Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa
File:                     3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=
Subject key identifier:   3B:C5:F5:42:C7:D8:23:B9:5E:EC:7B:11:D4:D2:7E:D5:DC:43:FB:A2
Certificate issuer:       /CN=3D576C4841082805B3CDBD7337F3963A8833174B
Certificate serial:       3C370D2EE4F0A8F7C43EC562BDAE1DD29CB6A3A3
Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 11 May 2026 17:06:55 +0000
ROA not before:           Mon 11 May 2026 17:01:55 +0000
ROA not after:            Mon 10 May 2027 17:06:55 +0000
asID:                     16509
IP address blocks:        103.119.213.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:37:0d:2e:e4:f0:a8:f7:c4:3e:c5:62:bd:ae:1d:d2:9c:b6:a3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B
        Validity
            Not Before: May 11 17:01:55 2026 GMT
            Not After : May 10 17:06:55 2027 GMT
        Subject: CN=3BC5F542C7D823B95EEC7B11D4D27ED5DC43FBA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:2e:9c:60:3f:90:10:e9:b2:ef:34:56:9e:
                    d5:cf:10:63:fc:a4:73:53:ed:f4:4b:2f:89:38:57:
                    2a:47:24:46:1a:94:a9:65:e9:c5:68:91:06:4b:00:
                    fa:5b:21:3a:ee:a8:9b:1f:f1:2d:75:7a:60:35:8c:
                    44:05:ae:ab:55:20:b0:76:ce:0b:41:e6:57:d2:7c:
                    af:bb:a0:8a:7f:fc:35:d5:8b:3b:e3:fa:9d:80:4b:
                    2f:d7:35:85:e9:ca:01:83:48:c9:3c:69:97:70:45:
                    32:96:0e:a2:99:69:71:2c:46:70:41:23:d0:ab:64:
                    c6:7a:d5:7e:09:ab:04:3c:2b:24:27:65:29:6f:f3:
                    da:8b:3c:60:14:95:57:ac:70:45:53:8a:40:b9:72:
                    2a:06:1e:65:ae:2c:ec:80:a5:b9:35:69:4b:5b:9e:
                    13:f9:2b:db:8b:6f:f3:e1:c2:96:2d:15:8f:6c:63:
                    84:12:d5:0a:9a:16:22:25:80:74:46:a0:fb:44:91:
                    59:e0:e1:c6:ca:90:24:34:57:91:c6:aa:36:b8:15:
                    ce:89:2e:5f:27:a8:64:4e:a8:94:27:98:3e:40:76:
                    78:dc:a1:d6:21:d3:71:34:5b:ff:8a:3f:81:2a:99:
                    46:d6:64:14:dd:6b:91:fb:89:97:aa:8a:b1:62:da:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C5:F5:42:C7:D8:23:B9:5E:EC:7B:11:D4:D2:7E:D5:DC:43:FB:A2
            X509v3 Authority Key Identifier:
                keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:b9:bc:eb:36:a6:29:d8:e2:36:e4:4f:73:e8:4f:39:44:0a:
         5a:31:70:e3:e5:59:07:76:e6:b4:60:66:45:0c:14:81:0d:9c:
         f0:7a:7c:af:fe:49:39:91:5d:44:20:f9:42:1e:fd:4b:37:84:
         03:08:1c:85:8c:22:38:b8:fe:19:cd:1c:04:14:d5:ab:ed:aa:
         2a:11:20:50:5d:ba:b0:d3:8e:e4:6a:59:6d:65:a2:b1:00:c7:
         6e:15:c1:be:28:f0:58:65:5d:55:6d:43:46:bd:69:17:ab:11:
         e9:78:ec:3e:e6:20:c3:dd:47:b7:f4:38:f5:f0:29:2f:65:45:
         72:92:19:18:4b:ab:77:b7:34:fa:c6:5d:3d:3b:d9:92:70:15:
         ce:fc:06:98:fb:9f:be:b5:42:8e:bd:b7:a7:92:81:df:0a:be:
         2a:1c:ab:32:6b:80:d7:73:83:7c:bc:c6:32:bd:73:41:0f:21:
         c1:d2:80:7b:8b:b2:99:15:a5:70:bf:c5:78:b0:c7:11:60:b6:
         d7:26:44:9b:c8:9b:67:a8:a1:da:a9:7f:ca:65:48:e5:e4:5a:
         ad:51:75:c4:f5:c8:65:ff:b1:18:9a:46:4a:df:cd:2c:ad:b7:
         3f:cb:f2:6e:5a:73:f1:2b:44:27:c3:3a:4d:69:b8:20:97:76:
         d4:74:59:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:59 2026 by rpki-client