Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/VPjKcN7gnTenjGZMz-hyaEJD1GM.roa
File:                     VPjKcN7gnTenjGZMz-hyaEJD1GM.roa (raw, json)
Hash identifier:          TIC5MyRZ1dqjfaQMgDURTwjCLpOUJuGhzttG6eDmWDI=
Subject key identifier:   54:F8:CA:70:DE:E0:9D:37:A7:8C:66:4C:CF:E8:72:68:42:43:D4:63
Certificate issuer:       /CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
Certificate serial:       0D93
Authority key identifier: 8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/VPjKcN7gnTenjGZMz-hyaEJD1GM.roa
Signing time:             Wed 29 Oct 2025 03:51:36 +0000
ROA not before:           Wed 29 Oct 2025 03:51:36 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     7483
IP address blocks:        223.26.8.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3475 (0xd93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C183D7CBA6B9A9CAFE6F50BFB038D645D26DC7F
        Validity
            Not Before: Oct 29 03:51:36 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=54F8CA70DEE09D37A78C664CCFE872684243D463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:0b:16:f4:49:7e:42:e7:97:d0:6b:c4:e3:
                    fb:78:9e:c2:19:ec:9f:dc:37:86:42:2f:47:66:5b:
                    91:cb:f7:cc:66:c2:fc:8a:af:9e:7a:a2:05:3e:3c:
                    59:0d:8a:ba:9a:8a:fb:8b:a4:56:fe:aa:75:e5:e1:
                    8c:bc:1f:45:b6:ea:a3:52:f2:f6:33:74:c1:51:ac:
                    35:9e:01:f9:3e:d5:d2:96:e8:75:ee:80:17:ca:57:
                    7a:43:cf:1a:5a:39:46:5d:d5:07:0e:d2:c8:c6:03:
                    02:be:4f:20:9d:f4:16:3e:86:33:a0:f7:33:5b:0f:
                    3b:ff:fa:b3:38:95:f8:a4:1e:52:a1:a8:90:fd:64:
                    5f:a9:2c:55:33:6c:28:b0:44:ca:d6:e1:4d:bb:6b:
                    80:50:19:58:09:57:e3:a7:28:1c:26:ca:54:58:46:
                    a7:d8:85:82:e2:6c:ed:fb:87:ac:ca:59:23:af:9a:
                    e9:18:b1:2d:f1:78:47:0f:20:ab:9e:71:f0:46:71:
                    fd:f9:ad:ad:0b:03:4e:bb:4e:45:59:ee:64:48:ad:
                    a5:27:14:8c:8c:3e:f1:3a:de:ae:c1:c4:e6:76:5d:
                    5a:aa:86:e0:6c:d2:9c:5d:67:c4:a5:f5:b0:21:3b:
                    5f:96:8f:20:a4:be:9c:09:ad:0a:cd:a2:65:ab:ec:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:CA:70:DE:E0:9D:37:A7:8C:66:4C:CF:E8:72:68:42:43:D4:63
            X509v3 Authority Key Identifier:
                keyid:8C:18:3D:7C:BA:6B:9A:9C:AF:E6:F5:0B:FB:03:8D:64:5D:26:DC:7F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/jBg9fLprmpyv5vUL-wONZF0m3H8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jBg9fLprmpyv5vUL-wONZF0m3H8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYCLOUD/VPjKcN7gnTenjGZMz-hyaEJD1GM.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:8f:ad:8a:7b:84:5f:59:bd:18:c6:2f:ca:ad:73:07:37:
