Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3138342e302f32312d3231203d3e203138343239.roa
File:                     3132342e3135352e3138342e302f32312d3231203d3e203138343239.roa (raw, json)
Hash identifier:          5wnOvwp1+wz4MAYOAJonsX0LHfSbvvBEYMh7K7wkAcI=
Subject key identifier:   BC:83:4F:40:BF:E0:4A:35:B8:26:FF:CD:EE:7A:26:25:B9:C5:55:7B
Certificate issuer:       /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial:       3A37BE2BB9D6A769BA5BA7D300797B0270ED39BB
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3138342e302f32312d3231203d3e203138343239.roa
Signing time:             Mon 11 May 2026 17:04:44 +0000
ROA not before:           Mon 11 May 2026 16:59:44 +0000
ROA not after:            Mon 10 May 2027 17:04:44 +0000
asID:                     18429
IP address blocks:        124.155.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:37:be:2b:b9:d6:a7:69:ba:5b:a7:d3:00:79:7b:02:70:ed:39:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
        Validity
            Not Before: May 11 16:59:44 2026 GMT
            Not After : May 10 17:04:44 2027 GMT
        Subject: CN=BC834F40BFE04A35B826FFCDEE7A2625B9C5557B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:15:df:9e:88:5d:88:e2:e7:5e:16:ab:96:
                    01:80:6c:a2:c7:a9:e9:5b:46:43:71:89:f8:48:ac:
                    8a:20:c6:9c:ed:15:2f:bf:57:1a:07:89:cf:72:f9:
                    f5:5f:1e:a0:4f:37:f5:ed:5b:f3:45:18:b7:58:01:
                    cb:dd:0b:f7:5b:70:c5:8a:67:fd:e2:56:c3:7c:08:
                    6a:7c:13:c9:61:00:3b:63:9c:9d:e3:37:7e:da:18:
                    12:04:9c:cb:18:ce:d1:9a:49:55:15:98:e4:1d:33:
                    34:3f:dd:b0:0a:38:58:f1:5b:3c:ca:2c:11:21:ec:
                    30:c6:23:46:2b:e0:06:14:7b:10:42:0f:6a:d7:9b:
                    0f:19:49:d0:20:c1:e6:34:89:80:9c:47:12:63:05:
                    01:7d:15:10:4a:4a:ff:74:66:bc:23:f3:a0:5a:34:
                    96:5e:59:7d:ce:62:10:23:5a:8a:2b:57:35:2f:8a:
                    02:a8:10:75:14:d3:4f:25:ce:c2:ce:cd:24:f7:1a:
                    61:64:40:67:ef:f7:9d:5d:fc:b9:76:1b:45:e9:61:
                    e8:cb:0b:9d:9f:e5:96:85:63:f1:5f:e8:f8:8d:4b:
                    18:7f:f3:d7:fd:c4:55:77:7d:a5:78:74:ad:8a:fd:
                    47:45:98:f6:d7:b3:56:0c:1e:02:b3:0a:f6:fd:57:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:83:4F:40:BF:E0:4A:35:B8:26:FF:CD:EE:7A:26:25:B9:C5:55:7B
            X509v3 Authority Key Identifier:
                keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3138342e302f32312d3231203d3e203138343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.155.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:28:4b:db:79:85:19:b2:c5:59:60:d3:09:5c:99:1c:7b:48:
         85:e6:67:f7:43:9a:65:6b:12:98:0a:02:b3:22:7d:46:b4:59:
         e8:f0:81:4e:c5:fb:cb:65:59:37:b1:49:bf:03:36:23:dd:60:
         77:ae:f4:07:1a:b9:f8:a4:44:79:f1:5c:c5:33:34:9b:58:54:
         e1:a1:3b:60:aa:5e:08:60:34:cd:c7:57:40:90:ec:4b:e6:ef:
         e8:dc:3a:06:90:ea:5e:60:f6:55:2e:13:73:01:d6:97:c5:89:
         d0:eb:f7:7c:d7:4a:8d:5a:5d:3b:01:0c:27:c6:ce:10:ca:b0:
         ab:01:d2:71:c1:59:07:af:32:8a:d9:4f:43:cc:24:7b:20:d9:
         2f:44:ca:22:34:56:c1:8f:7a:d9:c5:ff:0e:25:c7:76:2a:66:
         0d:ec:f1:1c:3c:75:f6:93:a0:34:6b:bf:15:e1:33:2a:5e:ca:
         6d:d2:01:1f:bd:f1:80:5a:ee:fd:d4:c9:58:71:79:43:e5:03:
         0b:81:7c:dd:6d:74:4d:dd:29:ea:4a:3b:f8:24:26:23:30:47:
         cc:ec:7f:ce:f6:f0:47:5c:10:4f:11:54:fa:9e:7c:9a:7c:87:
         44:b9:7c:c0:2b:52:ac:e8:7a:2c:cd:54:6f:9c:3d:f6:d2:1e:
         73:98:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:08 2026 by rpki-client