Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS24155.roa
File:                     AS24155.roa (raw, json)
Hash identifier:          B6Wt7WZNXH4dszSEhiREgWBhCZgaFDS2V1pAm4aHp10=
Subject key identifier:   70:94:D9:F4:03:5A:5E:8A:71:FC:26:98:9F:46:3D:8F:91:39:FE:F6
Certificate issuer:       /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial:       69AEF629171BFE0AA3B16A54862EC577A1E04A72
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FET/0/AS24155.roa
Signing time:             Mon 11 May 2026 17:34:36 +0000
ROA not before:           Mon 11 May 2026 17:29:36 +0000
ROA not after:            Mon 10 May 2027 17:34:36 +0000
asID:                     24155
IP address blocks:        203.201.32.0/20 maxlen: 24
                          203.207.32.0/20 maxlen: 24
                          210.63.224.0/21 maxlen: 24
                          2404:0:6000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ae:f6:29:17:1b:fe:0a:a3:b1:6a:54:86:2e:c5:77:a1:e0:4a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
        Validity
            Not Before: May 11 17:29:36 2026 GMT
            Not After : May 10 17:34:36 2027 GMT
        Subject: CN=7094D9F4035A5E8A71FC26989F463D8F9139FEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bf:ae:26:2b:d1:bb:fb:85:c6:5d:3d:79:46:
                    2e:9f:98:98:eb:be:d3:a5:d9:3a:a1:d8:9e:cd:70:
                    c2:bb:f9:d4:74:a5:fe:2b:0a:81:2a:5e:16:f4:c2:
                    2a:2a:22:3d:2f:b0:90:e4:86:19:f8:90:0c:17:96:
                    fc:5b:cf:f0:38:35:c2:81:de:ad:2d:3f:7f:83:ff:
                    d4:5c:c5:14:e8:6b:ba:5f:86:af:ea:8c:e0:3d:1f:
                    24:7b:bb:31:a6:52:2f:7c:fc:61:72:0d:fc:c4:dd:
                    38:d1:90:60:3d:4c:d8:77:73:0d:ed:10:cf:46:e2:
                    ed:9b:77:24:4b:4e:02:bb:b9:c2:db:ed:ca:2a:22:
                    ec:bd:8d:40:e4:5c:78:1e:80:28:df:08:c3:47:96:
                    23:62:72:e4:4e:dd:15:90:7d:df:3e:7f:e8:2f:17:
                    9c:96:8c:23:22:c0:53:fc:1e:a9:8d:f9:e2:82:0e:
                    ea:a1:1c:c2:6f:70:ed:35:02:f5:ba:23:88:d3:e4:
                    70:3c:fb:cf:94:9b:03:ec:43:a8:fb:5b:6a:c4:35:
                    d0:36:ad:af:fc:a4:7d:44:2e:a9:7a:ee:35:a4:2e:
                    b1:ac:75:2a:31:bb:8e:64:f8:54:85:0c:f0:e0:d7:
                    75:f5:94:ec:66:b9:fc:42:a3:d8:f8:09:bb:0f:b7:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:94:D9:F4:03:5A:5E:8A:71:FC:26:98:9F:46:3D:8F:91:39:FE:F6
            X509v3 Authority Key Identifier:
                keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS24155.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.32.0/20
                  203.207.32.0/20
                  210.63.224.0/21
                IPv6:
                  2404:0:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:31:7b:f8:0d:c8:5a:67:f9:07:25:1e:84:bc:7a:4c:8b:
         13:e7:ee:5b:a6:51:a2:25:0a:64:5a:22:21:e0:f9:29:83:f1:
         a1:28:23:9b:db:1c:6b:7f:f0:78:9e:dd:8b:bd:1f:da:ec:c4:
         cb:35:2f:23:2a:e7:00:53:e5:87:fe:fe:3d:94:1c:2d:7b:20:
         34:d8:a9:14:6a:0f:58:74:29:d1:8a:43:fc:29:6f:02:4b:52:
         7f:79:e7:e9:70:cb:bd:65:a5:27:3b:fd:bd:d7:7d:74:61:3f:
         a3:2a:20:7e:d6:fc:5a:5a:b5:23:ab:39:c7:68:98:81:d7:0d:
         2d:67:a4:54:4e:0e:a5:b7:f1:e6:f4:57:d3:71:40:80:99:93:
         25:af:31:4b:97:80:06:b4:5a:e8:4c:58:9e:32:af:32:95:6c:
         c4:29:7a:c9:45:b4:98:50:72:9b:13:36:bc:25:c9:36:e1:8a:
         17:3e:30:77:cf:4b:cb:4d:d8:92:b5:02:d2:74:eb:14:b6:70:
         4d:9d:8e:45:97:3e:b5:cf:df:81:63:6a:db:1f:28:13:bb:5f:
         a0:3e:f2:60:56:67:b5:be:51:87:9d:f7:d4:02:83:53:4f:41:
         a9:0c:47:30:60:36:b5:fd:27:a8:48:df:38:5e:2c:66:36:f2:
         5d:a0:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:32 2026 by rpki-client