Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34382e302f32312d3234203d3e203138343239.roa
File:                     3132332e35302e34382e302f32312d3234203d3e203138343239.roa (raw, json)
Hash identifier:          6/HV8z1LEfdVhhCmP2cb0eObHDfz769E1mNuqy6YTdA=
Subject key identifier:   F4:1B:91:D2:26:E4:04:24:C3:AE:26:EA:2E:E3:77:C0:8D:F0:26:08
Certificate issuer:       /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial:       73961FC1289FE068B599C80BA01429CEA3709AA5
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34382e302f32312d3234203d3e203138343239.roa
Signing time:             Mon 11 May 2026 17:26:56 +0000
ROA not before:           Mon 11 May 2026 17:21:56 +0000
ROA not after:            Mon 10 May 2027 17:26:56 +0000
asID:                     18429
IP address blocks:        123.50.48.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:96:1f:c1:28:9f:e0:68:b5:99:c8:0b:a0:14:29:ce:a3:70:9a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
        Validity
            Not Before: May 11 17:21:56 2026 GMT
            Not After : May 10 17:26:56 2027 GMT
        Subject: CN=F41B91D226E40424C3AE26EA2EE377C08DF02608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:ee:8c:cd:10:ed:f1:ae:09:5f:c9:f1:b6:
                    8e:93:17:eb:93:59:29:b8:86:64:57:6e:df:88:68:
                    c8:8b:2c:56:27:54:8e:a7:82:06:65:83:a8:ed:d0:
                    48:f2:91:23:32:59:2c:02:54:cf:35:21:24:4e:26:
                    61:8e:4d:b2:14:1c:9e:25:0a:94:fa:1d:56:91:65:
                    bf:8e:01:03:e9:df:79:43:9a:ee:58:1b:eb:71:47:
                    a5:b0:55:62:6c:6c:fb:79:56:c9:4d:6c:2b:a7:68:
                    46:83:2e:2c:57:73:cb:ad:33:0d:0e:e5:0e:08:4c:
                    29:a3:cd:9e:a2:60:e8:45:32:5e:7b:49:b5:67:e8:
                    f0:c0:2c:3e:01:6a:6f:f7:54:af:b4:cf:eb:dc:d5:
                    39:0c:dd:7d:7e:2d:80:4b:fb:51:9f:ad:98:97:e5:
                    00:3f:41:90:af:f6:01:7c:03:a4:a2:28:10:07:ac:
                    b8:67:77:fc:ed:36:09:78:04:3e:cb:c3:d5:79:76:
                    a5:b1:c2:04:46:47:aa:80:2e:01:f6:3a:84:81:4d:
                    fb:68:c4:d7:b7:38:ee:6e:4c:02:81:9c:88:a1:37:
                    bc:da:7b:ea:e3:01:ed:81:ec:d8:bf:e4:27:13:2f:
                    72:89:93:bf:ef:8d:cf:df:ab:50:2f:29:5d:b9:f6:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:91:D2:26:E4:04:24:C3:AE:26:EA:2E:E3:77:C0:8D:F0:26:08
            X509v3 Authority Key Identifier:
                keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34382e302f32312d3234203d3e203138343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:01:5e:b9:95:35:89:9d:53:1d:20:49:87:b0:47:14:d5:6d:
         4c:2a:2e:4e:a4:ef:b1:d8:51:5a:5f:c9:15:fa:b9:42:a7:39:
         32:06:d1:89:da:ba:12:13:5d:a7:29:3a:d6:4f:b8:78:86:b7:
         4b:f6:27:5a:e1:61:a4:23:a0:c9:c0:7b:3c:35:60:71:da:ce:
         fd:18:ac:e1:4e:89:22:4a:30:6d:96:cd:70:79:12:66:c4:ec:
         d8:b0:51:2c:91:48:4b:f5:5c:6a:c6:1e:95:2f:0f:f2:cd:41:
         9f:56:d9:a1:4d:90:14:d9:d7:a4:41:76:4b:e8:dd:02:1d:05:
         e1:1c:f9:b7:4d:1e:30:79:f4:63:41:97:80:d5:42:2d:d4:3b:
         39:ee:b1:e4:9e:a7:6a:e3:55:94:65:06:16:2c:9a:ae:8e:2b:
         cc:d5:db:b6:39:12:43:9e:9d:df:9d:7a:67:44:6b:e8:e4:06:
         4f:4c:85:2d:2b:fe:df:7b:e0:22:2e:65:a6:88:b8:d4:15:9f:
         c5:87:bd:02:61:a6:bb:5b:e0:99:b2:3f:f2:08:11:84:c1:7c:
         b8:9b:d9:d7:80:f5:b4:82:25:d5:53:0a:db:3b:60:45:4b:98:
         04:ba:d8:39:07:86:28:25:fa:45:ce:c0:72:76:4e:f7:c4:d0:
         bc:82:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:08 2026 by rpki-client