Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CATVISP/0/3130332e3233332e36382e302f32322d3234203d3e203138303436.roa
File:                     3130332e3233332e36382e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier:          ORpDWMmcXvXNpOQL2dVJ9nUGlzM0OrO03KuyZerYMOU=
Subject key identifier:   B0:5C:31:0F:6C:AC:F1:56:49:33:BA:97:50:7F:2F:ED:00:65:B5:CD
Certificate issuer:       /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Certificate serial:       0357D6E21DBAE72F0F9C88E4BCF3D2B81B7258E5
Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CATVISP/0/3130332e3233332e36382e302f32322d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:08:59 +0000
ROA not before:           Mon 11 May 2026 17:03:59 +0000
ROA not after:            Mon 10 May 2027 17:08:59 +0000
asID:                     18046
IP address blocks:        103.233.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:57:d6:e2:1d:ba:e7:2f:0f:9c:88:e4:bc:f3:d2:b8:1b:72:58:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
        Validity
            Not Before: May 11 17:03:59 2026 GMT
            Not After : May 10 17:08:59 2027 GMT
        Subject: CN=B05C310F6CACF1564933BA97507F2FED0065B5CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:4a:9a:81:54:b8:83:61:72:1d:4b:d1:b4:
                    9b:c9:03:2a:ff:6b:b9:51:5a:10:48:71:59:aa:0c:
                    b5:ab:96:b1:66:1f:34:17:d0:9f:7f:d0:4c:d5:07:
                    4b:86:ac:12:d5:3a:15:ba:f5:63:e7:c5:6f:ba:dd:
                    0c:ed:19:d1:d5:c9:0b:82:75:b1:f4:de:72:25:f2:
                    6e:80:5b:26:fb:ab:ea:ca:de:3c:10:98:1f:c6:cf:
                    7f:61:ed:8d:a6:0c:38:ea:b1:2a:da:ea:f5:f4:f8:
                    3f:6c:66:bb:09:96:ad:3c:51:53:8b:d0:c5:db:98:
                    25:93:58:d7:45:cc:76:5d:f2:71:f5:72:e5:5a:44:
                    9d:b1:2b:4e:18:86:e4:b0:3d:23:74:d9:31:27:40:
                    c9:ce:f0:e7:b4:6c:28:a9:47:76:32:95:5c:2f:6b:
                    f8:1f:43:5c:68:40:90:3e:5d:51:a2:64:40:00:e2:
                    99:da:06:ad:49:96:a5:3b:44:de:9c:b7:5a:d6:b0:
                    58:cb:8d:aa:8b:72:9e:98:17:a5:3f:4b:70:89:18:
                    f0:86:87:f9:8e:03:be:5a:ba:e9:ba:03:04:de:68:
                    69:01:4e:d9:de:99:97:f2:93:45:74:f9:ce:95:b3:
                    87:7d:3b:4f:14:de:09:86:cd:f8:c4:c2:af:3c:f2:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5C:31:0F:6C:AC:F1:56:49:33:BA:97:50:7F:2F:ED:00:65:B5:CD
            X509v3 Authority Key Identifier:
                keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/3130332e3233332e36382e302f32322d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:17:cf:dd:69:c0:d5:e2:1d:ad:d3:f8:60:7c:a2:7a:ab:
         94:13:b4:89:4b:a8:9f:85:7c:01:16:ad:b0:10:90:72:cc:15:
         5e:a4:d9:3d:b6:bf:13:53:64:84:61:a3:f6:e1:82:6b:10:53:
         ad:c2:b9:6b:d6:9e:44:24:32:1d:c1:4f:13:6b:88:c8:b8:92:
         a1:2f:c0:f0:e0:40:56:e4:92:07:dd:ab:ec:54:90:b2:b7:66:
         3d:d4:39:86:a8:d7:9e:85:12:0f:5c:45:c4:47:3a:52:f7:d7:
         f0:ca:c2:84:d0:ba:26:d2:ec:fe:7b:85:bb:35:ad:46:fb:a0:
         10:07:98:93:82:92:52:11:e8:e0:5f:29:be:3f:45:cc:73:b9:
         a9:2a:a4:69:30:d1:d7:c5:d1:f4:c6:c6:39:9b:8d:7f:15:8f:
         d9:95:03:17:40:df:6b:74:6f:c7:db:48:e6:d1:63:9b:78:4b:
         f1:86:7c:89:43:bb:7c:7d:d4:eb:5c:30:76:38:7f:76:22:f4:
         6e:2e:40:b8:90:e0:a6:c0:c5:b5:f1:15:96:d4:9a:47:f7:85:
         5c:71:85:35:09:a9:44:af:dc:40:02:ab:81:58:fe:21:a4:fb:
         28:bd:c9:8d:b0:ea:f6:35:a3:24:82:c2:36:41:c5:4e:1a:b7:
         54:2d:e5:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:38 2026 by rpki-client