Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3332203d3e20313532363132.roa
File:                     3134342e37392e3233372e302f32342d3332203d3e20313532363132.roa (raw, json)
Hash identifier:          y2jSoNJLs5+nwOx7mIkDPFacP932HoFtwivGyzUzSlg=
Subject key identifier:   03:73:E2:CF:5B:D2:F4:14:EB:44:29:BD:38:55:79:94:48:92:D7:EF
Certificate issuer:       /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
Certificate serial:       67C0B19D02C0ED97DFD25EEF60D98B9BFC61C36C
Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3332203d3e20313532363132.roa
Signing time:             Mon 11 May 2026 17:57:28 +0000
ROA not before:           Mon 11 May 2026 17:52:28 +0000
ROA not after:            Mon 10 May 2027 17:57:28 +0000
asID:                     152612
IP address blocks:        144.79.237.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c0:b1:9d:02:c0:ed:97:df:d2:5e:ef:60:d9:8b:9b:fc:61:c3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C
        Validity
            Not Before: May 11 17:52:28 2026 GMT
            Not After : May 10 17:57:28 2027 GMT
        Subject: CN=0373E2CF5BD2F414EB4429BD385579944892D7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:72:79:50:33:76:a1:74:38:ee:cf:95:10:
                    ec:1d:9e:e8:8f:ed:ff:f2:c9:bc:a9:f0:97:11:05:
                    0d:1b:0a:f0:56:39:31:17:16:42:9d:f9:00:cd:53:
                    88:ed:90:e7:9f:5d:1b:f4:25:af:3f:0a:3f:0c:be:
                    46:a7:ec:c1:d9:fc:40:37:84:10:27:e8:78:fc:6e:
                    43:94:f5:70:96:5e:05:94:29:ba:9e:5d:1b:88:f9:
                    fa:11:e4:d9:21:65:fb:3d:24:f7:e6:06:2e:57:15:
                    2a:f0:06:b1:a4:b9:54:ad:72:8a:0a:f9:25:22:6f:
                    24:51:76:43:30:c3:7d:57:82:e1:c3:d7:03:e5:2d:
                    3e:47:8d:6e:0d:8f:96:94:29:ca:a1:d7:7c:ce:ef:
                    e5:d1:d1:db:ef:3d:02:65:ff:6e:cc:8f:6e:e5:ce:
                    0d:74:4f:c5:ad:b8:db:a7:45:b3:ec:96:35:e4:c7:
                    65:e2:95:70:e1:53:7a:96:2f:19:7b:cd:f1:77:d5:
                    17:d4:4b:0a:3b:a7:ae:23:d0:41:ce:2e:bf:cb:51:
                    66:22:0d:31:6a:90:77:2e:ab:40:3a:e8:a1:7a:72:
                    97:75:8a:53:8e:59:76:96:ec:de:35:8a:bd:99:c0:
                    30:f0:26:34:4f:c5:06:3a:5c:09:b5:ff:63:27:18:
                    2f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:73:E2:CF:5B:D2:F4:14:EB:44:29:BD:38:55:79:94:48:92:D7:EF
            X509v3 Authority Key Identifier:
                keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3332203d3e20313532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:df:0b:ae:f5:c5:bf:8e:ee:1d:b4:75:cd:a9:82:5e:dc:97:
         f2:66:7b:43:62:49:90:43:9b:57:d2:94:4e:58:4f:f3:8a:b6:
         d7:b0:7a:ad:2d:cf:7a:f5:f2:bc:a5:64:3c:cc:66:2b:48:d5:
         fc:9d:d1:3e:4d:c6:f8:05:fb:4f:19:df:e0:96:7b:5c:e0:c0:
         5a:06:8b:44:fc:dd:a1:77:b8:c1:a0:54:67:33:60:f3:7a:d9:
         2e:75:13:60:c8:8b:8d:d2:bc:f2:12:db:b1:47:d7:96:3f:8a:
         8c:52:38:8e:1f:ac:6c:fd:ac:38:66:24:6c:89:0c:98:02:39:
         e9:7e:06:5d:42:58:ca:dc:74:7f:93:ec:23:49:61:2f:87:40:
         df:b4:c1:f7:ed:66:11:f9:30:c6:7d:16:4f:25:bc:be:19:f1:
         d8:e4:8e:4e:77:fb:d4:42:82:3b:78:d6:57:a7:36:03:45:f4:
         a6:32:e0:dc:cd:81:bf:d3:c5:88:82:b5:c7:5c:2a:b5:6e:ed:
         9c:ff:c1:b8:19:59:45:7f:a9:41:f1:64:4c:0f:ca:59:99:b5:
         e4:b0:95:ee:b9:58:81:42:37:32:02:59:a0:ed:ba:f4:b8:6f:
         ff:bf:97:1b:bf:b0:a8:39:e1:f2:a5:7f:34:89:76:17:db:a9:
         cb:c2:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:19 2026 by rpki-client