Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa
File:                     0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa (raw, json)
Hash identifier:          kDVcdLKZ33TiF6qe2oThZ6b+hy94ppWeYcriObmSfJU=
Subject key identifier:   D1:1C:81:6F:66:56:97:E2:68:46:FC:21:9B:E6:92:19:AE:0F:84:FD
Certificate issuer:       /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial:       0E62
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa
Signing time:             Fri 22 Aug 2025 08:56:28 +0000
ROA not before:           Fri 22 Aug 2025 08:56:28 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     4780
IP address blocks:        2402:2580::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3682 (0xe62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
        Validity
            Not Before: Aug 22 08:56:28 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D11C816F665697E26846FC219BE69219AE0F84FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:47:6e:19:8e:e0:4a:dd:82:5c:14:96:73:
                    b2:fa:5a:3e:c5:96:72:35:e0:a1:9a:4a:84:0f:93:
                    aa:b2:78:d5:25:61:0e:b4:f4:c7:fc:26:80:ca:79:
                    7b:1d:25:91:86:4b:7f:80:a8:86:16:30:3a:4d:ab:
                    59:6f:a6:22:e3:35:c4:5f:b2:04:c3:53:4d:82:63:
                    f0:f6:bc:5c:59:5d:7b:9b:b8:6d:28:e2:9e:eb:e0:
                    2f:e7:7d:11:19:1d:0d:6a:f0:c1:23:66:a3:52:82:
                    38:16:3b:ca:c6:c5:28:1e:11:40:a0:de:04:0d:d8:
                    fd:73:5d:cd:19:b3:d5:e9:1e:c9:6e:22:f1:31:7b:
                    e2:c1:90:5b:e0:94:0a:60:32:bf:18:12:c8:d6:a2:
                    d1:34:d6:10:54:d9:17:37:93:40:8e:02:7c:01:8b:
                    e4:f0:ee:4d:26:9c:52:fe:af:5a:e2:09:7a:5e:b9:
                    1a:39:d4:c1:27:98:0d:96:1b:fc:15:1d:e4:ae:2c:
                    5a:37:38:e6:63:34:5c:28:4a:fd:7e:a5:90:71:50:
                    dd:37:f3:82:1f:3f:63:fb:31:d2:89:32:52:f7:5c:
                    75:bc:fb:3b:b8:69:3d:35:d7:c6:0a:2b:fa:45:5f:
                    0b:77:f1:65:f6:fe:ae:8d:c4:a4:73:43:c0:83:88:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1C:81:6F:66:56:97:E2:68:46:FC:21:9B:E6:92:19:AE:0F:84:FD
            X509v3 Authority Key Identifier:
                keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/0RyBb2ZWl-JoRvwhm-aSGa4PhP0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:34:c0:55:9b:43:89:2d:1d:00:95:4f:ba:25:44:1a:b4:a0:
         64:f4:99:70:b8:05:64:bd:d6:43:40:d9:99:fa:b1:cf:56:45:
         8b:a7:51:9a:41:10:d1:45:18:52:7c:34:90:36:a3:da:12:c2:
         72:7a:76:b6:39:1d:15:b5:3d:83:08:25:0d:2b:37:d7:5e:52:
         55:08:05:1f:cb:d8:d6:a1:aa:eb:ad:b8:84:ee:b6:2d:fa:58:
         4a:f9:64:96:77:b5:3f:fb:ca:ba:16:2e:42:1f:f9:33:cb:83:
         2f:f5:3e:5a:9b:29:bd:7d:3b:cd:00:9b:1a:01:aa:95:6f:6d:
         29:03:b3:23:ea:03:e5:aa:0f:77:fc:86:04:a5:96:bd:4a:48:
         c4:25:73:29:88:f4:af:df:a2:3a:4e:f4:7b:d1:ab:6d:62:98:
         92:a6:30:70:a5:3d:8b:44:12:e6:9d:57:d9:ef:05:ef:1a:fa:
         ff:1b:56:af:f9:d9:ba:6c:6c:de:02:b0:37:55:99:42:42:4d:
         4d:8e:45:47:6c:c9:9d:24:fe:1a:54:42:e1:44:51:20:dc:76:
         37:9f:b1:a6:39:d6:4b:74:0d:11:76:6f:0c:3e:e5:ad:f9:bc:
         8f:70:05:12:01:3a:f5:70:f4:f0:7f:0f:1c:1d:8a:62:eb:be:
         3c:fa:fa:d3
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICDmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0JF
NkM2NTEzNTBFOEZBMUZDN0QwQTNFQUJDRjk4RjgxQjMxMTlEMzAeFw0yNTA4MjIw
ODU2MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxMUM4MTZGNjY1Njk3
RTI2ODQ2RkMyMTlCRTY5MjE5QUUwRjg0RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLyEduGY7gSt2CXBSWc7L6Wj7FlnI14KGaSoQPk6qyeNUlYQ60
9Mf8JoDKeXsdJZGGS3+AqIYWMDpNq1lvpiLjNcRfsgTDU02CY/D2vFxZXXubuG0o
4p7r4C/nfREZHQ1q8MEjZqNSgjgWO8rGxSgeEUCg3gQN2P1zXc0Zs9XpHsluIvEx
e+LBkFvglApgMr8YEsjWotE01hBU2Rc3k0COAnwBi+Tw7k0mnFL+r1riCXpeuRo5
1MEnmA2WG/wVHeSuLFo3OOZjNFwoSv1+pZBxUN0384IfP2P7MdKJMlL3XHW8+zu4
aT0118YKK/pFXwt38WX2/q6NxKRzQ8CDiM6DAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQU0RyBb2ZWl+JoRvwhm+aSGa4PhP0wHwYDVR0jBBgwFoAUO+bGUTUOj6H8fQo+
q8+Y+BsxGdMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lHTUEv
Ty1iR1VUVU9qNkg4ZlFvLXE4LVktQnN4R2RNLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9PLWJHVVRVT2o2SDhmUW8tcTgtWS1Cc3hHZE0uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSUdNQS8wUnlCYjJaV2wtSm9SdndobS1h
U0dhNFBoUDAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAIl
gDANBgkqhkiG9w0BAQsFAAOCAQEAJDTAVZtDiS0dAJVPuiVEGrSgZPSZcLgFZL3W
Q0DZmfqxz1ZFi6dRmkEQ0UUYUnw0kDaj2hLCcnp2tjkdFbU9gwglDSs3115SVQgF
H8vY1qGq6624hO62LfpYSvlklne1P/vKuhYuQh/5M8uDL/U+WpspvX07zQCbGgGq
lW9tKQOzI+oD5aoPd/yGBKWWvUpIxCVzKYj0r9+iOk70e9GrbWKYkqYwcKU9i0QS
5p1X2e8F7xr6/xtWr/nZumxs3gKwN1WZQkJNTY5FR2zJnST+GlRC4URRINx2N5+x
pjnWS3QNEXZvDD7lrfm8j3AFEgE69XD08H8PHB2KYuu+PPr60w==
-----END CERTIFICATE-----