Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/quiqvy_Mbzi29jkt_u2SD6_zA8k.roa
File:                     quiqvy_Mbzi29jkt_u2SD6_zA8k.roa (raw, json)
Hash identifier:          aj9XNrruWUOH6gMCcEA7RVMXj2fpciSidC+ZiisaMew=
Subject key identifier:   AA:E8:AA:BF:2F:CC:6F:38:B6:F6:39:2D:FE:ED:92:0F:AF:F3:03:C9
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       08A8
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/quiqvy_Mbzi29jkt_u2SD6_zA8k.roa
Signing time:             Fri 22 Aug 2025 09:01:58 +0000
ROA not before:           Fri 22 Aug 2025 09:01:58 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     134823
IP address blocks:        103.122.188.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216 (0x8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Aug 22 09:01:58 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=AAE8AABF2FCC6F38B6F6392DFEED920FAFF303C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:b0:26:16:62:d8:11:9a:7c:80:73:b8:c7:
                    b6:5a:34:a0:3f:72:30:f8:1d:68:c7:c3:2a:09:0f:
                    a7:b4:48:28:07:57:a2:7f:d0:60:a2:6e:a1:a6:b4:
                    45:d2:2e:47:0d:ab:8c:c3:5a:8a:4c:7b:3b:9f:99:
                    89:c0:63:a0:1e:77:da:a2:c9:3f:e6:f2:57:54:0c:
                    2f:53:55:43:fe:46:7a:21:d9:06:2c:04:58:0c:b8:
                    38:7b:fd:4a:c4:c3:46:9b:fd:09:cc:fe:fe:ec:63:
                    9b:ae:9a:08:4a:83:db:27:d6:9f:73:f3:06:55:5c:
                    a2:e7:6d:60:57:02:c7:0c:42:b1:43:8f:48:91:cb:
                    69:15:8f:75:ec:32:7d:2f:72:f4:e9:46:08:8c:9f:
                    cf:a1:8e:ee:fd:00:93:d5:17:dc:9f:e8:90:38:45:
                    07:90:9c:3d:47:0b:e4:70:ef:3c:73:f5:a6:c0:b5:
                    83:25:31:0b:57:d9:1c:2e:4d:29:3a:55:85:88:9d:
                    b3:7b:74:70:17:84:0e:92:b5:cd:48:63:44:5b:41:
                    f4:c6:94:a9:88:a8:c9:3e:63:19:b4:64:c5:c7:9f:
                    d0:2b:1f:03:03:80:6c:27:f8:d4:e0:5b:f7:07:3a:
                    4e:53:11:21:0d:55:df:7e:c2:29:94:1a:d2:00:0a:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E8:AA:BF:2F:CC:6F:38:B6:F6:39:2D:FE:ED:92:0F:AF:F3:03:C9
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/quiqvy_Mbzi29jkt_u2SD6_zA8k.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:61:9f:71:fd:f9:06:4b:99:59:2c:14:2d:f5:8e:6c:76:
         b8:6c:25:66:d3:ac:b2:a0:f7:d4:56:54:b1:14:19:bf:43:13:
         9e:05:2f:21:23:23:ae:03:d6:b8:8b:c5:3d:17:c4:07:78:04:
         9c:3f:e7:36:c2:1f:17:5a:3e:dd:b9:bc:c1:87:fa:f4:10:86:
         37:ef:a4:3e:6d:06:0a:d4:2d:e3:b3:c0:b6:bd:9a:f6:bf:5a:
         a0:85:23:f6:0a:9f:15:98:82:d6:32:9b:02:b8:46:c5:d5:cc:
         79:71:4c:7c:5a:57:b6:ef:84:4c:16:db:e2:af:a2:b4:25:28:
         05:6c:89:07:e2:36:56:7b:97:92:82:81:37:2c:22:26:69:dd:
         03:f6:a5:cc:31:de:39:55:0e:3d:a3:7b:83:25:9d:c0:95:a4:
         82:e2:b6:9a:03:c3:7d:bf:b8:85:60:6e:9a:3e:62:8f:9c:b9:
         76:30:26:dd:de:ed:d0:33:81:2e:ff:b8:67:c9:90:0e:10:51:
         3f:6e:92:2a:10:95:10:db:23:22:06:59:62:5c:da:b6:3f:6f:
         69:5b:39:0e:0f:85:cf:0b:fb:fa:e9:61:c5:03:5c:5e:27:0b:
         f0:4a:14:dc:87:10:4f:ea:8e:16:ae:2e:17:d8:f0:c6:5f:dc:
         43:5e:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:58:46 2025 by rpki-client