Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/b7oCAl19Bn_idhZniaDkqCu7eAk.roa
File:                     b7oCAl19Bn_idhZniaDkqCu7eAk.roa (raw, json)
Hash identifier:          yFRBqH+eaalNaQBvTM6aA7izpfJcLUl6BSz+9JxmHYQ=
Subject key identifier:   6F:BA:02:02:5D:7D:06:7F:E2:76:16:67:89:A0:E4:A8:2B:BB:78:09
Certificate issuer:       /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial:       0D1C
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/b7oCAl19Bn_idhZniaDkqCu7eAk.roa
Signing time:             Mon 10 Feb 2025 14:08:21 +0000
ROA not before:           Mon 10 Feb 2025 14:08:21 +0000
ROA not after:            Tue 26 Aug 2025 01:57:03 +0000
asID:                     4782
IP address blocks:        210.241.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3356 (0xd1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
        Validity
            Not Before: Feb 10 14:08:21 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=6FBA02025D7D067FE276166789A0E4A82BBB7809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:eb:95:4b:44:0c:d9:5a:28:fa:e1:7d:b3:
                    1f:1d:6e:c0:49:14:bb:8d:cf:8e:c6:16:39:c8:59:
                    98:0f:1f:29:22:16:f9:2a:ee:ed:fc:d8:e7:d6:2b:
                    00:3b:64:04:79:df:5d:ab:30:06:88:30:4d:a9:cb:
                    16:2f:c8:2b:54:26:7e:0a:3e:e6:68:1c:98:94:6e:
                    61:90:34:da:be:9d:13:5f:87:2a:6c:17:4c:b4:dd:
                    aa:36:5b:f0:ae:9c:0e:a2:52:1d:da:d0:2b:c4:93:
                    a6:7d:90:cf:4d:3a:d2:90:6a:b7:d9:d3:81:93:ae:
                    fa:62:41:ed:7f:06:3a:ed:97:63:2d:8e:37:31:c0:
                    62:0b:1b:82:5e:49:f5:55:ab:28:47:89:f1:48:32:
                    4f:2a:92:a1:2a:eb:4e:20:5e:67:df:81:3e:ec:bd:
                    2a:1d:04:76:ae:20:b5:f6:c2:54:08:d6:16:a5:c8:
                    fc:67:6d:95:8f:83:90:fe:f2:44:e8:33:38:eb:d1:
                    57:cd:5a:51:7c:57:7c:89:3f:c6:0e:e9:8d:1f:e2:
                    2f:91:99:bc:55:99:0c:d4:ca:97:30:c8:83:a2:03:
                    38:bf:af:e0:5b:18:15:2a:76:5f:fa:2d:eb:50:53:
                    1c:cf:5d:81:0c:90:b8:82:98:ea:03:4b:a2:b5:9d:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BA:02:02:5D:7D:06:7F:E2:76:16:67:89:A0:E4:A8:2B:BB:78:09
            X509v3 Authority Key Identifier:
                keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/b7oCAl19Bn_idhZniaDkqCu7eAk.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.241.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         65:b5:08:da:a7:99:99:0b:9a:c7:72:3f:8a:67:42:ae:e4:b2:
         e3:bf:3e:e1:9d:3a:9f:43:e3:42:66:35:a3:7d:b7:d1:03:e3:
         ac:3f:44:de:3c:5e:76:44:1e:d2:7d:47:0f:c7:75:60:22:42:
         86:e4:3d:ce:47:f3:a7:69:4d:cf:ac:28:88:9e:5c:b9:e2:f5:
         9d:59:dd:f1:28:fb:f6:82:e5:d6:38:00:68:49:e1:d5:07:bf:
         0b:82:8d:83:cd:9e:80:11:b6:61:fa:92:43:2a:55:a0:ea:2f:
         3c:ac:f5:d4:f9:3a:91:07:87:8d:ca:1b:1c:43:bc:ab:b1:9b:
         fd:46:49:5b:43:28:3b:49:6b:1c:8f:ed:49:5a:1c:4a:96:6e:
         d6:a2:a8:50:41:b9:33:aa:46:f5:e2:d1:74:5b:18:19:e9:d0:
         03:86:90:57:20:bd:75:a3:8e:d5:98:e6:dd:f0:38:2d:74:92:
         cf:fd:0e:6d:97:c9:52:f3:6d:75:c0:c8:d3:48:b5:be:da:84:
         88:a5:3c:3c:9c:8b:a4:5b:71:f5:af:f2:1b:3a:83:e0:0c:7c:
         97:fe:9e:b0:b5:df:ce:2c:71:09:81:0d:f0:e9:e8:90:0f:44:
         ff:fd:05:33:4f:d5:70:3f:80:4b:ce:09:2c:e7:96:b6:e7:c9:
         bd:40:d7:0a
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG
RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTAyMTAx
NDA4MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGQkEwMjAyNUQ3RDA2
N0ZFMjc2MTY2Nzg5QTBFNEE4MkJCQjc4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGr+uVS0QM2Voo+uF9sx8dbsBJFLuNz47GFjnIWZgPHykiFvkq
7u382OfWKwA7ZAR5312rMAaIME2pyxYvyCtUJn4KPuZoHJiUbmGQNNq+nRNfhyps
F0y03ao2W/CunA6iUh3a0CvEk6Z9kM9NOtKQarfZ04GTrvpiQe1/Bjrtl2Mtjjcx
wGILG4JeSfVVqyhHifFIMk8qkqEq604gXmffgT7svSodBHauILX2wlQI1halyPxn
bZWPg5D+8kToMzjr0VfNWlF8V3yJP8YO6Y0f4i+RmbxVmQzUypcwyIOiAzi/r+Bb
GBUqdl/6LetQUxzPXYEMkLiCmOoDS6K1nSyjAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUb7oCAl19Bn/idhZniaDkqCu7eAkwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ
7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm
NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2I3b0NBbDE5Qm5faWRoWm5pYURrcUN1
N2VBay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfS8QAwDQYJ
KoZIhvcNAQELBQADggEBAGW1CNqnmZkLmsdyP4pnQq7ksuO/PuGdOp9D40JmNaN9
t9ED46w/RN48XnZEHtJ9Rw/HdWAiQobkPc5H86dpTc+sKIieXLni9Z1Z3fEo+/aC
5dY4AGhJ4dUHvwuCjYPNnoARtmH6kkMqVaDqLzys9dT5OpEHh43KGxxDvKuxm/1G
SVtDKDtJaxyP7UlaHEqWbtaiqFBBuTOqRvXi0XRbGBnp0AOGkFcgvXWjjtWY5t3w
OC10ks/9Dm2XyVLzbXXAyNNItb7ahIilPDyci6RbcfWv8hs6g+AMfJf+nrC1384s
cQmBDfDp6JAPRP/9BTNP1XA/gEvOCSznlrbnyb1A1wo=
-----END CERTIFICATE-----