Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rb9QXG4orOMPEKl1rCnn61y7j9k.roa
File:                     rb9QXG4orOMPEKl1rCnn61y7j9k.roa (raw, json)
Hash identifier:          hZA9si1ykZoCwBaseXxltKriXXXnWmVGhdLzxVKLmqc=
Subject key identifier:   AD:BF:50:5C:6E:28:AC:E3:0F:10:A9:75:AC:29:E7:EB:5C:BB:8F:D9
Certificate issuer:       /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial:       3396
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rb9QXG4orOMPEKl1rCnn61y7j9k.roa
Signing time:             Mon 10 Feb 2025 13:51:34 +0000
ROA not before:           Mon 10 Feb 2025 13:51:34 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     38841
IP address blocks:        180.177.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13206 (0x3396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
        Validity
            Not Before: Feb 10 13:51:34 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=ADBF505C6E28ACE30F10A975AC29E7EB5CBB8FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:45:96:17:56:22:5f:4d:81:e4:6a:9d:6c:
                    07:d0:4d:ac:0c:75:ba:99:e7:d5:55:1c:bb:03:00:
                    59:4c:3c:2f:cd:f4:9f:84:77:b1:2a:33:dd:d3:9e:
                    b4:dd:8c:b3:69:d7:e8:d1:a6:af:c7:d4:84:fd:67:
                    8a:2c:c5:65:f7:58:b0:11:24:6d:f9:99:5e:db:67:
                    e7:a9:b3:b4:a3:58:16:26:6e:fd:1c:84:29:7f:24:
                    2e:a8:d8:21:42:47:85:ed:b5:19:ee:54:c6:5b:1a:
                    27:4b:c5:2e:c1:d3:75:43:4a:7c:30:95:db:48:43:
                    c4:db:09:9b:5d:02:56:df:df:ed:bf:30:17:b5:55:
                    c4:21:3f:b8:06:40:97:a4:99:ae:00:d6:47:ea:48:
                    7f:a2:b4:8d:9a:29:fb:e5:23:22:71:5d:2d:d5:4d:
                    07:4d:99:3b:a7:02:ef:1a:6b:44:ec:70:29:fb:62:
                    5c:1c:6e:25:d5:0f:94:03:76:7b:20:2f:7c:ca:59:
                    fe:f5:3f:17:01:cc:48:64:53:ca:00:ed:18:23:9f:
                    2e:6d:2f:da:da:27:af:b1:a5:23:8d:f4:56:0a:37:
                    d7:d6:3a:4c:0a:f3:df:08:40:cd:1d:9b:a9:4a:b3:
                    d0:d9:f5:76:32:06:20:6b:c3:39:d9:64:8b:91:4a:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BF:50:5C:6E:28:AC:E3:0F:10:A9:75:AC:29:E7:EB:5C:BB:8F:D9
            X509v3 Authority Key Identifier:
                keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rb9QXG4orOMPEKl1rCnn61y7j9k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.177.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:61:80:43:f1:d5:ee:e2:17:15:fd:27:12:47:6e:32:00:f4:
         96:9d:5b:18:44:20:be:c4:e9:41:d9:6a:8c:fd:62:e2:a8:a7:
         78:57:29:73:f0:2d:4d:5f:ad:54:39:0c:25:39:e4:83:15:1d:
         7a:a5:fc:53:bb:d3:06:53:d7:9b:f4:3d:a5:92:4f:76:ed:78:
         97:bf:d8:4b:26:7a:69:31:17:b8:51:69:c0:92:92:84:60:b0:
         52:07:00:d0:d1:2d:50:23:f4:d3:61:d4:8d:1b:30:35:ea:29:
         a3:e5:e6:2a:48:1c:ca:1e:97:d3:22:45:75:8c:4e:1d:50:05:
         11:52:7c:cf:5d:4b:11:7a:11:f8:95:e8:7c:13:85:b2:b1:52:
         95:56:2f:ff:1a:06:9c:3c:4e:82:0d:d6:b5:ff:2b:f9:bc:78:
         31:49:4b:36:4c:95:d8:71:67:7d:eb:74:75:bc:68:07:ee:1e:
         37:4b:c5:34:5f:8b:30:e6:56:6e:1f:d2:24:08:5a:c4:cd:ea:
         25:db:1f:e3:cf:c9:93:e9:92:1c:ce:1b:de:8a:1c:f6:13:92:
         75:94:50:f8:bb:b5:6a:fb:ff:7d:d4:11:3b:37:90:b5:12:42:
         65:35:5b:17:7e:b5:2f:d8:37:cf:fe:06:6d:d5:d2:05:24:21:
         fc:41:1a:d3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM5YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFEQkY1MDVDNkUyOEFD
RTMwRjEwQTk3NUFDMjlFN0VCNUNCQjhGRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1VkWWF1YiX02B5GqdbAfQTawMdbqZ59VVHLsDAFlMPC/N9J+E
d7EqM93TnrTdjLNp1+jRpq/H1IT9Z4osxWX3WLARJG35mV7bZ+eps7SjWBYmbv0c
hCl/JC6o2CFCR4XttRnuVMZbGidLxS7B03VDSnwwldtIQ8TbCZtdAlbf3+2/MBe1
VcQhP7gGQJekma4A1kfqSH+itI2aKfvlIyJxXS3VTQdNmTunAu8aa0TscCn7Ylwc
biXVD5QDdnsgL3zKWf71PxcBzEhkU8oA7Rgjny5tL9raJ6+xpSON9FYKN9fWOkwK
898IQM0dm6lKs9DZ9XYyBiBrwznZZIuRStiLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrb9QXG4orOMPEKl1rCnn61y7j9kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3JiOVFYRzRvck9NUEVLbDFy
Q25uNjF5N2o5ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sTgwDQYJKoZIhvcNAQELBQADggEBAFBhgEPx1e7iFxX9JxJHbjIA9JadWxhEIL7E
6UHZaoz9YuKop3hXKXPwLU1frVQ5DCU55IMVHXql/FO70wZT15v0PaWST3bteJe/
2EsmemkxF7hRacCSkoRgsFIHANDRLVAj9NNh1I0bMDXqKaPl5ipIHMoel9MiRXWM
Th1QBRFSfM9dSxF6EfiV6HwThbKxUpVWL/8aBpw8ToIN1rX/K/m8eDFJSzZMldhx
Z33rdHW8aAfuHjdLxTRfizDmVm4f0iQIWsTN6iXbH+PPyZPpkhzOG96KHPYTknWU
UPi7tWr7/33UETs3kLUSQmU1Wxd+tS/YN8/+Bm3V0gUkIfxBGtM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:20 2025 by rpki-client