Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/8Uv_ySPIEwRLO0t3CYkPUVLmsj4.roa
File:                     8Uv_ySPIEwRLO0t3CYkPUVLmsj4.roa (raw, json)
Hash identifier:          6r4Y/yamnrU//YweFMmUm7Xlfy7iwtjCcjniCRFQXgc=
Subject key identifier:   F1:4B:FF:C9:23:C8:13:04:4B:3B:4B:77:09:89:0F:51:52:E6:B2:3E
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14B4
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8Uv_ySPIEwRLO0t3CYkPUVLmsj4.roa
Signing time:             Mon 10 Feb 2025 14:35:11 +0000
ROA not before:           Mon 10 Feb 2025 14:35:11 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     800
IP address blocks:        175.111.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5300 (0x14b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=F14BFFC923C813044B3B4B7709890F5152E6B23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0f:1e:2c:a4:b3:0c:77:a7:c6:4e:18:c4:ad:
                    a1:6c:ec:ce:81:06:36:09:03:a3:35:cb:dc:a9:34:
                    d3:3b:d4:66:72:26:4b:19:a6:23:54:2d:40:38:67:
                    89:38:26:80:db:1f:42:13:0f:19:40:0f:ce:dd:50:
                    e8:b9:34:98:83:a8:6c:bb:b8:09:ca:71:a8:5b:79:
                    a4:50:ee:4d:95:7c:d9:e3:3c:c0:a9:a8:ac:f1:91:
                    23:a4:e7:36:25:2e:0a:1f:02:04:9b:0a:46:01:28:
                    27:d1:c7:ba:e5:73:24:1d:45:11:0e:2c:bc:91:ad:
                    b9:5d:49:f3:4b:3d:09:f7:7e:45:f4:6c:3b:12:4d:
                    17:f5:38:1f:e4:e9:eb:32:b4:0d:63:b3:77:f3:55:
                    38:aa:80:89:e6:3b:06:47:60:a0:91:39:df:bf:5d:
                    0b:08:6f:b5:3f:11:c3:76:36:26:db:af:ac:6a:1c:
                    00:fa:35:53:17:19:9b:6a:60:82:58:62:c9:b7:6e:
                    4f:48:1b:88:b7:7b:1e:15:2f:02:77:ac:56:77:00:
                    e4:91:e0:bf:72:40:fb:f1:b9:35:ec:19:50:64:25:
                    24:ab:8a:d5:39:42:98:26:80:e5:ed:55:26:b9:3c:
                    35:27:8b:7a:71:2a:ce:72:81:e5:50:e7:c4:4f:2a:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:FF:C9:23:C8:13:04:4B:3B:4B:77:09:89:0F:51:52:E6:B2:3E
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/8Uv_ySPIEwRLO0t3CYkPUVLmsj4.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:dd:3f:f0:1b:2f:52:54:b2:29:52:b7:bd:59:91:d0:77:2a:
         6d:7b:52:05:ea:cd:1d:ee:cb:e7:56:4a:6a:ff:79:92:1b:72:
         4d:35:3e:ff:2f:8d:a0:1c:36:09:4d:57:93:d3:ed:a3:7e:89:
         8d:5c:5b:8b:ce:09:88:9d:70:f8:fb:cd:39:83:dc:2c:f6:42:
         35:89:b4:f4:35:a8:8f:ac:12:4a:9a:58:f9:c7:ba:55:96:ad:
         e0:22:91:42:a3:7d:98:95:67:4f:93:d9:5e:ca:76:5c:71:01:
         d9:ec:02:c9:0a:8a:7f:f7:bc:79:11:ee:86:79:e5:83:48:c6:
         cb:de:48:4d:16:9b:87:1a:64:37:ec:28:7a:7b:89:4c:7a:66:
         72:c1:7e:79:48:75:28:df:d5:a8:62:ff:0e:93:51:0f:54:1a:
         c5:20:d1:49:8d:74:57:e6:a9:7e:cf:c6:f3:13:90:e1:a9:39:
         6f:d2:41:0b:3d:ae:d9:45:55:eb:f6:b7:46:16:07:b1:29:ea:
         9f:67:26:f6:0a:2b:0b:bd:62:b7:8c:9d:40:77:93:56:c7:40:
         78:04:e6:12:d2:b8:94:55:2a:31:d9:6f:1a:52:88:66:a0:02:
         a5:41:bf:0f:c7:9c:b2:67:7a:b5:32:06:31:eb:b9:6f:71:70:
         f0:61:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:00 2025 by rpki-client on console.sobornost.net