         16:a7:80:c5:8b:45:70:a4:69:b8:7c:a9:5d:af:77:ab:d4:d7:
         67:d7:80:a2:b2:e6:14:06:bd:82:b6:39:5b:13:d9:9c:b1:aa:
         43:c5:e6:57:02:95:e1:26:67:a1:f7:27:eb:1a:ec:ac:52:8d:
         7c:3c:f3:55:58:03:7c:b3:b5:f1:b9:0c:55:25:7d:7a:5a:15:
         55:c1:29:2e:9f:73:76:7b:ae:ca:e0:66:74:08:1e:4a:7b:ca:
         c4:8f:72:9f:52:69:6e:03:c3:3b:6c:a6:dc:41:93:71:c2:e1:
         7d:49:08:b7:be:61:79:9c:6d:91:0a:fb:9a:23:d1:7f:92:b4:
         ff:70:87:f5:2a:d7:24:66:83:4c:b9:8a:9e:f9:29:4c:88:4f:
         02:ce:34:2d:03:88:5f:35:79:73:9f:f9:41:42:e7:8a:de:3e:
         c5:d0:89:71:10:a8:6e:f7:5f:0d:b1:56:18:8c:66:fd:95:38:
         f5:de:4b:2a:3b:d1:5a:d5:2d:22:78:d8:07:26:0d:fb:fe:ec:
         ff:2c:dd:57:5a:1d:2c:52:cd:13:9a:e3:4c:ad:20:2d:ad:3e:
         b3:4f:c2:81:db:50:c2:78:bc:89:80:0e:4c:d5:6d:3f:fd:65:
         46:5b:fb:4e
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEMx
ODNEN0NCQTZCOUE5Q0FGRTZGNTBCRkIwMzhENjQ1RDI2REM3RjAeFw0yNTEwMjkw
MzUxMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU0RjhDQTcwREVFMDlE
MzdBNzhDNjY0Q0NGRTg3MjY4NDI0M0Q0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC34gsW9El+QueX0GvE4/t4nsIZ7J/cN4ZCL0dmW5HL98xmwvyK
r556ogU+PFkNirqaivuLpFb+qnXl4Yy8H0W26qNS8vYzdMFRrDWeAfk+1dKW6HXu
gBfKV3pDzxpaOUZd1QcO0sjGAwK+TyCd9BY+hjOg9zNbDzv/+rM4lfikHlKhqJD9
ZF+pLFUzbCiwRMrW4U27a4BQGVgJV+OnKBwmylRYRqfYhYLibO37h6zKWSOvmukY
sS3xeEcPIKuecfBGcf35ra0LA067TkVZ7mRIraUnFIyMPvE63q7BxOZ2XVqqhuBs
0pxdZ8Sl9bAhO1+WjyCkvpwJrQrNomWr7Mp5AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUVPjKcN7gnTenjGZMz+hyaEJD1GMwHwYDVR0jBBgwFoAUjBg9fLprmpyv5vUL
+wONZF0m3H8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0tZQ0xP
VUQvakJnOWZMcHJtcHl2NXZVTC13T05aRjBtM0g4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9qQmc5Zkxwcm1weXY1dlVMLXdPTlpGMG0zSDguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TS1lDTE9VRC9WUGpLY043Z25UZW5q
R1pNei1oeWFFSkQxR00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQB3xoIMA0GCSqGSIb3DQEBCwUAA4IBAQAD64+tinuEX1m9GMYvyq1zBzcWp4DF
i0VwpGm4fKldr3er1Ndn14CisuYUBr2CtjlbE9mcsapDxeZXApXhJmeh9yfrGuys
Uo18PPNVWAN8s7XxuQxVJX16WhVVwSkun3N2e67K4GZ0CB5Ke8rEj3KfUmluA8M7
bKbcQZNxwuF9SQi3vmF5nG2RCvuaI9F/krT/cIf1KtckZoNMuYqe+SlMiE8CzjQt
A4hfNXlzn/lBQueK3j7F0IlxEKhu918NsVYYjGb9lTj13ksqO9Fa1S0ieNgHJg37
/uz/LN1XWh0sUs0TmuNMrSAtrT6zT8KB21DCeLyJgA5M1W0//WVGW/tO
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:13:15 2025 by rpki-client