Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FISC/0/323430303a653438303a3a2f33322d3438203d3e20313331353838.roa
File:                     323430303a653438303a3a2f33322d3438203d3e20313331353838.roa (raw, json)
Hash identifier:          LyZCNP1sBcgV+faqZCRBGCYTfZzPSOWOa44ZubZUvBM=
Subject key identifier:   45:93:AD:D4:01:A9:06:63:1F:8E:75:BD:4C:B7:F5:FD:73:5F:C8:6B
Certificate issuer:       /CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
Certificate serial:       7DFB128424F1916920C2296F456C2A52F4F12656
Authority key identifier: C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FISC/0/323430303a653438303a3a2f33322d3438203d3e20313331353838.roa
Signing time:             Mon 11 May 2026 16:48:48 +0000
ROA not before:           Mon 11 May 2026 16:43:48 +0000
ROA not after:            Mon 10 May 2027 16:48:48 +0000
asID:                     131588
IP address blocks:        2400:e480::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fb:12:84:24:f1:91:69:20:c2:29:6f:45:6c:2a:52:f4:f1:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
        Validity
            Not Before: May 11 16:43:48 2026 GMT
            Not After : May 10 16:48:48 2027 GMT
        Subject: CN=4593ADD401A906631F8E75BD4CB7F5FD735FC86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:f0:48:b5:2a:e7:21:58:24:04:4e:35:54:
                    0c:c3:8c:ad:5a:a8:49:61:ab:14:74:9d:a5:3b:5a:
                    bc:ea:7d:c1:61:c2:2b:d1:a5:15:54:f5:93:28:2c:
                    d1:93:bd:95:eb:3a:ae:ca:99:8e:99:40:c8:b5:aa:
                    87:7a:c6:50:10:6c:2a:1d:f4:97:eb:1b:d4:03:86:
                    09:5c:ed:0d:02:09:fd:f1:a4:cb:70:f7:10:c2:5c:
                    e2:6e:aa:7d:b7:fb:b8:04:d0:60:e9:58:67:42:98:
                    94:20:a4:ee:16:8d:b0:0c:3f:57:03:32:73:ca:a1:
                    a0:45:d9:5c:67:91:ab:3f:68:a5:47:88:de:09:0e:
                    27:a8:06:c4:3a:34:94:c9:78:e7:ac:2d:89:72:b9:
                    b9:61:32:8d:31:18:de:9b:c0:08:74:20:12:9a:a6:
                    be:04:77:52:68:bf:a6:b2:65:4c:4b:5d:e3:df:64:
                    09:b2:c7:be:6f:92:df:1e:7f:b6:d0:49:9b:ab:5e:
                    67:ba:51:75:07:96:62:a8:88:70:e7:b1:91:97:02:
                    a9:62:d8:b0:63:0d:28:90:22:dd:dd:dd:7e:ba:69:
                    b8:4c:98:e6:d7:32:21:cd:f4:ae:85:b3:87:d7:ab:
                    d9:e8:9b:3b:d3:04:a1:3f:3d:b8:cc:f6:37:0d:83:
                    59:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:93:AD:D4:01:A9:06:63:1F:8E:75:BD:4C:B7:F5:FD:73:5F:C8:6B
            X509v3 Authority Key Identifier:
                keyid:C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FISC/0/323430303a653438303a3a2f33322d3438203d3e20313331353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e480::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:00:c7:23:6b:9e:64:11:0d:85:3b:a1:f1:02:f5:f4:2d:33:
         fb:7e:c1:c0:e1:eb:24:fd:ba:ca:41:82:99:5a:f2:27:b2:4b:
         79:96:16:be:86:b5:f0:81:af:cf:e8:92:87:8f:42:db:9d:72:
         17:e8:3d:83:d6:c6:a6:ff:34:61:15:c0:39:60:67:a6:0c:a6:
         db:9a:52:7b:c7:85:81:94:c4:c1:31:0d:f1:db:b6:f2:97:d6:
         bf:1a:a0:46:11:27:dc:46:a3:87:fb:4f:93:ee:d0:91:8a:5d:
         7b:ba:42:69:64:01:05:3e:a8:41:0a:a3:47:11:ac:5f:2c:bc:
         45:6d:f4:40:93:15:74:2c:8d:0f:4f:d1:d4:f4:08:ed:0c:61:
         88:a9:ca:d0:85:73:f5:c6:98:8d:bf:0f:5a:7a:97:53:1c:46:
         6e:6e:d6:0f:34:8b:7a:f5:53:89:58:86:21:87:92:f8:86:58:
         33:f5:b5:fb:b1:08:f3:6c:ab:84:21:ea:2a:79:51:63:90:b5:
         bf:34:c1:bf:7b:48:d9:7b:35:38:c5:9c:38:f7:52:6c:5e:4b:
         e8:70:a5:ee:aa:78:13:76:bf:c2:45:94:61:68:02:8e:27:25:
         38:b5:c7:69:27:22:b0:ec:2b:62:b3:f9:74:a9:0d:a8:00:97:
         1e:10:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----