Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/vmvchhOYTQ4Ntm8GDGrs9RsxwhI.roa
File:                     vmvchhOYTQ4Ntm8GDGrs9RsxwhI.roa (raw, json)
Hash identifier:          S8+LlUHU/YLQe93EqGpaq2T+6+hbJz5re33wxlFK3Qs=
Subject key identifier:   BE:6B:DC:86:13:98:4D:0E:0D:B6:6F:06:0C:6A:EC:F5:1B:31:C2:12
Certificate issuer:       /CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1
Certificate serial:       0D71
Authority key identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/vmvchhOYTQ4Ntm8GDGrs9RsxwhI.roa
Signing time:             Fri 22 Aug 2025 08:58:35 +0000
ROA not before:           Fri 22 Aug 2025 08:58:35 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     18045
IP address blocks:        211.76.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3441 (0xd71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1
        Validity
            Not Before: Aug 22 08:58:35 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BE6BDC8613984D0E0DB66F060C6AECF51B31C212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:3e:3a:ed:38:a3:56:e5:33:44:8c:90:2a:
                    91:5b:6d:10:4d:88:07:0c:2b:30:59:9b:a3:51:bb:
                    2e:a2:fe:43:3b:c4:c5:aa:b1:95:1a:15:f1:ee:9c:
                    b6:33:ec:d5:46:8b:5b:6c:a6:eb:a1:cc:9c:c5:c0:
                    b1:c9:1e:37:57:d0:a8:18:0b:ff:41:1b:fb:8d:e1:
                    b0:b7:ac:9a:f2:66:8c:50:64:27:24:5d:43:29:da:
                    1a:d7:6a:2e:a0:8d:33:76:aa:8a:ef:13:40:29:7c:
                    1e:37:37:d8:d2:ed:1b:53:22:1c:be:6a:db:1c:52:
                    3c:aa:b3:fe:e9:cd:8d:e5:a2:ef:b5:4d:60:c5:f7:
                    9e:60:60:4e:cf:a1:85:f9:23:31:b7:bc:65:39:b0:
                    78:e4:1e:eb:ea:36:97:14:db:8b:8e:a9:a3:c6:e2:
                    d0:1e:56:87:9b:ce:5c:a3:26:83:c3:ab:8e:71:0f:
                    b5:9a:d5:02:4b:a8:53:92:7b:68:a2:ed:db:34:f0:
                    3e:35:49:99:27:9d:3c:fa:34:8c:bd:b2:5b:5d:64:
                    60:d2:bd:fe:5f:ac:35:23:bc:8f:26:be:f1:fa:4a:
                    97:7d:7a:8d:4d:a1:1b:40:e2:7f:4e:4d:d9:23:5a:
                    a2:71:2e:00:06:01:12:ab:d3:16:3e:04:24:0b:e3:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6B:DC:86:13:98:4D:0E:0D:B6:6F:06:0C:6A:EC:F5:1B:31:C2:12
            X509v3 Authority Key Identifier:
                keyid:FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/vmvchhOYTQ4Ntm8GDGrs9RsxwhI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:99:ce:d4:89:41:79:27:3f:5b:dd:e9:b9:a5:61:ad:dd:d5:
         8b:85:fd:e3:82:9e:7e:06:34:45:4a:d5:4d:f3:5f:59:19:60:
         b0:bf:5e:a8:9c:36:33:6e:ac:95:9a:2f:71:a7:f9:aa:a1:04:
         e5:a9:ff:f5:cb:e1:10:a1:a4:cc:e9:55:f5:ba:23:8d:b4:b1:
         89:59:b4:8b:43:1c:18:7a:57:72:a3:d0:84:58:5b:18:43:ec:
         1d:91:66:91:0d:a0:fc:d4:03:65:1c:04:f0:9f:de:24:22:08:
         91:89:b2:b7:64:69:23:16:8d:c7:53:74:77:c1:62:8f:04:1f:
         e5:0e:cb:1b:13:1c:ca:67:68:3b:23:a3:c1:58:d0:f1:b2:34:
         7d:2a:f6:c0:e1:bc:88:9a:cf:32:15:85:ab:96:73:ac:b2:6b:
         67:23:bd:88:dd:14:a4:de:d9:5c:fc:8b:29:94:7e:e2:cd:26:
         1c:45:78:21:69:2b:39:f8:51:41:fd:27:86:bc:d6:f0:79:df:
         20:89:87:bf:20:f7:22:9b:b2:33:30:90:5c:53:23:3a:56:78:
         84:49:c8:95:65:dd:00:3f:2d:31:4c:58:0b:d8:60:98:4d:00:
         7c:3c:ad:f5:10:82:29:67:6a:d4:8d:e0:9c:8d:09:79:1f:93:
         d9:cc:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 13:24:47 2025 by rpki-client