Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa
File:                     3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa (raw, json)
Hash identifier:          hiUuE+JZDNJG0Ktu2U25SQe8A2H7nBcP9/QC/B02NR0=
Subject key identifier:   2F:97:91:E0:E5:89:F0:3B:A0:65:2B:8F:EC:35:8A:1B:4E:EC:D2:F0
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       38566C3791131DEEFF21E7A477FEB9F828669945
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa
Signing time:             Mon 11 May 2026 17:36:23 +0000
ROA not before:           Mon 11 May 2026 17:31:23 +0000
ROA not after:            Mon 10 May 2027 17:36:23 +0000
asID:                     138145
IP address blocks:        103.135.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:56:6c:37:91:13:1d:ee:ff:21:e7:a4:77:fe:b9:f8:28:66:99:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: May 11 17:31:23 2026 GMT
            Not After : May 10 17:36:23 2027 GMT
        Subject: CN=2F9791E0E589F03BA0652B8FEC358A1B4EECD2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:99:ef:05:06:a7:7b:76:00:b8:0f:26:bb:
                    58:ca:b9:85:8e:2e:67:26:54:e1:07:8f:57:86:36:
                    6d:2c:17:27:5d:9d:b2:89:d2:3a:0c:12:10:2a:7c:
                    28:9a:9a:14:7f:0a:14:68:3f:4a:7b:65:8b:32:21:
                    4a:92:f7:dd:f3:49:97:97:4a:a8:e4:16:f1:93:39:
                    fc:b3:b5:3f:a5:dd:53:2a:0b:7e:b8:bf:33:7b:e2:
                    e1:d5:1c:2d:e8:42:8f:80:0b:21:4f:d9:82:42:f1:
                    21:3f:c5:dd:ca:5f:9a:96:de:ad:35:b0:df:94:b7:
                    c4:11:24:8f:64:b9:34:f3:aa:76:5d:27:39:75:6a:
                    58:82:55:6b:05:c4:f3:88:a8:0b:ed:ee:53:d6:ff:
                    c0:72:65:7d:a5:48:94:60:61:88:2a:19:b1:5f:76:
                    5f:99:df:0a:09:6b:f1:22:11:42:4e:09:fe:91:69:
                    49:e0:45:ff:07:25:e3:09:ba:9e:7e:b5:18:ce:5c:
                    66:d7:6c:57:22:4b:90:e9:7b:99:e1:22:3b:e4:81:
                    62:b4:a1:b4:cf:c7:48:1a:dc:b6:12:bf:02:17:cd:
                    97:47:0d:d7:6d:fa:f8:d2:72:cd:4b:1d:61:d2:09:
                    73:fb:5d:25:54:67:e4:22:94:d3:0b:f9:c7:70:b3:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:97:91:E0:E5:89:F0:3B:A0:65:2B:8F:EC:35:8A:1B:4E:EC:D2:F0
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:d0:38:98:9f:22:7a:c8:f0:80:02:43:e4:d8:ed:9f:10:f0:
         bc:61:44:bc:ba:45:49:3b:e0:84:63:87:0e:8c:ba:d6:97:82:
         8b:5c:38:9b:83:90:27:fc:98:2e:58:ea:8d:83:d8:82:91:36:
         8e:06:58:59:3f:3b:67:05:06:ba:c6:11:2c:a2:29:61:8b:73:
         eb:28:8d:7f:f0:e7:df:4b:55:84:f4:f0:54:73:3c:26:17:3c:
         f9:94:99:38:e9:ed:50:30:21:f9:37:08:f8:9f:90:79:f7:87:
         b2:18:d7:38:f6:d8:b8:53:07:8c:b9:32:3b:7e:a5:fe:c9:08:
         61:bd:41:ab:11:eb:e6:a1:09:17:4f:0d:44:af:37:a9:d3:7f:
         0f:a7:82:f8:34:e7:de:06:aa:70:2a:ea:5c:4f:16:7f:90:77:
         eb:b5:27:e9:6e:25:77:8d:0f:ac:88:33:ba:d5:6d:70:82:2c:
         e4:8a:c3:90:60:c9:89:eb:1a:f3:f4:1d:bb:46:91:25:c0:1a:
         5e:e8:f1:ee:73:70:6d:8d:8d:77:43:b8:f9:a3:fb:16:1d:f4:
         aa:57:9b:9d:54:9c:ae:db:4d:52:af:e7:cb:d0:c3:e8:50:89:
         9c:38:de:de:1c:08:a9:03:21:75:47:ab:60:8c:73:15:4e:2d:
         29:e6:1e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:48 2026 by rpki-client