Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WEFpUozyaeuZE7JJHvCeDu6rFqk.roa
File:                     WEFpUozyaeuZE7JJHvCeDu6rFqk.roa (raw, json)
Hash identifier:          jomqIbG3DIJNU9K/n8wDwYglV4kP82Ak3SWcL8tVMHw=
Subject key identifier:   58:41:69:52:8C:F2:69:EB:99:13:B2:49:1E:F0:9E:0E:EE:AB:16:A9
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       13DD
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WEFpUozyaeuZE7JJHvCeDu6rFqk.roa
Signing time:             Tue 04 Mar 2025 08:18:01 +0000
ROA not before:           Tue 04 Mar 2025 08:18:01 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18428
IP address blocks:        119.75.246.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5085 (0x13dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Mar  4 08:18:01 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=584169528CF269EB9913B2491EF09E0EEEAB16A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1b:86:d6:15:5f:9e:7c:69:92:7b:5b:a5:45:
                    7b:0c:d0:e4:c0:1b:0c:9b:c0:eb:52:75:ee:2a:cc:
                    5b:3b:4e:47:cc:18:37:1e:ed:92:98:c7:c2:0d:16:
                    56:b2:38:e1:fc:90:eb:b5:99:2a:52:c8:77:a2:a8:
                    44:de:31:0d:b0:44:7d:68:63:6e:b5:33:a1:c2:8d:
                    f0:fc:37:0e:38:fa:6c:44:64:25:33:3d:e9:10:1f:
                    f2:60:25:a5:f9:32:23:2e:f8:50:b8:a1:da:41:cc:
                    c2:54:14:97:73:b3:32:38:09:86:11:f5:13:7a:19:
                    a9:4b:22:0f:63:78:d9:a2:71:f1:b8:b7:40:b6:c4:
                    f3:c7:a6:11:6b:b7:cb:cb:44:54:c7:9b:59:85:cd:
                    f8:77:82:62:8f:33:fe:59:fd:b1:50:30:9b:61:7f:
                    ce:f0:65:ac:86:ae:82:b1:82:22:20:58:f1:1c:39:
                    12:a4:41:1e:ff:e5:14:66:e7:1a:52:f2:4b:a1:8e:
                    b3:9c:14:1e:eb:aa:1c:26:91:ce:af:1e:d3:1a:0f:
                    c8:4a:5a:9f:fe:73:d4:0e:30:c7:43:7d:7b:97:89:
                    fa:f8:dd:03:8e:3f:e7:83:c6:aa:6b:8b:ad:14:d7:
                    bb:17:a3:3c:7b:92:e7:3e:f5:c0:40:45:2e:00:c3:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:41:69:52:8C:F2:69:EB:99:13:B2:49:1E:F0:9E:0E:EE:AB:16:A9
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/WEFpUozyaeuZE7JJHvCeDu6rFqk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:92:9d:5c:4d:33:c9:74:7d:ad:57:8e:0b:09:d9:80:9e:18:
         c6:6d:80:38:8f:ce:83:88:41:5b:eb:e6:10:1c:1d:06:93:19:
         97:75:a2:78:da:64:14:f6:67:0f:12:89:26:0f:75:95:9b:1b:
         5f:9f:15:16:97:8f:89:57:93:15:fe:7c:4b:e9:11:dc:3f:4e:
         7a:40:ba:39:1c:53:19:78:46:18:b7:8c:ba:a8:87:a1:51:2e:
         a0:95:e8:65:25:73:a6:db:7b:42:42:d2:0f:e1:52:c9:b5:4f:
         53:58:ad:57:7f:ca:4a:fc:e1:79:19:e1:f7:b0:94:5a:b4:76:
         c0:db:52:3c:c3:09:b3:bd:5a:e6:66:0d:c3:b7:4e:b2:d4:07:
         06:1e:54:b2:60:51:6b:26:38:fa:d1:b6:00:e9:b3:98:78:ad:
         7f:fd:d3:5a:09:b4:a2:c6:5e:18:7a:e9:04:8c:10:e4:01:01:
         4c:93:c4:8a:30:1d:97:88:54:08:1a:43:14:0d:58:7c:a8:7d:
         15:bc:d9:eb:fa:b6:41:63:b8:0a:ac:0e:98:9b:11:07:ff:10:
         1c:94:c5:7d:b6:34:35:70:cf:6e:78:99:fd:9a:19:13:3a:72:
         24:88:ac:f0:03:c3:12:f6:10:42:60:94:55:ba:99:bd:4e:b8:
         90:ea:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:27:33 2025 by rpki-client