Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS10133.roa
File:                     AS10133.roa (raw, json)
Hash identifier:          47zvRVIR2WbvgxtxFbdSuq8znJ1SAW86/RViAR4ZUbo=
Subject key identifier:   F1:55:7C:9E:FE:73:EE:E1:FC:F8:F9:BB:CB:A4:1A:05:8E:A1:23:83
Certificate issuer:       /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
Certificate serial:       1812AF787E19B244A61AB795584448D2B9698966
Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS10133.roa
Signing time:             Mon 11 May 2026 17:17:33 +0000
ROA not before:           Mon 11 May 2026 17:12:33 +0000
ROA not after:            Mon 10 May 2027 17:17:33 +0000
asID:                     10133
IP address blocks:        203.163.222.0/23 maxlen: 24
                          2406:d400::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:12:af:78:7e:19:b2:44:a6:1a:b7:95:58:44:48:d2:b9:69:89:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314
        Validity
            Not Before: May 11 17:12:33 2026 GMT
            Not After : May 10 17:17:33 2027 GMT
        Subject: CN=F1557C9EFE73EEE1FCF8F9BBCBA41A058EA12383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:23:7a:77:95:a9:5c:31:f4:e6:50:e1:4b:
                    6b:10:b8:ec:2a:d8:5a:80:0e:89:3c:0a:a4:36:2c:
                    4e:2a:af:41:3d:bb:97:fd:80:e0:25:14:01:ce:cc:
                    b5:ce:1a:95:df:33:f8:ce:b1:f0:fe:1c:e0:7f:98:
                    7a:c2:d8:1c:80:95:80:8a:2d:2d:e0:30:8c:39:7d:
                    ce:05:08:6e:16:93:cb:41:77:ea:e8:39:1f:6f:85:
                    a5:81:89:99:14:12:e5:df:ee:73:f9:a1:9f:bd:e0:
                    7b:42:98:2d:e8:07:4e:bd:13:35:51:f8:de:9e:83:
                    7c:93:ea:88:85:ef:e6:fd:83:eb:50:73:d6:b7:c3:
                    0e:41:40:e1:7b:ac:ba:7d:bf:b2:b5:71:a3:fa:82:
                    76:c5:40:7d:da:43:dd:52:78:13:9a:53:4f:c4:83:
                    f6:0f:1a:fc:2e:f4:6b:94:db:e0:ae:7d:f7:9f:b3:
                    2a:9c:18:bf:72:5c:11:50:d1:a0:f4:3c:d7:07:5a:
                    96:fc:bd:12:bb:f9:48:2b:9e:64:f1:27:2a:74:4e:
                    61:50:d3:1b:83:eb:28:f8:f6:d7:1b:78:7e:5b:38:
                    7c:fb:7a:39:13:2f:51:8c:3e:de:04:3d:b8:06:6a:
                    a6:4a:3c:77:fe:a8:18:8d:43:d3:14:ef:97:cc:05:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:55:7C:9E:FE:73:EE:E1:FC:F8:F9:BB:CB:A4:1A:05:8E:A1:23:83
            X509v3 Authority Key Identifier:
                keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS10133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.163.222.0/23
                IPv6:
                  2406:d400::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:46:c0:38:bc:d0:3f:4e:99:eb:b9:24:7e:f9:22:7d:ec:db:
         93:0b:a9:79:f2:85:03:89:4e:e9:f9:2f:89:08:fb:76:8c:16:
         71:26:32:ba:27:d4:bf:f5:03:4f:5d:d3:c1:d3:67:33:8d:dd:
         bc:f4:51:cd:e2:6b:41:1a:5f:13:c0:fb:de:26:01:ea:59:c7:
         fd:6a:17:3c:db:1f:a6:04:d3:3a:96:58:e9:32:05:d1:30:60:
         27:4d:43:e5:32:b3:4b:8c:ee:ef:c3:db:37:99:e3:98:af:6f:
         d3:bf:a3:26:b5:76:d5:d9:1b:8a:d9:c0:42:4a:15:75:31:f1:
         a2:6e:79:f2:e4:fa:9f:96:bc:ea:6d:82:fd:c9:66:f2:aa:48:
         a6:16:93:9a:6b:bb:84:5b:1c:d4:5b:ae:9a:17:51:a4:05:97:
         f7:c1:a0:e2:4c:32:f7:df:9a:c7:6c:aa:46:9a:da:7e:19:31:
         c6:f4:2b:89:b3:60:77:95:6f:da:15:f7:58:01:99:f4:48:71:
         80:a0:31:c3:4b:ba:18:3b:05:7a:2d:60:47:4b:9e:50:db:a4:
         d1:73:72:9d:a6:e9:42:9e:ed:8b:8a:c8:e2:25:0d:c5:9f:bc:
         92:76:30:1a:ea:d2:62:04:94:27:a1:a2:d1:16:d4:a6:ed:e0:
         ea:4c:0f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----