Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32302d3234203d3e203138343239.roa
File:                     36312e35372e3132382e302f32302d3234203d3e203138343239.roa (raw, json)
Hash identifier:          YiI45/E7SabvhifwJIVtLR9+r78Zo4hPOQiJiczZjHU=
Subject key identifier:   AF:5F:92:46:C9:81:24:0A:4B:E7:98:04:C8:01:78:73:9D:27:6C:19
Certificate issuer:       /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial:       4E0E6D9CC53ED50793BCBE1BE97ECF58E13099B9
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32302d3234203d3e203138343239.roa
Signing time:             Mon 11 May 2026 17:27:11 +0000
ROA not before:           Mon 11 May 2026 17:22:11 +0000
ROA not after:            Mon 10 May 2027 17:27:11 +0000
asID:                     18429
IP address blocks:        61.57.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0e:6d:9c:c5:3e:d5:07:93:bc:be:1b:e9:7e:cf:58:e1:30:99:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
        Validity
            Not Before: May 11 17:22:11 2026 GMT
            Not After : May 10 17:27:11 2027 GMT
        Subject: CN=AF5F9246C981240A4BE79804C80178739D276C19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:be:38:be:42:9c:dc:81:08:55:84:39:fb:
                    6f:95:59:33:0c:7f:38:ec:55:ff:7b:02:e9:f3:1e:
                    b0:f2:87:c2:7d:6b:ff:de:50:58:2c:9f:41:ff:18:
                    06:03:bb:5c:7d:80:a3:8e:d9:69:5c:bd:74:e9:e7:
                    f4:a8:ce:c5:66:92:3f:f7:04:fb:f1:ac:95:7b:ac:
                    dd:30:07:d5:55:16:a5:a8:ce:3a:56:44:25:4e:14:
                    da:1c:47:ce:86:18:de:c8:a7:dd:87:17:04:68:fb:
                    1f:6d:ba:d2:2d:b9:29:1e:57:04:f2:66:08:82:f5:
                    02:20:6d:f0:0e:62:76:8f:96:8d:f4:c9:74:51:d9:
                    45:25:18:64:9d:8c:9c:4f:fc:b0:c7:72:46:63:2a:
                    4c:3f:4a:b3:82:e1:cc:39:88:ed:e2:e9:25:c4:33:
                    b4:fa:4f:c2:91:c1:96:e1:6b:ae:a1:03:92:63:27:
                    31:6a:01:75:23:d3:a2:fc:d3:60:e2:94:1a:cc:fb:
                    bb:29:8f:e0:53:52:90:01:5e:05:ec:be:ad:00:ec:
                    33:8a:32:1e:5f:72:55:3a:bc:eb:cc:f6:49:aa:30:
                    d6:d8:46:d8:a4:19:04:5b:8a:9c:1d:9f:a3:7a:17:
                    9c:b1:30:62:a0:d3:de:c9:16:0b:bb:d5:b3:bc:b8:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5F:92:46:C9:81:24:0A:4B:E7:98:04:C8:01:78:73:9D:27:6C:19
            X509v3 Authority Key Identifier:
                keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32302d3234203d3e203138343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:ac:7e:b6:d0:2b:1e:e6:73:ce:ef:1b:bd:9f:e6:75:44:42:
         b0:fd:5d:11:e7:c1:67:94:92:1d:37:91:f7:d5:7f:99:74:db:
         dc:2a:38:09:05:4e:4a:5b:30:b7:fe:0d:5c:0b:dd:bc:19:af:
         21:a5:13:0e:a3:1e:49:ef:21:16:09:84:7c:8f:4d:e2:af:ff:
         b0:c1:40:3f:cd:98:af:0b:12:37:74:d0:ac:55:1b:45:c7:b5:
         07:95:de:26:da:71:e0:50:cb:8c:cc:7e:ac:79:43:65:c0:76:
         ca:10:56:6e:48:7a:b5:9f:de:18:6f:98:0b:cb:22:b2:99:5b:
         99:d1:62:c8:e0:0a:32:c6:e3:df:83:f9:31:94:b4:63:78:59:
         4d:c5:f6:11:7d:fe:55:89:6c:e6:77:05:16:43:89:dd:83:83:
         92:7a:14:be:61:4c:4f:bd:cf:21:70:3e:c9:4b:02:5f:c6:39:
         59:5a:25:28:ed:25:40:1c:40:70:61:31:6d:4a:43:21:f0:a8:
         6b:7e:ac:e8:59:5f:f2:9b:97:8f:81:cd:39:a9:6b:a0:db:25:
         56:07:8d:d0:3a:b0:8d:06:65:f7:29:b2:10:ed:e2:54:72:c0:
         97:bc:2c:02:3f:90:db:91:58:c5:27:ba:3b:d6:09:be:4e:18:
         b8:35:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:14 2026 by rpki-client