Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa
File:                     3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa (raw, json)
Hash identifier:          ICVXFGJ9lMHRN69DsRxhyvyG84k8PzJafwcpKMd81Og=
Subject key identifier:   BF:CE:A5:CC:E4:66:77:AF:E1:FF:FD:58:08:AC:DC:AB:20:35:34:48
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       2575AECE7A93582FFEDCCC037808DD2290C1FACF
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa
Signing time:             Mon 11 May 2026 17:36:22 +0000
ROA not before:           Mon 11 May 2026 17:31:22 +0000
ROA not after:            Mon 10 May 2027 17:36:22 +0000
asID:                     131662
IP address blocks:        103.135.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:75:ae:ce:7a:93:58:2f:fe:dc:cc:03:78:08:dd:22:90:c1:fa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: May 11 17:31:22 2026 GMT
            Not After : May 10 17:36:22 2027 GMT
        Subject: CN=BFCEA5CCE46677AFE1FFFD5808ACDCAB20353448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:22:01:1c:ab:7f:2a:5f:25:6c:d2:6e:36:
                    b8:7e:4b:0b:50:d5:a0:33:b0:81:72:52:3b:68:15:
                    4c:52:43:47:ee:5c:37:e6:4e:8c:a2:f0:ae:9d:85:
                    19:0d:e2:bc:c4:c7:14:36:1e:80:e3:db:99:5d:bb:
                    7c:43:8e:05:6d:81:6c:41:b3:13:59:f8:8b:95:c0:
                    9f:1d:91:b0:a5:97:cc:2d:66:d2:46:2c:0a:c4:be:
                    60:72:f5:55:ea:a3:bd:5b:73:ce:03:ac:a7:d4:17:
                    04:4e:b6:45:c3:b5:ec:b9:58:3a:b9:1c:eb:51:09:
                    60:ce:e4:07:da:51:e8:01:be:dc:9d:66:01:ed:ff:
                    62:87:17:68:4a:e7:25:e8:3a:be:ed:42:51:ab:02:
                    1a:b6:63:a7:6d:72:05:b1:8b:09:f8:92:fa:8c:34:
                    da:70:23:33:6a:93:f4:ac:b6:34:f8:e0:fc:53:fc:
                    f1:3b:1c:eb:ac:c3:38:c3:93:55:6c:4d:a1:d5:77:
                    c8:17:91:2d:f4:b8:a8:2a:d4:83:84:25:bb:3c:4a:
                    91:8e:b6:45:bc:a4:39:05:0c:13:4f:73:dc:fd:62:
                    59:35:dd:ac:e0:bf:a3:4e:cf:ef:b3:b6:f3:7e:60:
                    44:37:a0:bd:b5:7c:4b:3d:35:70:31:81:27:78:2d:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CE:A5:CC:E4:66:77:AF:E1:FF:FD:58:08:AC:DC:AB:20:35:34:48
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:73:aa:b6:fb:1b:70:ff:a3:8b:17:ec:38:74:47:54:56:
         8b:e4:1c:11:49:a3:3d:c5:06:eb:58:a8:84:17:3a:8d:32:b8:
         a0:f4:5e:2c:75:ae:11:38:ae:e9:6f:50:50:06:a8:77:cf:bd:
         48:5c:b8:c7:78:fb:73:2a:c9:eb:40:5e:38:44:3e:55:84:2f:
         57:ff:65:f5:ec:0d:06:b2:d9:be:5d:2f:1a:c9:d8:2f:ea:46:
         7e:fe:a2:f6:29:31:74:04:f7:80:26:53:a8:cf:99:01:3a:a9:
         2b:0c:20:46:c0:7d:d7:6b:52:28:40:ce:75:11:41:40:6f:25:
         0c:e8:3c:b9:84:16:42:c2:df:a4:49:e5:78:bd:c3:f7:d7:a2:
         71:53:bf:87:1e:5b:5e:df:84:31:15:2c:57:94:cd:83:f5:61:
         e0:38:e1:c7:45:29:00:70:f0:6f:e1:8a:5c:20:85:34:85:88:
         31:25:ef:c2:25:e4:fe:b9:a2:36:10:93:a4:54:8a:7d:fe:11:
         06:46:6d:0b:e7:59:5a:8d:fd:6d:67:16:b6:86:72:e9:4b:2f:
         29:1a:24:f9:d2:6f:6d:bf:c4:a2:7d:e6:4f:d9:99:52:b4:36:
         64:3b:af:b6:a0:b4:2c:35:d3:c8:ed:27:f0:64:e0:d6:3c:d9:
         ca:c9:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:32 2026 by rpki-client