Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pN32a3UZXOwi0is6-IeE-oX6Kqw.roa
File:                     pN32a3UZXOwi0is6-IeE-oX6Kqw.roa (raw, json)
Hash identifier:          3VjjfKzKlyOHM1D1cmS2TSTMwUY6CSYI1c8fqsKEHzs=
Subject key identifier:   A4:DD:F6:6B:75:19:5C:EC:22:D2:2B:3A:F8:87:84:FA:85:FA:2A:AC
Certificate issuer:       /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial:       14C4
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pN32a3UZXOwi0is6-IeE-oX6Kqw.roa
Signing time:             Mon 10 Feb 2025 14:35:16 +0000
ROA not before:           Mon 10 Feb 2025 14:35:16 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     17714
IP address blocks:        175.111.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5316 (0x14c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
        Validity
            Not Before: Feb 10 14:35:16 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A4DDF66B75195CEC22D22B3AF88784FA85FA2AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:e9:66:74:52:d2:c9:6b:de:8d:93:73:82:
                    c0:18:61:9a:82:d5:ff:1d:6b:f3:5d:f3:05:65:ff:
                    d1:bd:4d:84:47:87:38:5a:ed:b8:3d:22:05:cc:ca:
                    f0:4e:60:0f:c5:ff:f3:0f:e5:51:8c:97:68:b9:b9:
                    3c:fa:8c:5f:98:4e:0a:1e:39:5d:4f:d7:16:00:2d:
                    b3:74:b6:58:bd:3d:e8:ac:63:87:a1:da:aa:08:f8:
                    53:e5:f4:31:e7:c6:2a:9f:59:fa:2f:c7:de:8d:73:
                    8f:59:55:32:ca:f7:d2:e8:96:f3:bc:11:65:f6:97:
                    ed:72:c2:4d:0d:38:06:1a:0b:92:00:87:59:4d:c6:
                    59:b5:e5:ea:db:46:cc:6b:66:8d:c3:64:bb:94:08:
                    ab:7a:db:0f:da:5e:4a:86:a1:01:82:7c:8d:1c:fa:
                    44:bd:ad:b8:1f:23:8f:9c:46:a3:72:dc:36:33:99:
                    7c:e9:90:1e:ba:b0:f6:24:2c:11:14:09:78:36:c4:
                    0e:62:32:cf:0c:d3:03:bd:3d:23:cb:15:e6:fe:21:
                    fb:3d:39:9a:0f:b2:40:31:b0:c3:06:b8:8c:9d:11:
                    01:3b:c7:89:bf:13:5e:89:23:68:44:b4:cc:b1:c4:
                    6f:53:74:da:53:6c:29:f4:34:52:51:bf:a6:c2:64:
                    3d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DD:F6:6B:75:19:5C:EC:22:D2:2B:3A:F8:87:84:FA:85:FA:2A:AC
            X509v3 Authority Key Identifier:
                keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pN32a3UZXOwi0is6-IeE-oX6Kqw.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:1b:4f:15:a0:9b:70:d5:a7:ef:d8:e0:0e:79:30:04:17:7b:
         be:8f:19:0a:75:ec:aa:df:45:5f:55:94:f3:4c:47:4e:d2:ae:
         7a:a5:4b:53:62:bb:0b:db:5c:58:10:a0:14:91:33:ee:89:f7:
         76:3b:24:ca:2b:0b:0b:f3:72:fe:14:9a:ee:ee:82:92:8d:06:
         e9:4a:43:a9:67:c2:4c:23:d9:3d:3a:77:12:8e:93:2e:92:56:
         24:26:41:3a:06:d1:9a:6e:d0:e6:fa:9c:6e:2c:c4:d0:7b:e2:
         e4:a2:fe:db:a4:86:4a:42:0d:96:d9:84:86:0b:da:85:9f:40:
         00:af:47:1b:19:63:2f:9e:a1:7e:79:16:62:00:76:3c:a1:7d:
         e6:48:bd:b5:24:31:b0:da:6d:3c:94:46:4e:62:be:db:4a:5b:
         ee:4c:c0:de:6e:d1:7e:22:fe:3a:29:93:11:63:d3:7b:c2:ee:
         79:89:09:1e:1a:4b:e4:5e:7f:a7:c2:4c:6c:98:71:08:3e:43:
         f9:55:0a:98:0d:66:e5:db:87:07:ce:90:bd:b8:df:7c:4a:88:
         5d:8e:a0:99:0b:18:5e:ee:a6:0f:55:26:53:94:79:ac:24:03:
         f1:ea:76:5d:68:21:71:c8:67:cc:b1:30:cd:4c:c1:b3:2b:68:
         f4:c7:98:44
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICFMQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yNTAyMTAx
NDM1MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0RERGNjZCNzUxOTVD
RUMyMkQyMkIzQUY4ODc4NEZBODVGQTJBQUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5UOlmdFLSyWvejZNzgsAYYZqC1f8da/Nd8wVl/9G9TYRHhzha
7bg9IgXMyvBOYA/F//MP5VGMl2i5uTz6jF+YTgoeOV1P1xYALbN0tli9PeisY4eh
2qoI+FPl9DHnxiqfWfovx96Nc49ZVTLK99LolvO8EWX2l+1ywk0NOAYaC5IAh1lN
xlm15erbRsxrZo3DZLuUCKt62w/aXkqGoQGCfI0c+kS9rbgfI4+cRqNy3DYzmXzp
kB66sPYkLBEUCXg2xA5iMs8M0wO9PSPLFeb+Ifs9OZoPskAxsMMGuIydEQE7x4m/
E16JI2hEtMyxxG9TdNpTbCn0NFJRv6bCZD19AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpN32a3UZXOwi0is6+IeE+oX6KqwwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wTjMyYTNVWlhPd2kwaXM2LUll
RS1vWDZLcXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr2/8
MA0GCSqGSIb3DQEBCwUAA4IBAQAhG08VoJtw1afv2OAOeTAEF3u+jxkKdeyq30Vf
VZTzTEdO0q56pUtTYrsL21xYEKAUkTPuifd2OyTKKwsL83L+FJru7oKSjQbpSkOp
Z8JMI9k9OncSjpMuklYkJkE6BtGabtDm+pxuLMTQe+Lkov7bpIZKQg2W2YSGC9qF
n0AAr0cbGWMvnqF+eRZiAHY8oX3mSL21JDGw2m08lEZOYr7bSlvuTMDebtF+Iv46
KZMRY9N7wu55iQkeGkvkXn+nwkxsmHEIPkP5VQqYDWbl24cHzpC9uN98SohdjqCZ
Cxhe7qYPVSZTlHmsJAPx6nZdaCFxyGfMsTDNTMGzK2j0x5hE
-----END CERTIFICATE-----
Generated at Wed Feb 12 03:38:01 2025 by rpki-client on console.sobornost.net