Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eIDu20sUwR9Fl7l8lmtzEYXP3E4.roa
File:                     eIDu20sUwR9Fl7l8lmtzEYXP3E4.roa (raw, json)
Hash identifier:          pKPrsP1SrIeDWC/9bLu3px2ruYAwOl/aqGB9iFHaSM0=
Subject key identifier:   78:80:EE:DB:4B:14:C1:1F:45:97:B9:7C:96:6B:73:11:85:CF:DC:4E
Certificate issuer:       /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial:       13E6
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eIDu20sUwR9Fl7l8lmtzEYXP3E4.roa
Signing time:             Fri 22 Aug 2025 08:57:23 +0000
ROA not before:           Fri 22 Aug 2025 08:57:23 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7532
IP address blocks:        150.116.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5094 (0x13e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
        Validity
            Not Before: Aug 22 08:57:23 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7880EEDB4B14C11F4597B97C966B731185CFDC4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:64:30:4c:30:79:30:e0:5d:ed:e6:18:06:
                    54:3e:c9:ad:5a:88:c7:f8:de:c7:79:78:35:05:16:
                    1f:bd:ab:82:db:87:da:ed:b8:68:1e:57:e9:04:8a:
                    fc:49:dc:e4:76:92:f3:16:80:36:61:6b:cf:f9:ef:
                    ae:e1:7d:74:57:92:79:c5:9e:b5:52:7d:30:77:e6:
                    15:a4:ad:cf:c3:d9:b6:31:2d:73:45:70:78:25:1d:
                    2d:ae:9e:d2:55:30:82:d7:39:c5:00:7a:bc:fb:68:
                    e8:19:e3:58:04:3b:7b:88:40:50:f4:0a:19:3e:a7:
                    9e:94:21:91:63:0f:47:73:55:1e:a1:5c:e4:71:cf:
                    4a:02:17:2d:77:e6:a3:2e:72:8e:16:d6:81:b3:a0:
                    af:51:23:99:f0:ab:5e:ef:95:4a:fd:d6:11:49:f3:
                    65:b4:d1:fe:48:6f:bd:96:49:1c:45:1e:a6:a3:e5:
                    6c:47:c7:f8:57:02:b3:4a:aa:4d:e2:85:4b:44:63:
                    24:42:c7:4f:38:ad:9b:7b:77:69:a6:b2:84:86:84:
                    ed:a5:de:e9:e5:71:d0:0b:b1:85:01:c8:0c:db:a6:
                    4f:6a:7d:6e:32:0a:3f:d7:49:14:00:9e:66:10:31:
                    61:4d:ed:ef:29:c0:5f:f7:b4:b1:dd:df:10:1f:9d:
                    50:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:80:EE:DB:4B:14:C1:1F:45:97:B9:7C:96:6B:73:11:85:CF:DC:4E
            X509v3 Authority Key Identifier:
                keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eIDu20sUwR9Fl7l8lmtzEYXP3E4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.116.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:3d:f1:95:84:0d:d9:c9:ce:29:76:5b:30:86:b0:0c:00:4b:
         d3:f5:b1:dd:44:be:ce:33:e1:95:e9:c1:c2:0c:6a:86:fc:63:
         b8:75:1e:e9:b7:cb:51:9f:b6:5d:4b:a6:6d:65:4c:0c:7f:13:
         3e:1e:00:43:b4:9a:74:de:02:7f:66:d7:87:5c:a2:9d:5c:06:
         37:62:b2:ed:4b:d3:a4:0a:36:2c:e2:58:18:bc:97:26:97:87:
         19:c4:96:4f:8f:35:75:8d:67:37:c1:4a:30:17:51:3a:94:f3:
         be:95:67:50:90:5a:29:76:f6:b0:9e:e3:6b:55:01:75:b3:9b:
         1b:00:57:d0:c2:2a:83:63:19:4a:57:6e:0c:66:7c:39:b1:25:
         6c:2e:ee:48:63:e4:6a:25:ab:6c:dc:6f:5f:9d:b6:1d:3f:78:
         b2:87:66:d0:4d:b3:25:72:d6:33:26:1b:ed:66:18:c4:39:3d:
         96:88:45:26:27:8f:77:60:b7:55:96:33:d7:ba:f7:fa:6c:e1:
         f8:bf:5f:14:eb:b9:9b:27:f8:41:28:95:8d:8a:f2:1a:c2:b0:
         d7:93:b9:b1:30:a6:95:0f:aa:22:38:28:d7:4f:7b:ba:67:73:
         97:fe:e1:51:73:34:25:f7:2e:40:27:5d:a2:38:d5:33:2b:c5:
         90:a3:b4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:47:50 2025 by rpki-client