Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CARL-NET/0/3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa
File:                     3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa (raw, json)
Hash identifier:          BJzz6G8VxovxCWAhRC1tIl3CH9yMcG4c36K4NUZF6DE=
Subject key identifier:   6F:2C:7E:DC:26:D7:27:92:61:B3:14:41:85:3F:61:89:7F:D0:3E:CE
Certificate issuer:       /CN=73E6AC8F948D0C97D941F26531617C19223508E6
Certificate serial:       287C12891C53EE3384F83073235226BBADC5A76F
Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa
Signing time:             Mon 11 May 2026 17:06:25 +0000
ROA not before:           Mon 11 May 2026 17:01:25 +0000
ROA not after:            Mon 10 May 2027 17:06:25 +0000
asID:                     131618
IP address blocks:        103.103.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7c:12:89:1c:53:ee:33:84:f8:30:73:23:52:26:bb:ad:c5:a7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6
        Validity
            Not Before: May 11 17:01:25 2026 GMT
            Not After : May 10 17:06:25 2027 GMT
        Subject: CN=6F2C7EDC26D7279261B31441853F61897FD03ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:18:d1:ae:f6:0d:93:3d:6f:eb:4c:41:29:
                    a4:8d:58:c0:3b:45:af:9b:53:b9:20:3e:ab:a3:1e:
                    bf:c9:8d:d2:3d:56:6e:87:71:b5:b1:58:6e:f6:49:
                    20:b1:5e:b4:81:e5:0e:05:06:e7:af:14:ae:fa:4b:
                    e0:8a:72:07:83:d7:e4:16:3c:c9:06:a2:b3:91:48:
                    18:ff:c0:b6:d8:67:88:6b:d5:61:44:58:52:7b:ac:
                    e8:7b:27:d3:de:6f:53:f7:35:93:b4:3e:a3:d2:ba:
                    16:ae:28:54:e0:cf:85:f6:93:63:fc:d9:2c:6c:53:
                    88:ec:3c:d0:ab:72:51:fc:81:26:df:e9:1a:c8:44:
                    75:0f:0c:37:60:5a:b9:6f:31:05:d3:24:14:43:dd:
                    ca:8c:62:e7:cb:40:19:ea:b5:a2:5e:b7:a9:1e:63:
                    6f:05:bc:68:a6:12:7a:42:cf:30:8a:96:b5:97:1b:
                    6e:7c:6a:72:64:5b:d9:de:26:c8:90:28:a4:0a:98:
                    44:72:37:58:e4:89:6d:ce:b3:57:33:1d:5e:30:d9:
                    55:9d:a3:c8:63:e6:01:a6:d6:fa:91:77:fe:09:aa:
                    42:ae:08:a9:a4:31:53:57:e4:a0:c6:90:a7:3c:c1:
                    a6:e5:43:bc:87:72:6f:b5:93:34:a0:49:be:56:f2:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2C:7E:DC:26:D7:27:92:61:B3:14:41:85:3F:61:89:7F:D0:3E:CE
            X509v3 Authority Key Identifier:
                keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3130332e3130332e38302e302f32322d3234203d3e20313331363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:be:f8:94:c7:7c:8f:29:34:88:0c:c6:b0:fe:34:04:fc:b5:
         ef:d2:a4:99:6b:b1:f5:8d:d3:dc:41:61:6d:d9:14:bb:9f:a0:
         4f:75:42:c1:96:07:e0:ac:42:87:08:bf:40:d5:b2:fe:7f:4e:
         31:c0:82:c1:7a:8a:3c:d3:84:e4:a5:0a:16:48:5e:87:07:91:
         06:66:17:ae:77:0c:54:1c:11:9c:c1:a0:dd:fa:46:f3:28:97:
         6d:a3:c3:08:e3:83:aa:8e:14:f9:80:81:cc:7c:70:cf:70:1b:
         51:85:21:c4:1e:0c:83:b4:b4:c7:f2:d4:ff:28:e8:86:fa:e7:
         21:43:b3:e8:f7:6f:5d:ea:32:72:d4:78:14:e1:35:69:0a:bc:
         20:dc:ed:81:23:0f:e8:f0:45:62:e2:4e:0f:af:f2:8d:18:1e:
         05:3c:d3:10:40:86:ba:6b:00:fb:06:70:28:40:a9:79:64:01:
         11:a6:44:a7:a0:c3:6f:cf:6b:20:f7:c5:78:7a:39:0d:fa:7c:
         57:e2:5d:82:11:71:cf:5c:b0:b9:26:f4:b5:bf:28:5e:36:f0:
         0c:8f:f9:8e:42:e4:bb:72:18:7e:af:40:ea:ae:df:28:28:50:
         63:bd:57:2f:ce:cb:b8:81:4d:8d:cb:88:b2:e8:0b:c2:c3:eb:
         1f:08:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:43 2026 by rpki-client