Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/CyJaZRO2nHZxni-P-VGDRRZJiyE.roa
File:                     CyJaZRO2nHZxni-P-VGDRRZJiyE.roa (raw, json)
Hash identifier:          a7kEngoG9I+X55thSmXqBc3W50IX/yVUfDqnYGJmQD8=
Subject key identifier:   0B:22:5A:65:13:B6:9C:76:71:9E:2F:8F:F9:51:83:45:16:49:8B:21
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14AE
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CyJaZRO2nHZxni-P-VGDRRZJiyE.roa
Signing time:             Mon 10 Feb 2025 14:35:10 +0000
ROA not before:           Mon 10 Feb 2025 14:35:10 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     9680
IP address blocks:        2001:b000:92::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5294 (0x14ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:10 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=0B225A6513B69C76719E2F8FF951834516498B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:2c:a6:36:0f:60:07:f4:94:eb:59:72:39:
                    41:02:36:70:0a:7f:1e:a8:e0:88:1f:6b:05:7d:bc:
                    86:17:ec:31:99:9f:9f:4e:11:44:4a:c0:25:f8:b9:
                    a4:de:c8:0f:a7:81:6d:52:92:4f:19:12:94:a9:49:
                    af:05:c8:58:9d:7f:90:b0:ac:6c:ff:2c:9c:50:92:
                    19:69:d7:05:56:43:3f:24:b6:85:4b:94:ac:3e:94:
                    5a:7a:47:be:fa:d7:99:af:3f:3f:1b:c9:c8:13:9f:
                    d3:2c:dd:2a:a4:62:4f:f8:df:73:61:34:17:af:76:
                    8b:64:c1:c9:66:c6:85:a9:fb:d3:c9:a9:bf:0d:e8:
                    28:87:2d:1c:e5:09:b3:9a:66:09:87:f6:70:82:fd:
                    ba:f1:0e:e2:ba:4d:ef:6a:5c:ee:74:68:d1:3e:fe:
                    38:2c:a3:34:81:f0:21:2e:3e:c3:33:ea:29:1d:5a:
                    27:80:11:d0:ab:0d:37:e3:55:b7:ca:5e:43:14:f8:
                    04:9b:f6:b5:bc:37:07:b7:3f:16:66:98:da:38:b8:
                    43:ea:7e:27:bd:74:6e:65:88:15:70:77:2d:65:65:
                    67:cc:41:b3:b7:95:4f:11:41:8d:1f:9c:ff:b9:a3:
                    06:9d:50:b9:84:94:6b:95:04:ad:1b:bd:23:fd:1b:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:22:5A:65:13:B6:9C:76:71:9E:2F:8F:F9:51:83:45:16:49:8B:21
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/CyJaZRO2nHZxni-P-VGDRRZJiyE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:b000:92::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:04:6d:06:a6:06:fc:35:b6:68:bd:cc:30:cb:fd:09:2e:c7:
         79:5e:1e:19:f8:87:0a:81:f3:db:6b:1b:71:43:db:88:b1:18:
         07:f0:46:26:ca:12:0f:85:e3:7e:c9:37:89:8d:61:26:80:28:
         4f:3a:03:19:0e:6a:f2:84:e3:94:35:43:82:4d:4a:53:f9:0b:
         34:4a:2a:c2:80:0f:67:6f:55:56:7a:fe:bd:1f:55:e3:3b:7c:
         5d:8d:a8:c2:df:42:e8:f2:6b:88:66:3f:51:2d:06:51:de:d5:
         58:bb:06:cc:7e:9e:e3:7b:79:1b:24:87:ce:8e:fa:73:4f:e7:
         94:ea:fe:0f:1c:b3:0c:2a:ed:28:c4:f1:f8:8f:79:1f:4b:be:
         74:24:56:2a:26:e2:73:bd:ed:a6:43:89:01:11:53:4c:d3:ab:
         3a:49:3b:eb:f6:1f:2f:52:8a:f3:12:d2:27:a0:99:17:bb:66:
         2d:04:0a:d2:0c:5d:43:13:9f:2b:44:2b:64:ed:df:1b:3c:86:
         46:46:04:76:d8:8e:40:c5:f4:46:94:30:b3:b4:72:3e:65:fb:
         0d:36:71:46:e1:1c:3d:89:f7:df:69:1a:6a:b9:2d:ea:f2:29:
         10:95:23:f2:6e:b5:bd:33:a0:1a:bb:14:df:36:2d:07:22:f2:
         78:cd:58:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net