Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/636siyTF42530cYxfgeOIzVyg1g.roa
File:                     636siyTF42530cYxfgeOIzVyg1g.roa (raw, json)
Hash identifier:          h+QxaXqrqG9weAzHOKIgTuda+3StRcjN7U2vZsUrQ9w=
Subject key identifier:   EB:7E:AC:8B:24:C5:E3:6E:77:D1:C6:31:7E:07:8E:23:35:72:83:58
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       1412
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/636siyTF42530cYxfgeOIzVyg1g.roa
Signing time:             Fri 22 Aug 2025 08:57:32 +0000
ROA not before:           Fri 22 Aug 2025 08:57:32 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18419
IP address blocks:        118.150.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5138 (0x1412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Aug 22 08:57:32 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EB7EAC8B24C5E36E77D1C6317E078E2335728358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:91:f3:8b:a2:72:1d:94:37:74:95:86:41:ee:
                    83:75:c3:16:e1:ca:65:1c:f2:e3:9d:98:41:65:7e:
                    1b:d0:ea:71:46:88:54:d3:f6:06:5a:e4:2f:e5:21:
                    c6:52:d6:ab:72:68:45:6d:0c:19:87:bc:de:47:74:
                    7a:11:43:33:77:3d:b3:ed:cb:be:61:0e:26:16:65:
                    3b:0e:7c:b7:1f:b7:ad:3d:dc:c4:e9:1e:0c:b9:cf:
                    8c:77:67:2c:6d:f6:fe:5f:e1:da:d7:96:60:74:1f:
                    21:32:07:f4:fe:26:c4:36:f7:58:17:0a:0c:08:7d:
                    57:97:2e:13:be:9d:d9:d2:85:29:d6:96:82:30:28:
                    57:e7:31:99:81:a3:9e:fd:0b:84:af:df:cd:74:8b:
                    ee:c5:98:3b:1e:a4:64:b0:d6:92:3f:c1:14:e3:0d:
                    22:73:37:7b:52:34:28:ed:82:6e:a3:c4:60:e2:86:
                    8d:cb:fb:47:bc:e8:b9:8d:6b:d0:90:32:90:e3:1d:
                    93:89:e0:6f:f4:3b:f0:a0:0b:7c:3b:0f:c2:f0:33:
                    74:c3:94:ae:c6:ae:64:7f:f8:ae:ad:21:1c:bf:cf:
                    02:6c:0b:93:92:ba:7d:af:da:8d:09:26:ea:01:95:
                    42:b5:7c:4b:e7:b2:00:bb:f5:fc:84:bd:26:d2:91:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:AC:8B:24:C5:E3:6E:77:D1:C6:31:7E:07:8E:23:35:72:83:58
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/636siyTF42530cYxfgeOIzVyg1g.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:0e:11:a9:3d:d4:7b:b4:32:30:3d:3b:b6:fc:9a:0b:47:
         de:84:78:a0:69:7b:79:44:29:bb:d9:81:07:d5:a1:63:b7:0d:
         eb:0f:37:09:23:85:0a:24:0f:10:e8:5d:89:17:aa:76:2f:73:
         e3:3d:9f:c1:f0:ef:30:63:29:9c:d7:bc:5f:84:6b:24:a5:c6:
         3d:74:a9:f8:01:3c:e6:85:a3:22:c6:86:55:b2:22:4b:65:8c:
         73:15:be:55:bd:3a:c7:2d:f5:91:09:fc:1d:e3:5a:28:40:f0:
         64:ba:03:58:f8:03:79:3d:a9:4c:83:cb:8c:81:87:3d:60:f7:
         7c:80:d5:8a:d4:fd:4c:9e:66:a2:44:e5:2b:30:f8:63:15:aa:
         b2:f1:23:d8:72:0c:dd:5e:e1:34:c7:3b:c8:fc:dd:4c:9f:5d:
         ba:8d:a9:ce:40:2c:a2:36:1b:e1:4d:e4:60:28:68:00:4f:9d:
         9c:92:2c:16:14:06:35:78:f5:29:ae:2d:48:ae:66:0f:e4:a2:
         6d:30:b8:07:59:ff:a1:89:37:93:5e:dd:d6:3b:0c:ac:16:0b:
         30:e0:8f:90:36:dc:6e:8d:d6:4f:e2:59:2e:85:ad:f8:ad:15:
         61:e4:92:55:a2:53:08:f6:54:32:bb:84:a7:e1:f2:d5:e8:1a:
         5d:6d:31:6b
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw
ODU3MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCN0VBQzhCMjRDNUUz
NkU3N0QxQzYzMTdFMDc4RTIzMzU3MjgzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhkfOLonIdlDd0lYZB7oN1wxbhymUc8uOdmEFlfhvQ6nFGiFTT
9gZa5C/lIcZS1qtyaEVtDBmHvN5HdHoRQzN3PbPty75hDiYWZTsOfLcft6093MTp
Hgy5z4x3Zyxt9v5f4drXlmB0HyEyB/T+JsQ291gXCgwIfVeXLhO+ndnShSnWloIw
KFfnMZmBo579C4Sv3810i+7FmDsepGSw1pI/wRTjDSJzN3tSNCjtgm6jxGDiho3L
+0e86LmNa9CQMpDjHZOJ4G/0O/CgC3w7D8LwM3TDlK7GrmR/+K6tIRy/zwJsC5OS
un2v2o0JJuoBlUK1fEvnsgC79fyEvSbSkfhtAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU636siyTF42530cYxfgeOIzVyg1gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy82MzZzaXlURjQyNTMw
Y1l4ZmdlT0l6VnlnMWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAdpYwDQYJKoZIhvcNAQELBQADggEBAEoqDhGpPdR7tDIwPTu2/JoLR96EeKBp
e3lEKbvZgQfVoWO3DesPNwkjhQokDxDoXYkXqnYvc+M9n8Hw7zBjKZzXvF+EaySl
xj10qfgBPOaFoyLGhlWyIktljHMVvlW9Osct9ZEJ/B3jWihA8GS6A1j4A3k9qUyD
y4yBhz1g93yA1YrU/UyeZqJE5Ssw+GMVqrLxI9hyDN1e4TTHO8j83UyfXbqNqc5A
LKI2G+FN5GAoaABPnZySLBYUBjV49SmuLUiuZg/kom0wuAdZ/6GJN5Ne3dY7DKwW
CzDgj5A23G6N1k/iWS6FrfitFWHkklWiUwj2VDK7hKfh8tXoGl1tMWs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:29 2025 by rpki-client