Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/NI7j6g063H_JutoEeICiAYs7rX8.roa
File:                     NI7j6g063H_JutoEeICiAYs7rX8.roa (raw, json)
Hash identifier:          JHDJYPXNqdyAKesu1B7dfLcHtDo5ORjZ6sQbs+f9KM8=
Subject key identifier:   34:8E:E3:EA:0D:3A:DC:7F:C9:BA:DA:04:78:80:A2:01:8B:3B:AD:7F
Certificate issuer:       /CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
Certificate serial:       0FDE
Authority key identifier: 97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/NI7j6g063H_JutoEeICiAYs7rX8.roa
Signing time:             Wed 29 Sep 2021 02:37:55 +0000
ROA not before:           Wed 29 Sep 2021 02:37:55 +0000
ROA not after:            Thu 29 Sep 2022 02:36:22 +0000
asID:                     18419
IP address blocks:        103.130.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4062 (0xfde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97CAADC8439AACEC6C28CF433EC9D8BE0C69C4B1
        Validity
            Not Before: Sep 29 02:37:55 2021 GMT
            Not After : Sep 29 02:36:22 2022 GMT
        Subject: CN=348EE3EA0D3ADC7FC9BADA047880A2018B3BAD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:72:e6:04:4c:8b:4d:de:9d:af:33:f3:f1:
                    10:f4:e1:e8:be:71:ed:30:c5:b0:0e:70:57:25:dd:
                    37:27:f8:3f:73:01:5f:e2:59:2f:5b:b5:28:d4:a8:
                    07:c4:8a:a0:ba:a9:b5:ea:f8:a2:49:44:d2:c8:e2:
                    a7:24:ac:d6:9d:54:45:81:4d:21:f1:da:24:b8:5d:
                    22:fc:59:b3:a3:2e:b6:2a:72:53:6c:3e:7c:55:58:
                    24:a6:89:5d:d8:c4:45:9b:7b:d0:64:8e:c1:43:3f:
                    3f:91:45:dd:4e:cf:ee:0c:cf:bd:62:78:34:34:f0:
                    b9:a1:cf:5f:05:36:d1:8f:fe:ba:5c:ed:c9:1c:e7:
                    b7:7c:3b:23:07:1d:a3:65:84:b8:a2:60:6a:81:30:
                    25:bd:72:32:d1:0b:03:be:52:e1:11:40:2f:b5:37:
                    f9:eb:02:51:57:09:44:3b:dc:c9:b1:0f:cb:92:45:
                    3c:84:23:c4:25:e3:a5:0a:1f:1e:43:b3:b1:d6:d2:
                    65:05:79:d0:5e:c6:32:f0:cf:1f:5b:a1:54:07:df:
                    c0:9e:05:7d:84:91:b3:04:ac:77:c7:25:4c:c3:8d:
                    e5:dd:a7:f5:31:14:f6:fd:5d:62:7b:7f:2c:a2:a2:
                    95:b5:15:ad:d2:34:c0:d3:b1:1f:91:a8:23:75:43:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:E3:EA:0D:3A:DC:7F:C9:BA:DA:04:78:80:A2:01:8B:3B:AD:7F
            X509v3 Authority Key Identifier:
                keyid:97:CA:AD:C8:43:9A:AC:EC:6C:28:CF:43:3E:C9:D8:BE:0C:69:C4:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/l8qtyEOarOxsKM9DPsnYvgxpxLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/l8qtyEOarOxsKM9DPsnYvgxpxLE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YFCTELECOM/NI7j6g063H_JutoEeICiAYs7rX8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:b8:0a:11:4c:ff:1b:59:8c:a4:18:53:e3:d5:cd:88:e8:fb:
         06:12:8c:16:aa:19:0c:49:9d:0f:db:f9:e5:1d:28:4e:38:fa:
         df:42:7a:1b:02:c8:ef:07:d5:26:c0:5a:f7:7f:02:47:85:4e:
         2b:10:f1:8b:a9:91:1a:3a:d2:99:10:e1:d5:f3:c7:1f:7a:3a:
         74:8c:f2:6a:e9:a2:c4:33:d2:aa:b7:96:92:ba:56:4a:9c:ca:
         fb:ea:9b:66:e1:b6:24:47:3f:18:ad:b6:90:1b:01:ec:09:47:
         72:c4:e4:5b:2a:a8:7b:0b:d6:58:0d:00:ee:b6:89:48:67:c6:
         69:9a:1b:a8:99:ae:cb:24:28:03:b8:53:87:ab:22:f3:f3:87:
         03:b7:0d:5c:63:a5:ff:3c:52:3f:cb:1e:b8:0c:81:d5:49:7e:
         79:72:a9:2b:ef:72:77:aa:93:29:3e:41:22:5a:84:00:a3:ce:
         b4:08:6e:1f:52:3c:3d:cd:1d:dd:44:85:b5:04:c0:1a:35:de:
         a1:91:b4:c4:03:90:ce:0e:bb:8c:04:c8:6b:33:32:fb:55:b7:
         e8:58:ca:7f:b6:49:8d:32:23:51:0b:c4:54:2b:54:f9:9d:56:
         01:9e:20:d3:dd:b9:c4:5f:cd:7f:ee:bb:26:cc:a8:ac:de:fe:
         e5:d1:62:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:05 2025 by rpki-client