Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9OynPyTTvtMXj4byC-X3UHyGxig.roa
File:                     9OynPyTTvtMXj4byC-X3UHyGxig.roa (raw, json)
Hash identifier:          35GsrAhTkn22p8MIQnQW11OIyzsVUCuZ1kYWUKKI8Jk=
Subject key identifier:   F4:EC:A7:3F:24:D3:BE:D3:17:8F:86:F2:0B:E5:F7:50:7C:86:C6:28
Certificate issuer:       /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial:       1455
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9OynPyTTvtMXj4byC-X3UHyGxig.roa
Signing time:             Fri 22 Aug 2025 09:00:18 +0000
ROA not before:           Fri 22 Aug 2025 09:00:18 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     9311
IP address blocks:        210.201.60.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5205 (0x1455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
        Validity
            Not Before: Aug 22 09:00:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F4ECA73F24D3BED3178F86F20BE5F7507C86C628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:a2:3e:89:49:fd:41:02:86:97:7a:ba:ad:
                    a5:1e:ad:8c:93:58:5f:71:6f:e7:6c:a2:ae:08:39:
                    95:35:c4:b3:b5:2b:70:65:c2:d7:46:35:ca:a5:88:
                    5d:93:c5:e9:93:4b:f8:c8:ad:e1:e1:fd:05:b5:a9:
                    50:6a:31:44:f0:e4:19:5a:da:f7:4c:bd:ff:8e:38:
                    69:68:88:2f:29:f8:b5:62:01:73:b4:95:5c:f8:ff:
                    9a:ec:75:32:62:6e:d5:f9:98:b7:4b:df:f6:a8:65:
                    89:2c:1c:ab:d6:83:fb:79:46:a6:9e:95:85:bd:c4:
                    60:78:59:b2:12:d9:9a:fd:45:a5:76:6a:73:c6:46:
                    de:97:d0:75:df:83:a3:83:a8:b3:5b:81:9b:53:a8:
                    18:c6:e6:06:2e:e0:5e:98:ed:f9:e0:e1:c3:cf:9d:
                    11:2c:8c:dc:bc:99:64:1a:50:55:5e:1c:a3:ce:13:
                    e4:8d:bc:7f:4d:e4:d8:90:7e:f2:f0:93:12:a0:e0:
                    df:21:b1:3c:bb:a3:53:11:11:13:8d:2f:83:3e:61:
                    bc:b6:4f:9d:10:9b:db:25:7d:55:5e:83:7a:9b:58:
                    65:ec:a0:70:58:87:6d:72:68:6c:09:b2:df:2a:10:
                    ba:76:06:39:16:e2:05:72:5c:5c:9b:ef:14:1e:f7:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EC:A7:3F:24:D3:BE:D3:17:8F:86:F2:0B:E5:F7:50:7C:86:C6:28
            X509v3 Authority Key Identifier:
                keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9OynPyTTvtMXj4byC-X3UHyGxig.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.201.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:34:38:67:41:b2:d4:da:a2:33:1d:69:bf:36:eb:aa:3e:f2:
         1d:01:6f:3d:ba:d8:3f:80:a5:6d:4d:80:8e:4c:38:60:78:df:
         06:cb:e3:ce:29:20:fb:56:85:cf:c3:bb:60:1b:57:e1:21:e3:
         82:e5:f5:5e:45:81:63:03:e8:e7:99:e3:f6:d3:47:2f:a9:1c:
         9b:26:b8:4e:3d:b1:42:a3:32:fd:98:f3:d7:cc:d8:7b:24:e3:
         03:f7:fd:93:55:b8:55:da:6c:b7:d4:66:03:1a:8b:d7:92:b6:
         c9:5b:67:7c:f5:9c:a2:c2:a1:20:9a:6a:b4:75:30:be:f5:0e:
         37:15:19:9a:c1:3c:3f:c3:04:d7:23:86:64:8d:8a:be:b3:19:
         a9:7f:24:05:94:80:d3:a1:c0:cb:d0:dc:0e:2f:3d:b7:2d:6f:
         18:37:67:31:4b:fd:d4:2e:c1:10:b0:8f:5d:34:9b:23:18:ea:
         f6:2b:90:a2:09:4b:f1:02:16:c3:3c:0f:3f:8f:9d:40:1a:a7:
         62:67:8b:9d:18:82:57:8f:1a:f8:38:63:53:50:43:42:c0:7c:
         fa:56:86:0c:c4:7f:8c:cf:a4:56:81:77:9f:ed:b5:11:74:33:
         61:7f:c7:90:0a:83:47:ef:e9:a5:79:d3:be:13:e9:49:25:aa:
         de:af:d2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:48:52 2025 by rpki-client