Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ddUEL_10kuexYcNkPBzU_cBreZk.roa
File:                     ddUEL_10kuexYcNkPBzU_cBreZk.roa (raw, json)
Hash identifier:          wkQnXmxLZrn6bFWPG6/RPR8K4SZ0Rs1cSCagi/2Hwps=
Subject key identifier:   75:D5:04:2F:FD:74:92:E7:B1:61:C3:64:3C:1C:D4:FD:C0:6B:79:99
Certificate issuer:       /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial:       0223
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ddUEL_10kuexYcNkPBzU_cBreZk.roa
Signing time:             Fri 22 Aug 2025 09:03:38 +0000
ROA not before:           Fri 22 Aug 2025 09:03:38 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     150766
IP address blocks:        2401:5da0:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
        Validity
            Not Before: Aug 22 09:03:38 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=75D5042FFD7492E7B161C3643C1CD4FDC06B7999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:05:7e:40:54:00:14:28:76:49:3e:be:6d:
                    c6:9a:4e:f4:3e:74:4b:45:e2:51:0e:87:81:d1:1a:
                    3d:ae:d2:c2:38:14:89:78:5e:f9:47:d4:ca:ce:c0:
                    ac:bf:0e:4b:8a:41:c7:ee:ad:37:31:4e:26:13:75:
                    9d:4b:63:f3:f5:90:eb:f7:c1:77:c1:0d:01:32:dd:
                    5b:2f:6a:cd:29:44:ed:70:ee:3e:e6:84:02:3b:3d:
                    92:4e:d0:79:5f:18:b5:fa:76:31:88:1b:bc:29:72:
                    f6:ba:67:09:c2:50:d3:ae:2f:b5:a2:b3:b0:9a:fb:
                    1c:7f:bb:d7:7f:fe:44:f4:71:4f:49:7b:f5:84:9e:
                    18:fd:ba:8b:e6:68:30:a5:69:f7:f8:41:b5:cd:2c:
                    c2:c3:00:b5:67:13:b8:7f:02:2c:df:bc:52:91:45:
                    bf:80:34:04:b4:f0:ac:0c:62:ec:42:42:98:85:2d:
                    ce:24:dc:5d:2d:1d:be:19:2d:2a:73:71:3a:dd:e9:
                    1d:90:77:48:f8:37:4f:c8:94:36:fa:28:66:eb:ea:
                    ad:f3:82:82:01:96:93:dc:2d:c6:8f:5f:ee:df:3a:
                    43:4d:9b:f6:89:ec:ff:dc:51:03:9d:dc:06:d7:f1:
                    19:9c:6c:a9:4a:25:92:0b:0b:47:3c:c2:45:79:bb:
                    4e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D5:04:2F:FD:74:92:E7:B1:61:C3:64:3C:1C:D4:FD:C0:6B:79:99
            X509v3 Authority Key Identifier:
                keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ddUEL_10kuexYcNkPBzU_cBreZk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:21:74:d7:1e:40:c4:da:98:67:df:1f:64:74:d3:d3:f9:
         de:d3:95:01:73:d4:ff:75:ed:f9:35:84:30:a4:bc:bf:e6:27:
         cd:a0:c2:ce:ea:58:4c:0a:db:8b:19:96:92:63:8f:b0:aa:5a:
         53:38:cb:be:b6:d7:0e:bc:9d:28:52:ba:bf:2c:e7:e2:c3:6f:
         84:df:0b:23:3e:6a:96:f9:27:3d:0b:5a:e0:6a:51:87:e7:f3:
         37:41:61:ea:ac:cb:92:85:c7:24:3d:58:82:a9:b4:31:03:5b:
         58:2e:e6:01:4f:cf:5a:c1:fd:d1:91:3a:f7:d1:39:1a:37:27:
         75:af:62:97:5b:de:07:b3:19:91:01:28:91:e3:78:f6:b6:36:
         a4:7e:19:fd:32:08:3e:56:ae:7f:c5:cc:6f:93:33:e6:5c:e3:
         01:14:be:f4:fc:26:e3:e1:4e:1d:46:5b:da:c7:29:00:4b:8b:
         80:1d:aa:2d:63:a5:d2:af:6f:32:c6:5d:b5:ea:84:b2:3b:65:
         65:b7:cd:d4:2c:7d:84:e0:65:34:d0:86:7c:ad:bc:ec:69:d4:
         49:22:ed:10:27:9a:fb:7c:24:4a:eb:41:34:d1:e8:09:f5:10:
         99:59:67:a9:7a:fa:94:4b:77:1b:f5:44:a6:8e:b2:d4:7a:22:
         ce:30:2a:b1
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE
NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNTA4MjIw
OTAzMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc1RDUwNDJGRkQ3NDky
RTdCMTYxQzM2NDNDMUNENEZEQzA2Qjc5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLeQV+QFQAFCh2ST6+bcaaTvQ+dEtF4lEOh4HRGj2u0sI4FIl4
XvlH1MrOwKy/DkuKQcfurTcxTiYTdZ1LY/P1kOv3wXfBDQEy3Vsvas0pRO1w7j7m
hAI7PZJO0HlfGLX6djGIG7wpcva6ZwnCUNOuL7Wis7Ca+xx/u9d//kT0cU9Je/WE
nhj9uovmaDClaff4QbXNLMLDALVnE7h/AizfvFKRRb+ANAS08KwMYuxCQpiFLc4k
3F0tHb4ZLSpzcTrd6R2Qd0j4N0/IlDb6KGbr6q3zgoIBlpPcLcaPX+7fOkNNm/aJ
7P/cUQOd3AbX8RmcbKlKJZILC0c8wkV5u069AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUddUEL/10kuexYcNkPBzU/cBreZkwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5
goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ
R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL2RkVUVMXzEwa3Vl
eFljTmtQQnpVX2NCcmVaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkAV2gAAEwDQYJKoZIhvcNAQELBQADggEBAC3kIXTXHkDE2phn3x9kdNPT
+d7TlQFz1P917fk1hDCkvL/mJ82gws7qWEwK24sZlpJjj7CqWlM4y7621w68nShS
ur8s5+LDb4TfCyM+apb5Jz0LWuBqUYfn8zdBYeqsy5KFxyQ9WIKptDEDW1gu5gFP
z1rB/dGROvfRORo3J3WvYpdb3gezGZEBKJHjePa2NqR+Gf0yCD5Wrn/FzG+TM+Zc
4wEUvvT8JuPhTh1GW9rHKQBLi4Adqi1jpdKvbzLGXbXqhLI7ZWW3zdQsfYTgZTTQ
hnytvOxp1Eki7RAnmvt8JErrQTTR6An1EJlZZ6l6+pRLdxv1RKaOstR6Is4wKrE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:54:01 2025 by rpki-client