Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa
File:                     3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          oEX0nga4YWiRVwCH+XEdCpAnEZhmruGPpOo/+P0AeeY=
Subject key identifier:   4C:3A:A4:69:9B:D3:69:63:24:A8:B3:68:03:33:81:E8:D4:53:CE:0B
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       5E23BACAF24B12C1E08BDD299F4B91DE6539F3A0
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 11 May 2026 17:44:49 +0000
ROA not before:           Mon 11 May 2026 17:39:49 +0000
ROA not after:            Mon 10 May 2027 17:44:49 +0000
asID:                     16509
IP address blocks:        103.123.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:23:ba:ca:f2:4b:12:c1:e0:8b:dd:29:9f:4b:91:de:65:39:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: May 11 17:39:49 2026 GMT
            Not After : May 10 17:44:49 2027 GMT
        Subject: CN=4C3AA4699BD3696324A8B368033381E8D453CE0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:20:d7:4e:2e:82:6a:f0:1b:c3:50:5f:2a:
                    8b:6a:a9:6d:1b:12:9d:58:40:62:6a:45:1f:5a:c5:
                    7f:60:25:ed:ea:3e:2b:c8:a4:70:b9:7e:04:34:9e:
                    f8:8b:b0:5f:6e:83:ab:56:5d:05:23:96:19:5b:52:
                    24:87:a1:d3:7e:4a:1f:9e:b4:1d:ea:8c:da:02:d9:
                    6c:f8:9f:5e:ec:e0:bc:6d:85:8f:bb:1d:66:51:cc:
                    2c:12:5f:ae:b3:d7:8b:a2:fc:0f:0e:4b:50:5a:2f:
                    d5:ca:e1:40:aa:03:04:6d:6f:d5:bf:13:c7:5d:9a:
                    a7:fc:7d:26:c1:85:b1:1c:eb:be:cc:03:51:a6:b2:
                    23:a9:95:92:69:28:77:3d:0c:72:ff:5f:44:af:2c:
                    e1:63:5b:e8:84:eb:31:9c:0c:17:14:00:f4:e2:0b:
                    83:fd:93:77:35:bf:1f:b6:1c:4e:e7:05:69:b1:61:
                    05:04:8a:9e:5a:c4:56:89:58:a5:62:8e:b0:12:65:
                    f4:8d:b0:c2:79:f6:10:45:28:3d:01:21:2b:e2:5a:
                    6d:83:47:b1:18:61:f5:d1:1e:dc:72:52:cb:e9:a6:
                    ae:63:6f:2f:ff:23:ed:53:2c:f2:a9:c9:08:14:58:
                    4f:79:7b:4e:73:2d:04:cc:45:7d:54:fa:fa:fa:54:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:A4:69:9B:D3:69:63:24:A8:B3:68:03:33:81:E8:D4:53:CE:0B
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1b:28:03:41:ba:a6:78:66:ca:73:44:df:c2:5d:67:c7:c7:
         43:ff:e3:7b:85:2e:fe:45:f1:15:49:86:c0:96:66:87:3c:e4:
         75:0f:bb:d7:09:35:ec:a3:23:e7:56:25:bf:c1:f0:4e:d4:de:
         8b:27:4f:a6:45:0d:54:e8:67:13:e3:c4:c9:52:4a:44:8f:ff:
         04:f9:f8:dd:af:c5:e2:bc:40:fa:a0:ab:d7:31:0f:2a:f1:12:
         ad:2a:c5:85:f0:dc:fa:db:37:63:48:dd:e3:24:e9:3f:c5:d4:
         d0:8d:22:b4:b0:17:f4:aa:a2:19:bd:11:b4:3d:7e:c8:43:69:
         1e:e3:6a:75:9e:ed:eb:5a:98:36:4b:ed:23:51:eb:ac:7c:4c:
         f7:67:d6:62:f5:37:d2:45:88:eb:42:4f:ef:fa:37:e1:5e:82:
         e6:df:b7:32:b3:87:e6:78:2d:53:41:ac:dc:8f:fb:c2:81:66:
         dd:d0:f6:01:3b:90:9c:62:3b:1e:2c:08:f6:e4:fa:da:2a:0f:
         fe:27:5f:8e:82:87:83:d8:02:0e:5f:a3:44:48:02:7b:c1:64:
         06:d4:00:44:83:a8:34:c2:7a:68:09:44:9e:6b:51:2c:3f:a9:
         91:a0:cf:ae:6d:26:ac:d5:db:23:4b:c8:67:54:78:2a:c7:e4:
         01:ff:c4:40
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUXiO6yvJLEsHgi90pn0uR3mU586AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU5RTA2NTJGQ0JBQzg5NTA2MUE1N0ZFMDU2NkNGMzUz
RjNFNDNDQTAeFw0yNjA1MTExNzM5NDlaFw0yNzA1MTAxNzQ0NDlaMDMxMTAvBgNV
BAMTKDRDM0FBNDY5OUJEMzY5NjMyNEE4QjM2ODAzMzM4MUU4RDQ1M0NFMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRyDXTi6CavAbw1BfKotqqW0b
Ep1YQGJqRR9axX9gJe3qPivIpHC5fgQ0nviLsF9ug6tWXQUjlhlbUiSHodN+Sh+e
tB3qjNoC2Wz4n17s4LxthY+7HWZRzCwSX66z14ui/A8OS1BaL9XK4UCqAwRtb9W/
E8ddmqf8fSbBhbEc677MA1GmsiOplZJpKHc9DHL/X0SvLOFjW+iE6zGcDBcUAPTi
C4P9k3c1vx+2HE7nBWmxYQUEip5axFaJWKVijrASZfSNsMJ59hBFKD0BISviWm2D
R7EYYfXRHtxyUsvppq5jby//I+1TLPKpyQgUWE95e05zLQTMRX1U+vr6VEc7AgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUTDqkaZvTaWMkqLNoAzOB6NRTzgswHwYDVR0j
BBgwFoAUBZ4GUvy6yJUGGlf+BWbPNT8+Q8owDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREVOUEFJ
Ty8wLzA1OUUwNjUyRkNCQUM4OTUwNjFBNTdGRTA1NjZDRjM1M0YzRTQzQ0EuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDU5RTA2NTJGQ0JBQzg5NTA2MUE1N0ZFMDU2
NkNGMzUzRjNFNDNDQS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RFTlBBSU8vMC8zMTMwMzMyZTMx
MzIzMzJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjM1MzAzOS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAGd7gjANBgkqhkiG9w0BAQsFAAOCAQEAgBsoA0G6pnhmynNE38Jd
Z8fHQ//je4Uu/kXxFUmGwJZmhzzkdQ+71wk17KMj51Ylv8HwTtTeiydPpkUNVOhn
E+PEyVJKRI//BPn43a/F4rxA+qCr1zEPKvESrSrFhfDc+ts3Y0jd4yTpP8XU0I0i
tLAX9KqiGb0RtD1+yENpHuNqdZ7t61qYNkvtI1HrrHxM92fWYvU30kWI60JP7/o3
4V6C5t+3MrOH5ngtU0Gs3I/7woFm3dD2ATuQnGI7HiwI9uT62ioP/idfjoKHg9gC
Dl+jREgCe8FkBtQARIOoNMJ6aAlEnmtRLD+pkaDPrm0mrNXbI0vIZ1R4KsfkAf/E
QA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:25 2026 by rpki-client