Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/FXfwdlaGSLkfrjncdQNvdR-hEE8.roa
File:                     FXfwdlaGSLkfrjncdQNvdR-hEE8.roa (raw, json)
Hash identifier:          ESMLp6Ol2GuV6EwpI/JvmlI6PKS/Cg7dBEvcA1YspIY=
Subject key identifier:   15:77:F0:76:56:86:48:B9:1F:AE:39:DC:75:03:6F:75:1F:A1:10:4F
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       143F
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FXfwdlaGSLkfrjncdQNvdR-hEE8.roa
Signing time:             Mon 10 Feb 2025 14:34:44 +0000
ROA not before:           Mon 10 Feb 2025 14:34:44 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     20940
IP address blocks:        210.65.144.128/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5183 (0x143f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:34:44 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=1577F076568648B91FAE39DC75036F751FA1104F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:9c:72:b7:01:28:3c:da:0e:1c:94:53:7a:
                    4e:af:05:32:11:14:28:e6:65:8a:d3:90:12:59:7c:
                    48:22:18:e0:f9:80:76:aa:f9:8f:eb:ec:a1:f3:29:
                    bc:86:e2:f9:98:de:35:f6:6e:7e:f0:35:45:d8:27:
                    a4:88:c3:8e:6f:60:a1:ed:5f:9b:97:29:ac:11:13:
                    ff:e8:58:dc:a7:4d:8d:0f:43:b2:04:8c:d0:0d:14:
                    a4:e1:82:17:bf:54:8d:d6:aa:2d:75:08:38:4b:01:
                    c7:d2:4c:81:2c:02:e8:33:de:73:21:fe:3a:78:ae:
                    49:53:82:89:e5:7a:bd:10:41:fe:8d:3f:17:0f:c2:
                    4d:0c:c3:f6:ce:2f:d2:ea:74:3c:68:50:d2:3f:e0:
                    0a:84:14:2f:f5:c9:9d:d8:47:96:7e:53:10:bc:91:
                    8f:fe:03:31:ae:d4:25:8b:25:52:ad:54:62:b6:e2:
                    80:e1:b4:06:99:35:9e:f9:b9:53:7e:71:61:ae:aa:
                    a1:3a:df:e4:24:ff:cf:d1:b0:be:f9:c8:75:50:a2:
                    cd:92:87:ff:44:0e:8f:6c:c9:b4:6e:41:2b:58:72:
                    48:21:22:3d:a9:9f:e1:18:cb:01:ee:e9:c8:b5:ca:
                    ce:2a:96:aa:86:05:1a:dc:ad:cb:7a:db:09:e7:2d:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:F0:76:56:86:48:B9:1F:AE:39:DC:75:03:6F:75:1F:A1:10:4F
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/FXfwdlaGSLkfrjncdQNvdR-hEE8.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.65.144.128/26

    Signature Algorithm: sha256WithRSAEncryption
         09:34:2c:55:b7:43:3c:64:7d:27:9c:cd:a8:7e:0e:8c:7a:ad:
         15:c6:02:2e:b2:dc:e2:3e:f0:c0:c6:cb:ad:f7:2d:c5:22:8b:
         8a:2a:b6:e3:dc:04:2c:1d:93:cc:3d:76:ff:8f:e4:3b:2e:f6:
         01:a9:03:f9:58:7c:0e:86:aa:eb:e6:95:93:18:26:32:ea:72:
         fb:e3:a9:e4:df:c8:fa:00:e0:b0:05:cc:37:16:e6:3d:07:65:
         c2:e5:29:8f:f8:71:1b:07:e6:72:ab:5d:bf:94:df:60:5d:1a:
         ab:51:b5:94:c5:07:bb:8a:6d:64:88:0e:cc:22:a8:ef:f4:c3:
         93:09:50:9a:36:f4:e2:6b:67:81:47:97:ac:f3:98:fe:8c:94:
         33:2e:9b:ee:c8:b1:9a:2f:06:e4:a8:61:24:3b:19:cd:30:ad:
         20:05:72:4e:1d:20:9b:da:1c:bb:ee:27:80:e3:05:f6:78:ab:
         e9:d3:a0:2b:cb:91:4c:78:52:9c:0c:fb:53:95:2c:7c:30:dd:
         83:1f:c8:22:a4:b4:ea:23:9f:bd:49:b7:bb:28:e5:90:c6:e2:
         c9:5d:62:54:6f:a2:34:e9:0f:51:28:93:e1:15:80:73:fa:f3:
         23:6e:01:55:35:61:14:ab:bb:5f:23:15:58:d4:9b:02:73:7f:
         84:ed:b4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net