Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Jw_9m67Nq1g2LFhgV5A0VdhCWRU.roa
File:                     Jw_9m67Nq1g2LFhgV5A0VdhCWRU.roa (raw, json)
Hash identifier:          De9vabP6+XpoThxZG7Gem9UVgYFrUZTs1zwWKrVElKo=
Subject key identifier:   27:0F:FD:9B:AE:CD:AB:58:36:2C:58:60:57:90:34:55:D8:42:59:15
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14BC
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Jw_9m67Nq1g2LFhgV5A0VdhCWRU.roa
Signing time:             Mon 10 Feb 2025 14:35:14 +0000
ROA not before:           Mon 10 Feb 2025 14:35:14 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     3462
IP address blocks:        203.69.47.224/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5308 (0x14bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=270FFD9BAECDAB58362C586057903455D8425915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:14:8b:f4:81:2f:5e:a6:87:14:ca:70:1f:
                    33:c1:b8:5f:3d:cd:58:32:f2:3d:e5:80:33:91:b8:
                    05:3f:bd:4d:b7:af:12:1b:0d:f0:0e:69:18:ce:4e:
                    f1:0b:fa:0c:4e:95:3a:db:65:cf:71:5d:c7:db:9a:
                    89:03:af:7d:f1:99:e3:32:3e:31:9c:58:5c:b9:8b:
                    b7:e6:4a:95:28:26:9b:99:d0:e9:96:10:59:ce:2d:
                    b6:aa:3d:68:75:08:18:77:f8:b3:37:18:51:00:9b:
                    e5:e2:ce:89:4c:fd:6f:8a:7c:33:7a:35:3e:5a:73:
                    23:d6:3e:41:b2:4a:c9:93:d3:a8:93:7e:30:4a:c4:
                    b5:3c:26:c4:e3:c5:66:00:15:30:d3:77:f9:ff:3f:
                    d1:19:45:4c:fb:5a:7f:91:fe:ec:7d:91:36:7e:02:
                    e8:b4:3f:85:90:42:3c:e2:eb:5c:06:1b:b4:b5:4d:
                    9b:11:e3:a4:f6:47:db:7e:11:ad:db:94:fe:a2:45:
                    24:58:cc:5e:c4:f2:73:e1:74:ef:dc:0e:23:e1:26:
                    dd:8f:a8:df:19:9d:58:ce:cd:cc:7d:3b:1d:c8:14:
                    00:26:46:8c:a2:79:60:67:5b:25:5f:05:37:3b:de:
                    1f:3c:cf:7d:f1:f2:4b:9d:1a:f7:b9:ba:10:86:dd:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:FD:9B:AE:CD:AB:58:36:2C:58:60:57:90:34:55:D8:42:59:15
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Jw_9m67Nq1g2LFhgV5A0VdhCWRU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.69.47.224/27

    Signature Algorithm: sha256WithRSAEncryption
         44:03:0d:27:d0:7b:db:e8:b9:dd:c7:8a:5a:1e:4a:62:f5:d8:
         25:43:47:02:3a:8d:bc:19:28:4f:9e:4e:95:99:d3:dc:6a:91:
         fc:44:08:2a:49:04:3e:5d:6f:4d:30:33:90:d9:cc:fc:0b:bb:
         1c:e2:05:a9:6f:5f:a1:d6:59:f3:ec:33:66:eb:34:ff:81:9c:
         9e:e5:56:37:f2:e2:a5:5d:17:aa:26:f9:3a:d2:b4:65:dc:14:
         7a:b6:22:45:05:27:d7:7a:d6:23:83:26:d0:2f:f9:cc:2a:5c:
         5c:6e:19:02:ce:38:90:46:44:b2:c9:39:4f:90:e5:de:40:04:
         34:62:a0:3d:cf:94:5e:26:0d:87:01:62:a5:ac:fa:3f:0b:c0:
         56:df:84:78:ed:44:9e:25:50:3a:8e:56:0f:9c:5d:a3:09:9f:
         79:cd:e5:39:55:dd:d7:96:a9:a5:b7:b3:b0:5d:04:de:5d:9a:
         4d:86:59:ed:93:bb:a0:30:d7:06:af:e9:a4:53:f9:8e:18:7a:
         ba:ca:3a:68:7c:2f:b8:76:0b:5b:6b:db:bf:b1:2e:ce:2b:97:
         88:84:75:a5:09:7e:95:91:5b:b7:a8:ef:bb:c7:af:b8:d4:69:
         da:2a:2e:ec:92:7f:79:73:a4:18:84:28:1f:2c:ed:25:c5:14:
         9d:f0:0a:3d
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICFLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3MEZGRDlCQUVDREFC
NTgzNjJDNTg2MDU3OTAzNDU1RDg0MjU5MTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI0xSL9IEvXqaHFMpwHzPBuF89zVgy8j3lgDORuAU/vU23rxIb
DfAOaRjOTvEL+gxOlTrbZc9xXcfbmokDr33xmeMyPjGcWFy5i7fmSpUoJpuZ0OmW
EFnOLbaqPWh1CBh3+LM3GFEAm+XizolM/W+KfDN6NT5acyPWPkGySsmT06iTfjBK
xLU8JsTjxWYAFTDTd/n/P9EZRUz7Wn+R/ux9kTZ+Aui0P4WQQjzi61wGG7S1TZsR
46T2R9t+Ea3blP6iRSRYzF7E8nPhdO/cDiPhJt2PqN8ZnVjOzcx9Ox3IFAAmRoyi
eWBnWyVfBTc73h88z33x8kudGve5uhCG3dKpAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUJw/9m67Nq1g2LFhgV5A0VdhCWRUwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Kd185bTY3TnExZzJMRmhnVjVB
MFZkaENXUlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFy0Uv
4DANBgkqhkiG9w0BAQsFAAOCAQEARAMNJ9B72+i53ceKWh5KYvXYJUNHAjqNvBko
T55OlZnT3GqR/EQIKkkEPl1vTTAzkNnM/Au7HOIFqW9fodZZ8+wzZus0/4GcnuVW
N/LipV0Xqib5OtK0ZdwUerYiRQUn13rWI4Mm0C/5zCpcXG4ZAs44kEZEssk5T5Dl
3kAENGKgPc+UXiYNhwFipaz6PwvAVt+EeO1EniVQOo5WD5xdowmfec3lOVXd15ap
pbezsF0E3l2aTYZZ7ZO7oDDXBq/ppFP5jhh6uso6aHwvuHYLW2vbv7EuziuXiIR1
pQl+lZFbt6jvu8evuNRp2iou7JJ/eXOkGIQoHyztJcUUnfAKPQ==
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net