Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Q0ffrliusgMx0Zdo3-NSlu_O4-A.roa
File:                     Q0ffrliusgMx0Zdo3-NSlu_O4-A.roa (raw, json)
Hash identifier:          T5Sk1W5GFltNseOOrFMOlPo2t+4+X+xxoTaEhI3k2YU=
Subject key identifier:   43:47:DF:AE:58:AE:B2:03:31:D1:97:68:DF:E3:52:96:EF:CE:E3:E0
Certificate issuer:       /CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
Certificate serial:       0776
Authority key identifier: 1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Q0ffrliusgMx0Zdo3-NSlu_O4-A.roa
Signing time:             Tue 29 Sep 2020 10:09:19 +0000
ROA not before:           Tue 29 Sep 2020 10:09:19 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131603
IP address blocks:        103.42.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB1CA70A33248FB3DAEE8BF41E2DAA76A7DCFD3
        Validity
            Not Before: Sep 29 10:09:19 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=4347DFAE58AEB20331D19768DFE35296EFCEE3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:8f:8e:b0:36:94:85:0c:9a:c5:d0:71:90:
                    bc:32:f4:71:d0:99:60:6d:be:c3:48:bf:81:e2:c8:
                    a9:e6:f9:73:2c:18:70:38:8a:c6:b6:b3:8c:74:6e:
                    9d:87:34:bd:cc:4c:d1:e5:25:7f:3d:b5:6a:87:80:
                    12:c7:a8:e9:0d:e7:78:df:4d:98:a0:64:fa:1c:6d:
                    57:f0:83:99:91:be:5a:7f:58:b3:00:ff:b5:38:e5:
                    73:e5:c7:16:02:b5:c9:0f:fd:fe:fa:91:7a:d2:fd:
                    7a:c5:2f:99:bd:02:1d:97:82:68:bd:3e:61:8a:ae:
                    83:1b:e9:81:b2:cf:7b:40:bd:2b:e3:20:b3:91:3f:
                    4b:80:17:8a:be:af:a8:5e:17:e8:40:e4:2d:67:38:
                    ae:cb:1f:16:08:0d:51:3b:26:df:2f:24:0d:6e:80:
                    6b:fa:7c:39:46:2c:7a:77:45:b0:f2:ad:54:ed:7d:
                    e7:92:c4:fa:c5:8e:a2:9b:ca:3f:35:d7:2e:b6:eb:
                    e6:60:a9:37:07:f3:69:65:a9:5c:aa:f2:35:4f:3a:
                    00:13:d5:f8:7e:20:a9:e7:76:82:4f:da:66:bf:86:
                    5e:1f:63:f8:11:43:b3:24:52:7e:9f:f2:8b:f6:f4:
                    a4:34:9f:e0:4f:98:7e:81:01:30:ef:4a:32:a9:34:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:47:DF:AE:58:AE:B2:03:31:D1:97:68:DF:E3:52:96:EF:CE:E3:E0
            X509v3 Authority Key Identifier:
                keyid:1C:B1:CA:70:A3:32:48:FB:3D:AE:E8:BF:41:E2:DA:A7:6A:7D:CF:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/HLHKcKMySPs9rui_QeLap2p9z9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HLHKcKMySPs9rui_QeLap2p9z9M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WSN-TW/Q0ffrliusgMx0Zdo3-NSlu_O4-A.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:47:bb:48:56:ab:c6:eb:a5:c7:f8:67:7e:5c:3c:e0:86:
         35:4c:77:4a:38:fc:6d:06:bf:19:c2:f3:5c:28:82:08:12:83:
         29:f1:1b:32:55:fb:08:9b:84:40:c3:e1:76:78:d6:17:85:72:
         08:e9:13:d7:a8:12:a1:90:83:3a:42:50:fe:94:d8:d8:c8:20:
         97:3b:79:4a:bc:c7:28:1b:9e:e6:b7:17:9e:3b:75:65:21:8c:
         b2:99:41:8f:27:0e:61:e6:2e:f9:77:3c:7e:39:0a:af:30:d6:
         75:8e:b5:30:a3:6a:dd:8d:89:65:42:b7:8c:73:e9:4c:40:88:
         d3:45:36:19:28:b1:1f:1e:95:9b:4e:93:aa:dc:5d:c0:bf:71:
         27:0a:e4:e1:8c:f8:78:f9:13:e9:2b:43:1b:79:03:55:9f:31:
         5c:93:93:10:39:8c:58:03:5d:f4:eb:63:56:fb:d1:3c:fc:7f:
         df:24:10:15:f1:cd:5e:df:fc:cb:09:84:ca:3c:b2:73:a4:42:
         1f:28:2f:76:c1:9c:01:51:82:95:6d:40:02:23:9c:fe:79:8a:
         a3:50:8b:1f:df:df:69:1f:1c:c5:f5:56:3e:22:1c:38:12:f7:
         26:96:95:2c:7e:aa:8d:37:ff:ff:4f:cb:e3:30:d1:3f:01:a8:
         42:71:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:16 2025 by rpki-client