:e2:da:6b:19:c2:0d:d0:59:
         42:24:26:42:cd:1b:d1:08:48:82:cf:d1:ea:e5:7a:30:0e:91:
         c8:ea:34:0e:c9:dd:e7:75:3e:a3:ed:91:89:58:83:e1:39:70:
         9a:fd:ee:4f:61:dd:5c:08:15:aa:b5:78:f0:02:c3:a5:78:cc:
         2d:45:cf:74:2b:b4:58:08:67:88:1b:a9:e0:9c:92:16:dc:79:
         d1:d8:4a:44:36:73:55:09:b4:0c:45:d4:fe:dc:87:34:a4:1e:
         3a:7a:b8:4d:b3:0f:b6:01:b8:29:d1:cb:cf:b3:a7:80:36:70:
         c4:21:2a:45:f3:ce:95:ca:79:48:3e:49:ce:ff:30:41:ed:9d:
         a6:42:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:34 2025 by rpki-client