Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/TREASlOSntQif8AAG_H478pIHEU.roa
File:                     TREASlOSntQif8AAG_H478pIHEU.roa (raw, json)
Hash identifier:          2GBfyxrGPY1decFAS9+IFRX90gwFyMoQTRBhtt0SYV0=
Subject key identifier:   4D:11:00:4A:53:92:9E:D4:22:7F:C0:00:1B:F1:F8:EF:CA:48:1C:45
Certificate issuer:       /CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
Certificate serial:       036B
Authority key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/TREASlOSntQif8AAG_H478pIHEU.roa
Signing time:             Tue 30 Sep 2025 15:50:59 +0000
ROA not before:           Tue 30 Sep 2025 15:50:59 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18040
IP address blocks:        160.191.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
        Validity
            Not Before: Sep 30 15:50:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4D11004A53929ED4227FC0001BF1F8EFCA481C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:05:b4:c0:1f:c1:e6:38:e5:bd:f8:f5:4a:
                    f0:a3:1f:83:ad:47:6d:58:8c:38:1d:bd:f2:34:63:
                    67:40:5f:1f:4f:47:7f:a3:59:e8:b7:38:4f:56:68:
                    fe:30:c3:56:3c:52:8a:86:b3:e6:93:84:fd:48:1f:
                    33:1a:fb:55:2e:19:a6:2d:54:a5:6d:8b:66:b7:07:
                    a7:da:fb:ef:0e:03:07:10:24:74:8f:9c:b9:d8:77:
                    7b:de:9c:e0:e6:2a:c5:e5:e4:59:b5:a1:66:88:16:
                    8b:43:21:ba:37:a6:fc:f2:5a:81:74:39:6c:5d:b4:
                    44:71:e7:02:90:74:8e:aa:f3:20:45:c1:15:88:13:
                    12:ae:b8:6f:7b:6f:b8:b2:f3:d2:b4:be:a2:2f:ad:
                    01:1b:5a:87:bb:14:e4:a2:64:4b:c8:8a:79:f4:db:
                    8a:b3:70:94:fb:c2:d4:7c:8a:b2:89:81:5a:90:05:
                    9c:d1:d1:f1:39:34:77:bd:b1:f9:4a:5d:33:bf:3f:
                    a2:6a:66:fc:12:a8:01:58:85:53:76:3c:95:84:70:
                    89:b8:a2:2d:90:9d:a3:ce:bc:e9:ae:e8:20:66:6a:
                    cc:1f:24:ce:9d:ea:9a:fc:52:33:ce:f2:2b:66:e8:
                    48:20:70:45:8f:f2:2f:48:dc:31:c0:73:09:ae:88:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:00:4A:53:92:9E:D4:22:7F:C0:00:1B:F1:F8:EF:CA:48:1C:45
            X509v3 Authority Key Identifier:
                keyid:53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/TREASlOSntQif8AAG_H478pIHEU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a3:a5:b2:43:98:2b:b8:d7:7d:70:d6:56:3b:92:7e:ec:32:
         6c:7f:e8:c8:b8:b7:37:6f:b4:c6:ca:7e:c2:7f:b7:b2:93:e7:
         e5:a5:e9:d0:5b:c9:07:db:ed:b6:c4:0b:95:44:e6:27:b6:d5:
         a2:75:e2:3e:6c:bc:b9:f2:73:01:b8:1d:c9:77:05:53:b8:75:
         88:b8:e1:73:3b:7f:33:24:f3:b0:63:e3:c7:1d:96:41:8f:2b:
         53:65:18:54:6f:51:c3:c8:2c:79:ea:38:49:a6:c7:a7:64:80:
         7a:60:2b:73:d2:3f:a8:82:56:c3:88:99:26:2d:23:87:04:75:
         80:25:4e:24:9d:bf:1e:37:f1:58:20:b0:6a:53:07:bd:3c:9f:
         61:cb:54:d4:b1:6e:92:54:b7:62:5b:a0:93:c7:8b:62:4a:f9:
         ed:e9:5d:d4:49:e4:b6:ed:06:5e:4a:fa:b1:53:84:d6:cc:fc:
         03:39:a3:93:d3:a8:6d:ed:c5:c5:d4:2a:87:1e:a5:16:e9:85:
         3b:9c:ed:c6:4f:1e:20:c9:9c:ff:23:f8:f7:9f:86:69:ba:fa:
         a7:a0:65:10:99:f5:e4:ac:ea:9f:36:f0:06:f0:98:b5:a1:8c:
         b0:b1:39:0b:5e:ec:f9:d7:ef:a9:4a:97:a6:18:a0:a6:02:43:
         4d:e5:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:37:21 2025 by rpki-client