Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jQjlBykavC7hmXfK_twAplQxFlg.roa
File:                     jQjlBykavC7hmXfK_twAplQxFlg.roa (raw, json)
Hash identifier:          +CbT6OpLgTn3Lkjxgz3L35GCfjrb/zWkJ1eB0F2fDnE=
Subject key identifier:   8D:08:E5:07:29:1A:BC:2E:E1:99:77:CA:FE:DC:00:A6:54:31:16:58
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0E0E
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jQjlBykavC7hmXfK_twAplQxFlg.roa
Signing time:             Mon 10 Feb 2025 14:22:06 +0000
ROA not before:           Mon 10 Feb 2025 14:22:06 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     18424
IP address blocks:        103.30.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3598 (0xe0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Feb 10 14:22:06 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=8D08E507291ABC2EE19977CAFEDC00A654311658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:b3:90:23:37:18:7b:6d:ae:41:a4:8d:bc:
                    ed:8e:ea:db:e4:44:9d:ab:ed:77:6b:0a:56:92:80:
                    c6:95:fb:b7:3f:0a:ca:d4:97:13:18:a2:7a:4e:a6:
                    33:12:75:0f:cf:e8:6d:2a:cd:58:b0:60:f6:b4:73:
                    f0:c5:7b:e1:9b:56:09:60:c1:d9:ce:56:82:5b:d1:
                    61:37:01:f1:8b:45:1a:e8:b0:06:39:6d:b4:1f:60:
                    a5:4b:05:24:22:74:5b:f3:e5:79:33:e5:11:1d:6e:
                    01:0f:e8:0b:52:df:2b:e0:4f:b8:ae:93:fd:ba:36:
                    16:25:e6:33:d7:e9:93:d0:93:e8:7b:70:6e:e7:be:
                    1d:51:d4:15:0d:fb:cf:09:08:c5:e6:d2:0c:29:c8:
                    17:c5:4c:85:f5:f7:81:17:c5:fa:ab:12:61:a7:0e:
                    ce:b4:ae:30:3c:04:2a:b7:1d:9c:99:77:16:5c:d4:
                    6a:5c:6d:84:fd:8d:f8:9f:21:72:a8:79:02:49:2b:
                    18:e4:e2:dc:ce:f9:eb:3c:77:49:fd:1d:23:62:ee:
                    d7:ee:ef:90:1e:fd:25:ce:f2:41:fa:58:39:8e:a8:
                    e6:ad:79:64:c4:e4:39:ed:64:5e:eb:96:73:c4:74:
                    a7:68:fa:f0:9b:d0:36:b8:76:36:d8:5c:3b:51:4c:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:08:E5:07:29:1A:BC:2E:E1:99:77:CA:FE:DC:00:A6:54:31:16:58
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/jQjlBykavC7hmXfK_twAplQxFlg.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:39:c3:a1:49:d9:1f:1b:7e:0b:8b:90:95:29:ab:d6:7c:ad:
         0b:64:d6:b9:aa:b5:79:82:75:08:c5:49:4f:56:f8:83:04:69:
         ac:fc:7a:89:23:c7:1f:ec:15:56:8c:52:fc:ad:7f:be:a3:4e:
         f1:4c:29:67:b0:29:85:4a:59:74:96:6b:76:0d:0d:cb:8c:ed:
         b2:c5:1a:a6:21:de:7c:9c:76:d2:57:6d:9b:33:ab:8c:43:3e:
         36:4c:38:12:26:97:20:c3:df:f0:58:58:05:54:c4:75:60:92:
         b3:e9:a9:d7:72:a7:f7:55:17:91:17:da:37:89:02:22:f4:23:
         2a:5f:4a:42:86:37:ab:6f:f2:0e:cd:af:7f:01:25:eb:1d:ef:
         2d:2b:28:23:55:8f:cb:0e:16:2a:a7:6b:6e:c3:09:cc:6a:c6:
         13:6f:7e:c6:d7:bd:25:cb:5f:50:db:62:92:f0:92:15:ee:1a:
         63:d0:11:5b:bd:ec:ba:e7:95:c2:a6:cf:15:f3:1d:cc:0b:87:
         b4:bd:bb:b4:91:37:8b:f4:93:f5:63:c4:d1:5f:23:55:07:d5:
         03:d5:3b:9f:f6:4d:9f:39:ea:03:24:72:0e:bd:12:48:0f:be:
         52:d8:cf:60:62:9d:10:35:14:5d:f3:54:55:d2:bd:e6:46:92:
         e3:fd:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:08:36 2025 by rpki-client