Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/luu2hRoDag2Co_IPanz2hc0byyE.roa
File:                     luu2hRoDag2Co_IPanz2hc0byyE.roa (raw, json)
Hash identifier:          JBEDGwTFQBWL+9g2hbQ8cyEmsfEtKOql2nvCYKo8Io8=
Subject key identifier:   96:EB:B6:85:1A:03:6A:0D:82:A3:F2:0F:6A:7C:F6:85:CD:1B:CB:21
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       350C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/luu2hRoDag2Co_IPanz2hc0byyE.roa
Signing time:             Mon 10 Feb 2025 13:52:57 +0000
ROA not before:           Mon 10 Feb 2025 13:52:57 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        106.1.212.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13580 (0x350c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:52:57 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=96EBB6851A036A0D82A3F20F6A7CF685CD1BCB21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:7d:73:7c:53:61:61:1f:5b:f8:8e:53:c7:
                    6c:91:4f:66:f8:6a:42:48:e3:db:02:1a:45:3c:3e:
                    49:a2:01:a2:86:99:d7:7d:0f:4d:ff:44:33:25:c4:
                    d1:22:83:7e:a1:8a:38:bb:5d:29:0f:dc:73:a4:bf:
                    9e:c2:7e:55:13:39:fb:16:44:18:1c:db:9c:53:b9:
                    46:fc:ed:bd:8b:19:b1:25:5a:86:52:57:81:1a:b0:
                    4a:29:28:95:97:d5:0d:a8:4d:f3:2f:73:23:a7:b2:
                    ae:a4:70:ab:ae:e0:3f:8e:ac:78:eb:6e:25:c5:44:
                    82:b0:1b:77:ab:06:5d:a9:0f:2e:34:85:4d:42:b2:
                    7f:c9:6a:5d:9b:d3:49:23:d5:3a:df:98:a8:3a:67:
                    5b:79:1f:98:b6:c4:28:2d:e6:d8:9c:02:2f:42:64:
                    71:b6:62:11:fb:82:f4:b6:1e:d0:eb:5f:ed:84:a1:
                    3b:64:04:b7:ae:fc:a7:f0:31:ab:cb:56:36:7e:2f:
                    e4:c2:49:7e:7f:07:ac:50:db:20:11:44:c0:a0:00:
                    26:cf:b9:4f:4e:73:77:d0:82:0b:8b:fc:35:a5:8f:
                    1d:65:b3:2c:6e:92:c2:2c:78:2f:24:62:a1:9d:9b:
                    b0:d8:a2:4f:c8:aa:cc:3e:98:06:05:b5:9a:41:bc:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EB:B6:85:1A:03:6A:0D:82:A3:F2:0F:6A:7C:F6:85:CD:1B:CB:21
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/luu2hRoDag2Co_IPanz2hc0byyE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.1.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:86:2d:24:13:d1:33:ea:38:91:49:21:f4:23:6f:2a:53:
         ea:8c:6f:8b:5f:c9:d6:7e:33:2d:52:80:d6:1a:14:88:38:6d:
         a8:a7:7e:41:75:6d:ef:ed:5d:2b:3b:70:2a:07:31:52:c0:d5:
         e5:71:16:49:43:3a:81:31:04:43:b5:78:1e:f6:39:96:13:11:
         01:b6:32:72:fe:92:cf:11:13:fe:a5:f8:ad:47:07:18:b5:00:
         f8:b5:40:4f:8a:b4:f6:8d:69:a3:a4:9f:e8:31:dc:9c:7c:32:
         92:11:d2:97:01:b2:4c:5e:0d:f2:ba:70:42:59:29:6c:22:54:
         38:81:b8:5f:9d:36:91:ca:13:61:04:6b:7f:2b:2d:7f:b9:25:
         a2:bb:9a:88:7e:1f:f4:b6:b3:bf:9f:d9:ec:92:a1:30:2d:c9:
         7a:cb:49:75:c5:1e:ab:b5:0e:b8:ec:ce:ae:7c:a8:86:cd:72:
         f8:f9:cc:b2:42:b1:b1:b2:dc:5b:3c:41:ae:50:32:1a:fb:28:
         59:cd:5b:3e:cb:b7:c0:ca:66:78:3d:71:84:54:96:9d:35:0a:
         99:9e:3c:b7:c3:c0:dc:7a:27:f7:b1:8d:f5:0d:05:f3:0e:3d:
         51:e5:59:68:e7:c4:41:18:e2:59:2c:a0:ae:ca:ea:67:2e:b5:
         90:36:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:14 2025 by rpki-client