Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/6e75ddlEcEeOQDlJL-yZVtnwiL8.roa
File:                     6e75ddlEcEeOQDlJL-yZVtnwiL8.roa (raw, json)
Hash identifier:          1dP+1lKFOeh82cLKDkdf1KXIq9Ym73wiQo/J2VQHbHw=
Subject key identifier:   E9:EE:F9:75:D9:44:70:47:8E:40:39:49:2F:EC:99:56:D9:F0:88:BF
Certificate issuer:       /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial:       0226
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/6e75ddlEcEeOQDlJL-yZVtnwiL8.roa
Signing time:             Fri 22 Aug 2025 09:03:39 +0000
ROA not before:           Fri 22 Aug 2025 09:03:39 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     150766
IP address blocks:        2401:5da0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
        Validity
            Not Before: Aug 22 09:03:39 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E9EEF975D94470478E4039492FEC9956D9F088BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:81:aa:f9:57:ae:9a:ab:2b:6a:90:1d:6f:
                    a3:e4:2d:72:38:89:83:ab:26:0d:4d:54:5d:39:2e:
                    9d:4e:5a:69:af:7a:f7:47:f9:92:29:cb:5c:bf:8e:
                    d2:d2:76:81:ad:bc:c9:21:99:4d:33:0d:80:8d:fd:
                    59:f8:94:87:10:82:00:4e:b1:1f:4a:7e:72:b6:d8:
                    f9:c2:cd:b1:c3:b3:c8:fb:97:8e:a4:b5:a8:35:ae:
                    17:84:bf:ec:36:4b:36:11:25:d2:54:90:1c:2e:06:
                    c6:20:1c:3f:92:01:ce:43:d9:8d:7e:9c:e2:6f:b2:
                    31:a5:f2:17:5b:1c:f8:fc:c9:9e:fe:40:36:44:85:
                    41:65:ee:20:b7:3d:21:c5:52:67:be:6a:ab:5f:65:
                    6b:98:eb:e8:5a:92:6c:4f:93:96:7c:f8:19:6e:6d:
                    03:cd:ab:96:84:40:6a:cd:1a:bf:6c:52:c6:2e:ba:
                    99:2e:af:95:97:65:e5:45:ee:a2:f8:20:dc:98:2c:
                    50:05:18:cd:7d:28:22:12:95:f8:24:24:c5:ab:ad:
                    97:c9:74:80:ee:2a:36:65:a9:bf:61:33:d7:1f:5f:
                    bb:c7:25:f7:59:05:fc:a6:69:d7:e7:ac:96:62:36:
                    a9:e2:ae:a4:ab:cd:54:c8:bc:cb:30:f5:9a:37:1d:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:F9:75:D9:44:70:47:8E:40:39:49:2F:EC:99:56:D9:F0:88:BF
            X509v3 Authority Key Identifier:
                keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/6e75ddlEcEeOQDlJL-yZVtnwiL8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:f1:ec:7d:72:6e:ec:27:bf:eb:76:bb:76:c2:76:fb:67:01:
         fc:0a:b0:bc:dc:f4:64:50:82:6e:55:99:d2:c2:6b:11:86:6f:
         9c:f9:47:af:25:4c:73:1b:a1:eb:a7:02:09:95:d1:cb:52:79:
         cc:aa:b6:e9:f4:66:4e:5d:e6:fd:ee:0e:1f:1d:83:8b:b8:3c:
         41:35:37:e9:1f:3c:8e:c7:3a:2e:7c:e7:06:39:e9:d5:81:de:
         86:b4:55:a1:bd:22:8b:63:e2:c6:a8:82:61:01:4f:69:61:de:
         09:b5:0f:29:e3:1a:2a:ca:f8:83:f8:1c:c9:86:89:65:d4:e4:
         dc:d8:1c:fa:c5:77:1d:de:c2:9f:2d:97:22:ff:52:6e:35:89:
         d0:b1:5b:a1:35:26:54:54:27:43:4e:77:1b:fd:2a:ab:75:21:
         05:cf:a9:2a:ba:08:ab:78:9f:25:b0:c6:33:b6:33:1f:df:8d:
         39:bf:e3:0a:45:08:7c:91:85:e3:68:b3:a2:d2:5c:31:8b:52:
         e5:75:1e:09:ed:d0:ba:6f:1c:fb:85:41:b6:f6:29:b6:3b:cc:
         9c:e2:49:3d:81:71:50:09:76:51:7c:80:a5:e3:0e:49:45:60:
         43:52:ef:14:19:21:97:bf:c3:b0:95:73:7f:1b:33:64:a6:f8:
         0c:3a:bc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:53:54 2025 by rpki-client