Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa
File:                     3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (raw, json)
Hash identifier:          U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=
Subject key identifier:   26:28:59:9F:92:6F:6F:6F:E9:79:21:D3:C2:08:7D:1A:CF:F6:A8:0C
Certificate issuer:       /CN=43A480538BE8801E606CB416A45E3AA47153C1FC
Certificate serial:       30DF734FCAA7D87DEA4B0357D3C7BE91716D3437
Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa
Signing time:             Mon 11 May 2026 17:52:43 +0000
ROA not before:           Mon 11 May 2026 17:47:43 +0000
ROA not after:            Mon 10 May 2027 17:52:43 +0000
asID:                     38854
IP address blocks:        165.101.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:df:73:4f:ca:a7:d8:7d:ea:4b:03:57:d3:c7:be:91:71:6d:34:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC
        Validity
            Not Before: May 11 17:47:43 2026 GMT
            Not After : May 10 17:52:43 2027 GMT
        Subject: CN=2628599F926F6F6FE97921D3C2087D1ACFF6A80C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:f2:8d:3f:2c:13:aa:19:71:34:23:c2:c8:
                    25:b7:58:48:a9:7d:97:d6:3b:6a:fc:38:53:2f:9b:
                    8e:9b:a9:32:0d:ed:5a:6c:e9:8e:e3:11:c0:62:f1:
                    5a:fb:0d:85:c4:1f:83:55:97:c8:2a:5e:27:80:ab:
                    d0:d8:39:4a:f4:c4:c9:41:48:78:85:63:30:a4:fb:
                    19:25:71:95:7e:1b:db:38:ff:3c:0e:a0:ce:40:6b:
                    e5:27:10:1d:82:02:c1:fa:28:a2:4c:28:7a:ab:d9:
                    cf:d2:e4:26:fd:c8:81:74:28:2f:81:9e:d9:37:af:
                    7d:dd:d7:1b:eb:33:19:0a:c5:3d:e1:27:ae:70:c9:
                    60:80:98:c6:8c:6a:fd:5b:cd:0a:a5:48:a8:40:4d:
                    15:31:f3:d7:d1:f4:9d:47:66:f9:92:9c:3f:8a:ec:
                    df:4d:52:b0:30:a2:cb:93:18:e1:0e:15:e0:f3:c2:
                    89:e1:de:ab:14:88:78:40:0d:13:72:6a:1f:be:b2:
                    9d:c4:fd:ef:8a:e7:b0:f2:b8:9d:20:00:a3:69:8a:
                    02:f3:21:6d:48:28:b6:4c:d7:eb:06:3a:06:2f:44:
                    18:5d:75:82:d4:36:22:a7:b6:4e:1c:0c:6c:c7:48:
                    03:a8:90:c4:8b:7b:f6:9f:84:95:35:76:b1:4a:41:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:28:59:9F:92:6F:6F:6F:E9:79:21:D3:C2:08:7D:1A:CF:F6:A8:0C
            X509v3 Authority Key Identifier:
                keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:fd:6b:28:0d:29:70:a3:67:84:86:64:ba:c4:0a:3d:cf:84:
         eb:60:12:8c:bf:75:ac:cd:5c:09:9e:84:49:13:ad:86:8e:62:
         73:14:48:7d:ad:1b:fd:47:70:8c:b9:5c:f1:f8:8c:53:1a:0d:
         86:6d:55:85:6c:af:9d:f7:7c:0c:60:de:14:b6:f6:c0:25:b1:
         67:69:2e:6e:e0:8c:62:d8:f0:3f:9c:d4:2e:b0:c6:08:1a:4c:
         4f:2a:9e:28:30:70:cf:ef:9d:35:0e:e0:c2:8e:1c:ff:1e:73:
         41:c2:56:b3:c0:17:80:8f:67:94:7b:6e:8d:24:b7:44:92:17:
         13:46:07:cb:1b:de:91:7f:58:f5:5e:50:e3:82:67:41:e1:fb:
         04:54:c0:32:be:2a:23:de:6d:77:00:ee:0e:b2:8d:7a:cc:94:
         9a:36:36:f9:91:d9:c6:d0:50:23:b9:ee:11:1e:10:69:b9:5b:
         3a:cc:9a:c0:ee:ee:69:43:02:c3:03:a1:4e:ee:3f:ea:bf:33:
         de:b3:40:a4:65:c6:b5:ad:e9:4d:21:be:a5:95:c1:f5:e4:a8:
         af:ae:c8:96:12:71:55:d3:ef:40:bf:00:15:16:34:93:bf:d7:
         a2:a8:49:35:98:6d:e2:22:0d:f4:5b:73:ff:21:89:7b:a9:15:
         40:a0:96:18
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUMN9zT8qn2H3qSwNX08e+kXFtNDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3
MTUzQzFGQzAeFw0yNjA1MTExNzQ3NDNaFw0yNzA1MTAxNzUyNDNaMDMxMTAvBgNV
BAMTKDI2Mjg1OTlGOTI2RjZGNkZFOTc5MjFEM0MyMDg3RDFBQ0ZGNkE4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzcfKNPywTqhlxNCPCyCW3WEip
fZfWO2r8OFMvm46bqTIN7Vps6Y7jEcBi8Vr7DYXEH4NVl8gqXieAq9DYOUr0xMlB
SHiFYzCk+xklcZV+G9s4/zwOoM5Aa+UnEB2CAsH6KKJMKHqr2c/S5Cb9yIF0KC+B
ntk3r33d1xvrMxkKxT3hJ65wyWCAmMaMav1bzQqlSKhATRUx89fR9J1HZvmSnD+K
7N9NUrAwosuTGOEOFeDzwonh3qsUiHhADRNyah++sp3E/e+K57DyuJ0gAKNpigLz
IW1IKLZM1+sGOgYvRBhddYLUNiKntk4cDGzHSAOokMSLe/afhJU1drFKQYZtAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUJihZn5Jvb2/peSHTwgh9Gs/2qAwwHwYDVR0j
BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT
T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0
NUUzQUE0NzE1M0MxRkMuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuG
ZHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVTT04vMS8zMTM2MzUy
ZTMxMzAzMTJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODM4MzUz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKVlmDANBgkqhkiG9w0BAQsFAAOCAQEAUP1rKA0pcKNnhIZk
usQKPc+E62ASjL91rM1cCZ6ESROtho5icxRIfa0b/UdwjLlc8fiMUxoNhm1VhWyv
nfd8DGDeFLb2wCWxZ2kubuCMYtjwP5zULrDGCBpMTyqeKDBwz++dNQ7gwo4c/x5z
QcJWs8AXgI9nlHtujSS3RJIXE0YHyxvekX9Y9V5Q44JnQeH7BFTAMr4qI95tdwDu
DrKNesyUmjY2+ZHZxtBQI7nuER4QablbOsyawO7uaUMCwwOhTu4/6r8z3rNApGXG
ta3pTSG+pZXB9eSor67IlhJxVdPvQL8AFRY0k7/XoqhJNZht4iIN9Ftz/yGJe6kV
QKCWGA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:30 2026 by rpki-client