Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CARL-NET/0/3231312e37392e3130322e302f32332d3234203d3e2037353336.roa
File:                     3231312e37392e3130322e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier:          3v3LP5j06Samtgaxz1mv2fEZi56D7EIyXnL/h/+knlQ=
Subject key identifier:   99:AE:1D:A5:2E:44:72:F3:44:EC:FF:D4:4C:63:E2:A2:23:4E:D6:CD
Certificate issuer:       /CN=73E6AC8F948D0C97D941F26531617C19223508E6
Certificate serial:       441EB7D2C71D049D55C058548BDCA662A1B3D592
Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3231312e37392e3130322e302f32332d3234203d3e2037353336.roa
Signing time:             Mon 11 May 2026 17:56:37 +0000
ROA not before:           Mon 11 May 2026 17:51:37 +0000
ROA not after:            Mon 10 May 2027 17:56:37 +0000
asID:                     7536
IP address blocks:        211.79.102.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1e:b7:d2:c7:1d:04:9d:55:c0:58:54:8b:dc:a6:62:a1:b3:d5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6
        Validity
            Not Before: May 11 17:51:37 2026 GMT
            Not After : May 10 17:56:37 2027 GMT
        Subject: CN=99AE1DA52E4472F344ECFFD44C63E2A2234ED6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:10:1c:73:7e:d9:24:20:65:11:f5:86:e9:
                    77:f5:3a:59:60:69:f6:11:d8:86:fb:06:4e:36:29:
                    0d:1f:d5:fa:87:09:52:74:b8:00:3b:89:59:13:0d:
                    68:ad:d7:7f:20:83:2c:6d:f6:99:c9:37:57:68:5a:
                    a8:9a:78:24:b5:f2:0c:1e:e5:0d:26:a0:32:af:d6:
                    47:67:68:2e:49:70:ff:06:d8:32:31:a9:61:35:b2:
                    de:10:1a:ca:c7:0b:f6:7e:fd:03:ca:8c:ac:90:49:
                    92:a6:56:d2:b6:ac:3e:2e:d1:13:c2:75:30:49:7f:
                    44:50:29:94:9d:b4:77:0a:12:76:ee:77:ad:e6:7a:
                    fc:86:24:1d:a9:80:83:79:89:2d:b1:68:75:83:32:
                    53:5a:12:a0:2d:04:7a:8d:e3:61:ba:36:66:75:e9:
                    81:04:c5:76:50:dd:00:10:2b:9b:25:a3:35:9d:13:
                    61:c6:d0:06:c1:98:0f:47:eb:14:fd:4f:e5:bc:0c:
                    7a:57:7f:ac:ac:45:3a:b7:75:ca:ca:73:4e:ce:30:
                    f6:aa:ec:c6:7b:97:37:49:4b:e1:e5:45:88:3b:68:
                    9f:08:f5:ce:6b:56:f8:36:ac:f4:90:3d:cb:20:01:
                    c9:ee:fc:2a:5e:7e:e0:2a:03:b0:f7:14:5d:28:1a:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:1D:A5:2E:44:72:F3:44:EC:FF:D4:4C:63:E2:A2:23:4E:D6:CD
            X509v3 Authority Key Identifier:
                keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3231312e37392e3130322e302f32332d3234203d3e2037353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:c5:07:99:ff:ef:e0:ed:a4:15:3b:24:58:9a:97:ce:d9:
         22:2a:b5:f9:7a:71:36:9e:84:2c:a9:c1:58:06:da:6a:d8:e3:
         2d:4c:ad:02:fd:60:90:b8:63:eb:d2:2d:37:4d:85:89:e0:75:
         e3:2f:ef:90:88:5b:75:cf:9d:35:db:8e:20:67:b5:3d:32:9b:
         78:04:f8:e1:df:7f:b6:ff:96:3a:88:97:fc:fb:f0:ac:a7:4b:
         94:94:a1:c7:e2:f7:09:0b:8f:9e:4a:33:54:3d:41:ba:8b:ae:
         a8:b8:d1:c9:7b:49:dc:bf:29:13:12:2e:6f:7b:8b:6e:86:4c:
         70:38:4c:41:25:3d:e3:4c:fd:ea:1d:97:07:67:52:64:da:e0:
         af:d7:ca:49:fb:25:c5:c9:f3:28:b4:b7:5b:cc:e7:7f:76:13:
         45:88:fb:89:64:7d:50:00:55:61:78:7a:33:9e:ea:8e:50:47:
         5c:33:d9:dd:20:69:b1:fb:94:ef:60:65:dc:75:aa:d7:b4:f2:
         07:9e:44:1a:d5:27:a8:8d:ca:e2:0c:93:b8:8f:e0:61:c8:b1:
         45:14:44:62:50:df:68:76:0f:28:07:64:f3:14:b6:68:c6:55:
         cd:cc:6e:8c:f6:71:8f:d9:dd:6c:43:4a:96:0f:7d:51:ca:e6:
         44:7c:ae:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:35:01 2026 by rpki-client