Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/tWBOxA-j7IJaSI0D-t9RXhWc4EA.roa
File:                     tWBOxA-j7IJaSI0D-t9RXhWc4EA.roa (raw, json)
Hash identifier:          r4D+4d11IjLCDXzfe7Xzuaewlw5toQTCfy6jr3bbgz4=
Subject key identifier:   B5:60:4E:C4:0F:A3:EC:82:5A:48:8D:03:FA:DF:51:5E:15:9C:E0:40
Certificate issuer:       /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial:       0787
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/tWBOxA-j7IJaSI0D-t9RXhWc4EA.roa
Signing time:             Tue 29 Sep 2020 10:09:08 +0000
ROA not before:           Tue 29 Sep 2020 10:09:08 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     24157
IP address blocks:        2403:c300::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
        Validity
            Not Before: Sep 29 10:09:08 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=B5604EC40FA3EC825A488D03FADF515E159CE040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:30:78:c1:20:9d:b8:b3:f5:8d:32:5d:72:
                    3d:88:3a:cc:ef:28:8a:fc:27:8a:44:da:43:3c:83:
                    1f:c9:55:5f:ee:0f:91:29:9b:7b:b2:1a:b1:ec:c0:
                    20:c0:54:26:0c:f8:c2:19:15:4f:08:f6:dd:1f:5e:
                    0a:fd:a5:b5:e4:ef:b6:3a:61:b5:5a:99:7b:ec:48:
                    e7:6e:f9:cf:e1:fc:d6:0a:2b:6f:15:0b:eb:44:18:
                    b3:ca:87:cf:aa:50:6b:c4:c7:e4:c1:1a:86:79:95:
                    53:d7:57:64:82:07:2c:e5:f2:3b:b4:ae:26:32:77:
                    55:d3:43:c6:7e:7f:49:6b:20:ca:c3:4a:62:27:ad:
                    ca:36:7e:a8:51:f7:af:af:44:26:84:d0:a0:54:45:
                    f4:1d:d7:91:8e:40:be:5d:fd:d3:7c:eb:59:57:a4:
                    62:ac:63:c2:32:d6:24:86:85:fa:a9:8e:4c:26:8b:
                    08:c0:90:d1:ea:b3:78:ba:2a:e6:f9:4d:83:13:7f:
                    96:79:eb:e5:83:c4:8e:a6:87:54:88:1e:97:51:68:
                    46:85:6f:0e:57:48:6a:e4:56:3a:ab:0c:f5:ac:34:
                    de:0f:65:e7:e1:94:91:4d:81:e6:83:09:32:a3:35:
                    40:9a:90:0f:35:41:e6:f2:a1:87:a2:1f:8f:7d:36:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:60:4E:C4:0F:A3:EC:82:5A:48:8D:03:FA:DF:51:5E:15:9C:E0:40
            X509v3 Authority Key Identifier:
                keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/tWBOxA-j7IJaSI0D-t9RXhWc4EA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:d2:86:0d:47:a8:99:01:cd:96:20:f7:10:55:a7:69:a7:bf:
         ba:db:41:03:10:97:27:9a:42:64:d4:6a:92:fd:13:f3:4a:f3:
         34:15:ee:ab:a2:c6:ea:0e:96:38:fe:13:ed:17:07:9a:90:8d:
         85:e2:31:73:14:89:0d:1c:e1:3d:db:34:19:07:ad:fe:48:36:
         c7:63:55:d4:ed:2b:c3:6b:1b:d8:f1:cf:67:65:d3:3e:bb:1c:
         9c:0e:83:3e:e7:dc:20:30:c0:8a:59:a4:2e:0a:18:1d:d0:46:
         b3:de:4b:6c:b1:49:6a:18:95:b9:d5:cc:d8:f4:c3:4d:b8:f5:
         aa:d7:7f:7c:fb:61:6f:f8:80:e4:9a:cc:ac:a3:2e:91:53:31:
         b8:63:ff:7a:a7:03:9a:76:d2:bc:5d:c2:81:8c:02:b4:ec:16:
         7f:ef:ea:26:82:15:c2:d1:20:e5:40:dd:c0:7c:7a:00:29:4d:
         8e:e1:6f:8a:a4:bc:89:6b:9e:f8:e6:d8:2f:d6:24:31:8c:63:
         9c:f4:06:c2:76:88:24:89:65:80:51:5a:04:e0:7b:e2:a0:a1:
         14:23:33:08:f7:2f:61:41:65:a1:fe:43:7b:b1:5d:59:76:8c:
         91:f2:8a:36:ee:9c:30:78:48:97:1b:cd:fb:39:5d:69:22:50:
         b1:a7:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:16 2025 by rpki-client