Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/SiItwHSVzuANsCtoevfOgxOldkg.roa
File:                     SiItwHSVzuANsCtoevfOgxOldkg.roa (raw, json)
Hash identifier:          K/R3CGLNTPoScMLVSARZxnH2d7Q9B5XjiWZndpVgIUA=
Subject key identifier:   4A:22:2D:C0:74:95:CE:E0:0D:B0:2B:68:7A:F7:CE:83:13:A5:76:48
Certificate issuer:       /CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
Certificate serial:       0D54
Authority key identifier: 39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/SiItwHSVzuANsCtoevfOgxOldkg.roa
Signing time:             Tue 11 Mar 2025 07:19:50 +0000
ROA not before:           Tue 11 Mar 2025 07:19:50 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     131606
IP address blocks:        103.124.40.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3412 (0xd54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390A0412F8B5EC4F3F9FDBB3A61270DBD0EA9E6B
        Validity
            Not Before: Mar 11 07:19:50 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=4A222DC07495CEE00DB02B687AF7CE8313A57648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:ed:fc:f7:b2:f8:d4:b2:25:39:7d:92:21:
                    51:d4:9b:39:f5:fe:4e:ba:0d:1a:ff:2c:98:09:22:
                    fe:1b:b7:7c:5e:e0:1e:ac:c1:a5:8f:cf:49:4e:db:
                    5c:8d:80:c1:15:78:77:6d:01:e3:0d:da:13:9e:a0:
                    7b:ea:3a:0f:d5:c7:2f:21:32:f4:7a:b3:66:a3:c1:
                    8f:90:20:6a:88:9b:38:0a:c0:1c:89:f9:6f:d7:88:
                    92:dd:0d:ba:5b:4d:6d:d9:be:ea:2a:f8:ce:d0:02:
                    23:06:48:b1:bb:23:a1:85:02:1f:5e:1e:0d:ca:1b:
                    3b:cb:f1:da:b4:01:a0:09:9f:99:9d:09:a0:72:7f:
                    a8:db:73:c9:58:76:00:ce:4d:81:34:19:3e:d6:86:
                    68:e4:53:59:44:b8:97:11:17:a3:7e:a9:42:42:0b:
                    39:0e:2b:9b:39:a6:96:6c:aa:7a:ca:40:8b:8d:51:
                    ca:2e:d5:e4:4a:b6:b1:5e:d1:06:6a:3c:a0:e8:f3:
                    87:f8:e0:58:c2:7f:b5:9c:9d:de:78:1d:67:b2:fb:
                    b5:30:25:9e:0b:b7:5a:1c:e8:1c:42:d3:5b:57:68:
                    9f:75:65:54:17:2a:00:e6:74:7a:fe:b6:9d:65:fa:
                    b8:bf:8a:9b:4b:ac:06:b0:51:60:d7:f3:d7:09:3e:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:22:2D:C0:74:95:CE:E0:0D:B0:2B:68:7A:F7:CE:83:13:A5:76:48
            X509v3 Authority Key Identifier:
                keyid:39:0A:04:12:F8:B5:EC:4F:3F:9F:DB:B3:A6:12:70:DB:D0:EA:9E:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/OQoEEvi17E8_n9uzphJw29Dqnms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OQoEEvi17E8_n9uzphJw29Dqnms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIGATE/SiItwHSVzuANsCtoevfOgxOldkg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:9d:ae:19:de:2a:83:d3:4a:26:01:d3:9d:44:30:4b:44:82:
         e3:70:c3:9c:12:88:28:e6:af:95:d5:00:32:df:bf:86:17:79:
         ef:e3:d4:f8:03:58:21:82:4f:64:ea:b8:8f:00:a6:e0:67:31:
         0d:1c:2f:95:02:a8:f2:4d:3c:f7:b0:89:3f:47:54:9a:4a:d1:
         a6:43:a9:25:f0:34:00:e5:99:61:73:86:aa:ef:69:93:31:02:
         03:ad:f3:92:82:b3:9c:b9:d3:d0:3f:32:cf:69:6e:28:95:54:
         c6:4d:e6:2e:59:d8:97:d3:31:2f:ab:57:f0:40:c6:30:96:43:
         a9:ae:91:f8:e9:fa:9d:98:4f:d7:7b:6c:bf:26:db:16:dd:1d:
         7f:8b:7d:39:15:bb:e8:fc:f7:76:d5:74:83:44:93:86:f3:9e:
         95:4e:30:02:48:03:80:4a:e0:d1:ca:dd:af:5f:f0:4b:21:d9:
         01:bc:af:73:f4:77:76:cc:d7:f8:0a:99:4e:2c:ce:d4:7d:19:
         54:41:87:ad:7b:d4:82:9e:17:17:e2:f8:b3:71:81:68:4e:ba:
         e3:3a:23:ab:39:61:d3:14:10:15:1b:d8:97:c1:be:7b:08:2d:
         2e:23:10:69:2b:b6:0a:0c:47:77:6f:ed:9a:d0:8c:d5:c9:3a:
         c7:b4:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:53:59 2025 by rpki-client