Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/323430373a343930303a3a2f33322d3438203d3e203138343239.roa
File:                     323430373a343930303a3a2f33322d3438203d3e203138343239.roa (raw, json)
Hash identifier:          B2V2wm56S1X4556oJTqkN5SV9Xg67wr2peD+n+d4His=
Subject key identifier:   4C:5B:03:78:35:C9:49:59:64:20:1A:25:EA:42:B7:1D:EE:6B:EB:E6
Certificate issuer:       /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial:       3584F6DFD9DD390F13616EF920BB9F200BE6903E
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CGNET/0/323430373a343930303a3a2f33322d3438203d3e203138343239.roa
Signing time:             Mon 11 May 2026 17:26:19 +0000
ROA not before:           Mon 11 May 2026 17:21:19 +0000
ROA not after:            Mon 10 May 2027 17:26:19 +0000
asID:                     18429
IP address blocks:        2407:4900::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:84:f6:df:d9:dd:39:0f:13:61:6e:f9:20:bb:9f:20:0b:e6:90:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
        Validity
            Not Before: May 11 17:21:19 2026 GMT
            Not After : May 10 17:26:19 2027 GMT
        Subject: CN=4C5B037835C9495964201A25EA42B71DEE6BEBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9a:f5:7e:f0:83:a7:23:3e:35:ed:2f:85:d1:
                    14:33:2a:34:3c:bb:b0:36:35:0e:d8:e9:ab:c5:da:
                    fa:63:9b:c4:bf:45:14:4c:d9:05:96:a6:a7:92:b6:
                    e6:c0:5c:8e:4a:d7:90:bf:9a:75:dc:dc:21:5d:79:
                    3f:b9:eb:7c:be:30:dd:73:06:75:fb:ea:74:1a:c5:
                    9b:81:31:98:22:c8:24:9b:46:d6:b5:3d:de:99:0a:
                    4b:c1:d1:fc:ff:47:c9:dc:e4:e9:2a:22:ee:e4:be:
                    f4:e2:4c:36:7e:2d:0c:87:57:c2:e2:6d:d0:24:83:
                    6a:72:d4:8f:54:85:7d:c3:29:1e:8c:0c:21:29:e7:
                    e3:72:11:e9:f1:bc:cf:2c:b3:fc:48:a1:99:08:24:
                    13:18:0a:ca:16:29:ed:9e:60:a0:6a:e7:5b:d0:a8:
                    1a:ed:44:ec:55:eb:66:66:40:54:cd:00:38:ab:12:
                    07:12:ad:cd:77:f2:89:da:85:bb:d8:1b:92:29:ca:
                    3f:be:2b:f2:36:30:51:2e:c3:af:f7:fc:61:73:4c:
                    7b:2d:32:c3:7c:34:1b:a0:87:fb:c6:a0:6c:71:b5:
                    12:13:07:4a:8a:a8:fc:80:f4:92:ef:1b:8a:a0:40:
                    ac:80:e4:8a:35:af:7e:88:ee:a5:cd:dc:93:3d:42:
                    e8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:03:78:35:C9:49:59:64:20:1A:25:EA:42:B7:1D:EE:6B:EB:E6
            X509v3 Authority Key Identifier:
                keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/323430373a343930303a3a2f33322d3438203d3e203138343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:4900::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:0b:37:37:c8:30:ed:47:c7:f9:3b:00:22:69:65:eb:eb:
         1a:db:f3:e9:52:67:5c:bb:12:e4:e6:20:0c:8b:28:0d:14:46:
         67:c3:f0:41:b7:35:d1:b7:ae:8d:2d:79:73:3d:43:1d:d1:4a:
         fe:9a:94:c3:43:4c:11:45:3f:dc:3d:51:85:17:c3:e5:50:e7:
         62:49:02:39:f5:24:b8:24:95:73:b2:0b:b3:7a:5c:42:c5:ed:
         c6:56:5f:eb:96:e2:23:8f:a0:28:98:1e:a7:91:5a:e9:b0:cb:
         a0:94:e0:ef:54:e7:dc:3c:d8:94:c1:09:a9:1e:5b:59:fd:e5:
         35:e0:eb:94:d6:67:6d:ae:1b:2f:16:93:c3:02:ce:e2:ed:4a:
         21:be:42:06:a9:c2:3a:1b:4e:21:eb:87:fa:f3:e5:76:fc:22:
         76:88:0b:13:50:c6:89:49:3b:a2:6e:4d:f9:af:bf:a8:67:3e:
         d9:1f:9a:66:4c:7a:9a:43:27:43:a2:72:7f:e1:f2:30:b3:27:
         01:68:2e:f7:01:ac:98:c4:2f:b0:5d:e4:1d:b1:33:5d:34:53:
         7c:91:2e:35:64:ab:ff:ec:7f:f9:59:7e:4c:c5:26:b8:0d:3c:
         80:be:05:a5:62:9a:64:62:34:46:74:a8:7e:4d:7b:4a:7c:4c:
         09:af:d3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----