Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/brVO2ptpGhgLUpK0tySBhYdXMBU.roa
File:                     brVO2ptpGhgLUpK0tySBhYdXMBU.roa (raw, json)
Hash identifier:          DtPYWkYr2ZsTzPLevWuz1JQ5L6S8ZRAKUJ7DB+NXVDU=
Subject key identifier:   6E:B5:4E:DA:9B:69:1A:18:0B:52:92:B4:B7:24:81:85:87:57:30:15
Certificate issuer:       /CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
Certificate serial:       35
Authority key identifier: 0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/brVO2ptpGhgLUpK0tySBhYdXMBU.roa
Signing time:             Fri 13 Sep 2024 10:34:33 +0000
ROA not before:           Fri 13 Sep 2024 10:34:33 +0000
ROA not after:            Thu 28 Aug 2025 15:30:19 +0000
asID:                     152613
IP address blocks:        160.30.210.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B67C78E35D23632A25532AEFE8B4A9FCABE3B4D
        Validity
            Not Before: Sep 13 10:34:33 2024 GMT
            Not After : Aug 28 15:30:19 2025 GMT
        Subject: CN=6EB54EDA9B691A180B5292B4B724818587573015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:b6:d6:4f:81:95:6f:c0:40:e3:65:b3:73:
                    ff:1a:81:34:5a:82:e3:fc:92:60:0f:35:10:81:22:
                    37:e2:a2:7a:17:28:b8:9c:ae:1a:83:cf:f6:7f:dd:
                    59:5f:5e:f6:c4:cb:d5:a9:6e:3e:c4:8d:11:43:a3:
                    c7:af:94:9e:1e:ba:b1:f4:3e:d9:b8:9f:89:32:11:
                    22:5e:d1:9e:c3:2b:1c:34:c4:d9:23:8a:7d:a4:7a:
                    31:a4:6c:b2:1e:5f:a2:e8:f6:dd:b7:c1:18:ed:11:
                    b9:d4:5b:06:5d:ee:23:35:da:af:1d:de:51:e8:e6:
                    59:97:c9:18:e2:fa:eb:74:a5:ed:d2:0e:f0:9e:b8:
                    b5:3a:b6:9d:fd:fa:98:f1:1b:1a:0b:8f:4b:7c:bb:
                    6f:71:26:cf:5b:7f:b4:df:12:f8:1e:8c:5b:14:38:
                    5f:db:85:40:36:f8:46:a2:1b:65:ea:61:4e:a2:4d:
                    60:62:4a:77:04:22:e1:4f:54:d3:a7:e2:60:00:9d:
                    a5:2d:74:fb:27:35:8f:86:42:69:da:11:a6:b9:c8:
                    7e:0c:ca:21:7a:cf:32:01:39:26:0b:d1:43:37:7b:
                    fb:53:a6:dd:b1:e0:64:ff:19:5a:39:16:cd:a3:c8:
                    04:d8:97:e2:b4:17:4c:27:39:15:85:cf:e6:dd:6b:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:4E:DA:9B:69:1A:18:0B:52:92:B4:B7:24:81:85:87:57:30:15
            X509v3 Authority Key Identifier:
                keyid:0B:67:C7:8E:35:D2:36:32:A2:55:32:AE:FE:8B:4A:9F:CA:BE:3B:4D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/C2fHjjXSNjKiVTKu_otKn8q-O00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/C2fHjjXSNjKiVTKu_otKn8q-O00.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/brVO2ptpGhgLUpK0tySBhYdXMBU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:c3:ec:10:f3:48:bf:e7:41:cb:a6:bf:f3:2e:77:0c:2c:
         af:6f:71:55:89:c6:e2:37:a2:d7:cc:88:fd:60:e2:71:2c:67:
         db:53:c2:09:67:55:37:62:b1:1e:b7:17:55:35:5a:5d:20:6a:
         e9:40:08:0e:d2:8d:a6:a1:f5:ae:68:5f:30:2d:05:81:3f:3a:
         4e:37:a2:6d:5b:d6:8e:19:61:70:37:e2:29:07:6f:d4:04:10:
         ff:3e:39:c8:b3:89:98:05:f6:1c:5d:54:91:4e:0d:49:fb:87:
         0a:56:99:61:8b:09:1e:6c:8b:a8:a0:b7:77:52:4a:65:33:a7:
         a3:d9:93:54:61:ac:ed:44:e2:68:62:77:64:66:7b:01:30:38:
         00:8e:de:79:c7:5a:02:1d:29:8c:41:7d:3a:1d:b1:70:b2:51:
         e1:60:af:5b:b9:65:93:ee:e8:04:4c:5e:34:3c:0d:8b:7a:a3:
         05:bb:77:e8:24:12:40:41:c3:15:0a:71:a7:42:58:5f:80:fa:
         a4:03:7d:81:63:6f:96:85:19:88:b3:15:59:49:c0:12:f4:a4:
         43:a2:e9:02:a5:0f:9e:c0:95:c3:fa:f8:ee:8f:bd:6b:2e:d0:
         c3:12:64:80:a7:03:07:38:72:61:3c:42:1e:31:6c:03:d0:98:
         14:0b:48:c5
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQjY3
Qzc4RTM1RDIzNjMyQTI1NTMyQUVGRThCNEE5RkNBQkUzQjREMB4XDTI0MDkxMzEw
MzQzM1oXDTI1MDgyODE1MzAxOVowMzExMC8GA1UEAxMoNkVCNTRFREE5QjY5MUEx
ODBCNTI5MkI0QjcyNDgxODU4NzU3MzAxNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANsXttZPgZVvwEDjZbNz/xqBNFqC4/ySYA81EIEiN+KiehcouJyu
GoPP9n/dWV9e9sTL1aluPsSNEUOjx6+Unh66sfQ+2bifiTIRIl7RnsMrHDTE2SOK
faR6MaRssh5fouj23bfBGO0RudRbBl3uIzXarx3eUejmWZfJGOL663Sl7dIO8J64
tTq2nf36mPEbGguPS3y7b3Emz1t/tN8S+B6MWxQ4X9uFQDb4RqIbZephTqJNYGJK
dwQi4U9U06fiYACdpS10+yc1j4ZCadoRprnIfgzKIXrPMgE5JgvRQzd7+1Om3bHg
ZP8ZWjkWzaPIBNiX4rQXTCc5FYXP5t1rcX0CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRutU7am2kaGAtSkrS3JIGFh1cwFTAfBgNVHSMEGDAWgBQLZ8eONdI2MqJVMq7+
i0qfyr47TTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGA1UdHwRZMFcwVaBT
oFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DT0RFVVBU
RUNIL0MyZkhqalhTTmpLaVZUS3Vfb3RLbjhxLU8wMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvQzJmSGpqWFNOaktpVlRLdV9vdEtuOHEtTzAwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgaAGCCsGAQUFBwELBIGTMIGQMFsGCCsGAQUFBzALhk9yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQVEVDSC9iclZPMnB0cEdo
Z0xVcEswdHlTQmhZZFhNQlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAu
dHduaWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBoB7SMA0GCSqGSIb3DQEBCwUAA4IBAQAefMPsEPNIv+dBy6a/8y53DCyv
b3FVicbiN6LXzIj9YOJxLGfbU8IJZ1U3YrEetxdVNVpdIGrpQAgO0o2mofWuaF8w
LQWBPzpON6JtW9aOGWFwN+IpB2/UBBD/PjnIs4mYBfYcXVSRTg1J+4cKVplhiwke
bIuooLd3UkplM6ej2ZNUYaztROJoYndkZnsBMDgAjt55x1oCHSmMQX06HbFwslHh
YK9buWWT7ugETF40PA2LeqMFu3foJBJAQcMVCnGnQlhfgPqkA32BY2+WhRmIsxVZ
ScAS9KRDoukCpQ+ewJXD+vjuj71rLtDDEmSApwMHOHJhPEIeMWwD0JgUC0jF
-----END CERTIFICATE-----
Generated at Sun May 11 19:37:35 2025 by rpki-client