Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/323430363a643763303a3a2f33322d3438203d3e203338303038.roa
File:                     323430363a643763303a3a2f33322d3438203d3e203338303038.roa (raw, json)
Hash identifier:          uMtY/GmVL72No2RBdo9smGFIzi+iIhlXKaPRp7r/VTo=
Subject key identifier:   96:52:6A:9B:C1:6E:8D:65:6A:31:8F:ED:08:5F:BA:71:A3:70:2D:4C
Certificate issuer:       /CN=8F1212A19454D2A49786359CAC45368F821417D6
Certificate serial:       5B99995D98E513791F95639099DBD7B448390D2A
Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CSPTEK/0/323430363a643763303a3a2f33322d3438203d3e203338303038.roa
Signing time:             Mon 11 May 2026 17:18:50 +0000
ROA not before:           Mon 11 May 2026 17:13:50 +0000
ROA not after:            Mon 10 May 2027 17:18:50 +0000
asID:                     38008
IP address blocks:        2406:d7c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:99:99:5d:98:e5:13:79:1f:95:63:90:99:db:d7:b4:48:39:0d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6
        Validity
            Not Before: May 11 17:13:50 2026 GMT
            Not After : May 10 17:18:50 2027 GMT
        Subject: CN=96526A9BC16E8D656A318FED085FBA71A3702D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:e7:7c:d2:3d:42:8e:7e:80:e1:0e:26:3b:
                    c6:fc:0b:2c:43:8f:3b:b7:22:39:94:7a:79:f4:9e:
                    18:6e:70:60:50:d0:dd:43:6b:2b:6e:bb:b6:0a:d4:
                    db:ac:0e:c7:da:17:9c:3a:77:62:dc:1a:9b:c5:93:
                    7c:ce:02:76:08:16:14:7e:c6:5d:26:dd:4e:fe:03:
                    8d:43:ce:39:77:e6:0b:32:99:b4:2d:0e:b2:71:4d:
                    6f:41:ee:79:2e:43:18:23:14:25:17:a8:28:f3:3d:
                    c8:88:66:5c:0d:04:0a:e6:9c:fb:54:b9:1c:98:ef:
                    93:e1:70:2a:d5:ad:4d:4c:fe:5e:ec:ef:66:70:95:
                    30:02:9c:de:f9:9b:d1:db:c9:e6:42:30:58:f0:a7:
                    1c:5d:9b:49:bd:00:e1:29:5d:26:af:87:ac:42:b1:
                    aa:50:52:f3:20:da:02:37:0a:01:14:eb:8a:1b:58:
                    00:53:d6:9d:b3:fb:d1:ed:bb:55:d4:65:0a:ee:38:
                    f4:b4:35:1e:f8:1d:92:ea:0b:da:1a:e7:95:c5:e8:
                    fa:2e:1c:51:dc:2c:a2:2b:aa:10:c9:bf:39:d0:84:
                    9e:ee:5f:a2:f9:e5:4d:e8:7d:7b:b4:21:32:9e:c8:
                    29:39:66:99:6c:5e:02:69:ec:c3:36:fa:5d:68:e7:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:52:6A:9B:C1:6E:8D:65:6A:31:8F:ED:08:5F:BA:71:A3:70:2D:4C
            X509v3 Authority Key Identifier:
                keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/323430363a643763303a3a2f33322d3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:32:5f:c3:59:5e:cc:ff:af:52:a9:25:6b:73:1b:7d:f9:bf:
         43:71:58:69:ef:03:b6:c7:f2:0b:d8:78:dc:e0:f8:61:98:04:
         a7:6b:11:28:18:f1:df:59:94:3b:5e:c5:99:aa:f1:b8:11:44:
         f6:89:96:96:05:fc:ee:ae:c4:d7:3d:50:25:fb:e4:87:0d:0e:
         25:c7:c1:33:ec:18:19:dc:ea:1d:d6:ab:7d:aa:80:9c:7a:bb:
         e0:7e:a4:44:58:74:3c:e3:34:33:ff:47:9e:c3:ac:16:ba:68:
         86:33:ad:e3:24:c3:e0:28:96:49:da:83:44:bb:81:d7:b3:f5:
         4c:fa:2b:7a:72:ab:0d:68:17:b5:32:a4:d1:91:14:1b:b6:2f:
         c5:4d:5e:82:c3:49:c6:f9:6a:84:e3:c2:97:d9:6c:fe:d7:45:
         79:a2:51:04:ae:c6:f3:61:77:94:b9:7f:7f:81:d1:57:49:65:
         3d:1c:94:29:7d:ce:c0:09:bf:02:5c:ee:2a:e1:32:44:8a:39:
         4a:33:57:0e:12:17:06:49:8b:10:ea:c9:53:02:5a:aa:28:28:
         e6:4d:81:69:f0:4c:75:45:b6:23:3c:1f:56:69:03:4b:bb:95:
         08:13:2a:6a:ce:2f:70:b3:cd:81:db:bc:c5:21:65:dd:e2:a8:
         3a:93:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----