Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/frWI7Eeslz12PC1F7Skc0fz90Fc.roa
File:                     frWI7Eeslz12PC1F7Skc0fz90Fc.roa (raw, json)
Hash identifier:          EM88IHqP4B6zsm8vOmbqDtA1QolhIApxnELHjUY7A+Y=
Subject key identifier:   7E:B5:88:EC:47:AC:97:3D:76:3C:2D:45:ED:29:1C:D1:FC:FD:D0:57
Certificate issuer:       /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
Certificate serial:       0FD8
Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/frWI7Eeslz12PC1F7Skc0fz90Fc.roa
Signing time:             Fri 22 Aug 2025 08:56:16 +0000
ROA not before:           Fri 22 Aug 2025 08:56:16 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     63897
IP address blocks:        103.135.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4056 (0xfd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E
        Validity
            Not Before: Aug 22 08:56:16 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7EB588EC47AC973D763C2D45ED291CD1FCFDD057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:61:34:15:fd:90:bf:6b:0b:f4:b7:a9:e5:
                    14:d2:d4:97:d9:b9:e5:63:10:b4:c5:72:56:fb:d8:
                    0f:87:f7:22:70:20:3d:d6:d9:3e:4c:cf:e7:68:2e:
                    91:25:f7:99:f6:5c:b9:10:a1:4a:58:b2:5a:9a:54:
                    a8:d1:14:07:09:b3:1d:62:79:f7:df:35:9f:21:28:
                    84:07:ab:13:b2:bc:14:a0:b2:42:b4:bc:3b:18:49:
                    16:b8:55:13:df:13:6a:5e:bb:3a:3a:f9:1a:88:62:
                    19:7d:fb:c8:03:62:d8:ea:a8:54:ae:f4:46:03:16:
                    73:be:dd:eb:65:ac:bc:98:cb:00:d6:d9:d2:9e:35:
                    5a:d3:22:67:c5:03:18:32:5f:24:bb:7f:11:98:bd:
                    aa:6c:99:ec:53:6d:11:44:50:29:34:fc:94:01:12:
                    f6:91:5f:4d:6f:84:b3:ac:89:db:b1:dd:bd:9c:fd:
                    03:ed:a6:c3:f5:5d:07:de:0d:12:f4:47:11:8c:54:
                    ba:2b:97:8d:af:da:84:2a:11:7b:04:82:72:ef:79:
                    a2:4e:32:bc:37:82:ff:d2:49:72:35:db:06:22:e5:
                    09:21:07:82:08:b9:d6:8c:52:b1:1f:92:6b:26:98:
                    9c:b9:37:c4:43:4e:e8:69:42:3a:42:92:f7:f2:05:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B5:88:EC:47:AC:97:3D:76:3C:2D:45:ED:29:1C:D1:FC:FD:D0:57
            X509v3 Authority Key Identifier:
                keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/frWI7Eeslz12PC1F7Skc0fz90Fc.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:57:2e:8e:3b:f0:ba:21:c6:40:fe:2a:c5:09:9b:14:9e:c6:
         12:c5:54:3b:a8:9c:46:d2:5b:5d:28:f2:22:f4:27:6b:a6:45:
         14:f8:18:c2:05:82:08:30:b8:55:db:45:c1:ec:b9:a1:6a:2e:
         0c:ae:be:68:07:04:1e:bd:c2:f7:78:81:a7:c2:47:bc:9e:23:
         af:e3:0e:75:ac:54:f7:fa:7d:94:0c:32:17:ee:08:d7:92:06:
         7c:37:58:eb:c7:a8:dc:a5:16:f2:f8:30:7c:e1:d2:2b:1d:c1:
         cf:84:13:21:bd:fa:26:3a:72:12:3a:bf:c3:52:f7:83:b1:2d:
         66:0b:c9:1d:d2:42:5a:56:7a:73:68:d7:8b:88:7b:ef:4e:b0:
         01:8f:9f:f0:a5:51:e0:69:a9:05:69:8b:83:7a:b4:3a:7a:da:
         e1:f2:ad:eb:d0:0d:7a:e3:4c:06:4b:b7:3f:f5:0d:e7:df:82:
         12:6c:b7:b8:37:d9:62:93:42:e1:50:db:b8:95:b7:11:3e:ab:
         25:23:12:e3:43:05:5c:00:7a:6d:31:b3:bb:7d:72:2a:43:32:
         a7:bc:7b:df:cb:fa:ef:d2:a7:70:92:ac:83:f6:2d:34:ac:24:
         d9:fa:dc:b8:8c:2b:79:f2:67:94:fc:c3:28:b9:f2:ca:ee:59:
         00:7b:64:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:58:47 2025 by rpki-client