Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS7539.roa
File:                     AS7539.roa (raw, json)
Hash identifier:          lUFNDzGgGVAFEbEBGwiSfQup6Zafx2OuCvROzt5cEzs=
Subject key identifier:   A9:43:F0:5F:77:D8:5F:44:0D:AE:E5:CE:C9:A7:E4:FF:70:54:09:07
Certificate issuer:       /CN=71FA20FC269CE9805B2C67E59B357AA684246D10
Certificate serial:       0CDAE62A0F9F1DFD210A6C26C5152CA66A1B129D
Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FET/0/AS7539.roa
Signing time:             Mon 11 May 2026 17:34:44 +0000
ROA not before:           Mon 11 May 2026 17:29:44 +0000
ROA not after:            Mon 10 May 2027 17:34:44 +0000
asID:                     7539
IP address blocks:        210.200.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:e6:2a:0f:9f:1d:fd:21:0a:6c:26:c5:15:2c:a6:6a:1b:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10
        Validity
            Not Before: May 11 17:29:44 2026 GMT
            Not After : May 10 17:34:44 2027 GMT
        Subject: CN=A943F05F77D85F440DAEE5CEC9A7E4FF70540907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:55:b5:3d:8b:18:9c:23:fc:5e:d4:4f:a8:
                    a4:51:91:d1:15:e3:5d:28:c7:ae:b3:aa:b4:a3:97:
                    14:e4:12:69:de:db:19:0b:48:d8:59:b4:14:f7:9e:
                    a8:9c:2c:70:2b:be:95:cc:05:73:86:4a:cc:0a:3a:
                    f6:5c:58:19:c4:00:a9:ca:63:22:8b:54:6d:6d:4a:
                    f5:aa:34:0f:a8:97:70:07:26:96:40:15:f5:79:23:
                    cf:c1:d2:3f:a0:8b:5b:41:95:25:5e:7a:36:62:32:
                    7b:7d:c4:69:76:a4:1c:3f:b3:56:bb:d1:b1:62:c1:
                    6f:5b:6c:be:57:88:22:05:c4:29:a9:dd:a7:7e:64:
                    f3:3a:d0:ca:dd:ea:62:7c:56:1c:ad:74:6b:56:28:
                    c6:65:b9:2e:dd:15:61:3a:b1:64:0c:f1:d6:20:27:
                    37:8a:71:35:77:89:61:9f:96:b5:68:d3:c4:0e:7d:
                    15:4b:fa:6b:a1:71:60:db:74:37:f1:17:11:3f:9f:
                    51:1d:c0:ac:6c:a1:83:e1:aa:5f:42:9b:70:4d:58:
                    b5:3c:c6:a3:d4:74:d5:49:cd:6b:5f:45:01:33:e5:
                    e9:08:59:ab:5f:a0:60:43:3c:08:a6:92:ab:14:1b:
                    16:0a:91:49:be:cb:2b:da:1a:22:66:e8:f9:4b:57:
                    0c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:F0:5F:77:D8:5F:44:0D:AE:E5:CE:C9:A7:E4:FF:70:54:09:07
            X509v3 Authority Key Identifier:
                keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS7539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.200.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:7b:73:af:da:4d:2f:83:c6:c3:f0:54:bf:c1:02:07:03:
         7c:11:a0:e5:a5:51:f0:4d:b6:5f:6b:23:19:df:d4:78:03:c9:
         54:b0:63:f0:85:14:95:24:0b:cf:82:58:80:fd:a7:1a:03:7c:
         5e:57:81:ea:2b:10:c1:e9:77:1e:ea:a7:a5:54:2c:6d:39:90:
         eb:70:d8:9c:07:cd:de:16:3e:ae:ba:ee:e6:c1:7e:e4:a8:13:
         5b:f1:70:e9:a2:90:d8:21:63:3e:de:b3:c8:78:3e:93:b9:d1:
         58:9e:b5:bd:77:66:34:79:03:5e:80:29:4a:7b:12:16:6f:db:
         4f:f7:13:6b:9e:be:ad:fa:bd:93:b3:33:5c:79:1d:7b:fa:b9:
         c5:c1:1f:b7:62:ad:02:51:60:62:de:e5:bc:7d:9b:9b:06:60:
         fa:a6:ef:bc:6b:12:cc:58:92:a8:5a:af:50:93:a7:42:eb:3f:
         b5:fc:3c:90:38:0d:28:f0:9d:98:f9:46:fb:62:3e:4b:a9:5c:
         ae:ae:ae:38:49:c8:2d:36:be:1d:ec:73:19:cf:53:64:ec:dc:
         e7:a4:d4:1c:02:6d:7f:3e:10:e5:ca:51:65:75:f3:5a:d1:88:
         a3:33:39:79:7b:84:78:a7:a2:ab:6f:cf:7f:df:44:3b:48:b6:
         6f:97:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----