Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa
File:                     3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (raw, json)
Hash identifier:          ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=
Subject key identifier:   6F:8E:80:52:5E:FF:3F:6F:9A:49:50:A2:76:15:C2:0F:AE:A5:F3:3C
Certificate issuer:       /CN=43A480538BE8801E606CB416A45E3AA47153C1FC
Certificate serial:       77763F7819AF1841B5E14298F59CC3BC518DC248
Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa
Signing time:             Mon 11 May 2026 17:56:58 +0000
ROA not before:           Mon 11 May 2026 17:51:58 +0000
ROA not after:            Mon 10 May 2027 17:56:58 +0000
asID:                     38854
IP address blocks:        165.101.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:76:3f:78:19:af:18:41:b5:e1:42:98:f5:9c:c3:bc:51:8d:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC
        Validity
            Not Before: May 11 17:51:58 2026 GMT
            Not After : May 10 17:56:58 2027 GMT
        Subject: CN=6F8E80525EFF3F6F9A4950A27615C20FAEA5F33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f1:48:d4:19:61:5d:b9:62:64:68:23:d1:27:
                    0c:8c:f5:21:46:94:a7:49:ce:ec:ee:94:90:32:0e:
                    95:2c:00:01:4b:f5:8d:65:20:43:90:3f:95:65:26:
                    b4:5b:8f:8c:b6:39:7f:77:04:13:d4:32:c3:b3:0b:
                    42:2f:bc:a9:1d:42:36:2f:0f:e6:42:df:92:98:3a:
                    58:af:11:12:17:bd:fa:38:32:0a:cb:35:8b:a8:f9:
                    57:3f:a9:f2:44:d0:c8:26:49:37:14:ed:fc:de:55:
                    7f:04:8a:38:a3:ee:02:55:18:ed:25:a2:a5:f6:96:
                    5f:aa:99:36:b6:2f:37:b8:91:91:5e:cc:8b:3e:93:
                    78:b9:88:13:c6:09:2b:fe:fa:c2:62:46:95:cd:ea:
                    f4:84:fe:71:dd:be:cb:23:d9:98:63:76:f7:9f:1f:
                    eb:e0:17:e2:15:32:44:ab:80:17:38:90:16:cb:7a:
                    d2:7e:3d:02:fa:1c:b3:67:20:fe:c5:ad:8c:0b:04:
                    dc:ea:18:03:58:eb:bf:4d:e4:ac:26:a4:08:73:27:
                    a8:3d:90:9d:90:ce:88:ba:7b:ff:7e:06:a5:1f:cc:
                    7d:88:5e:5e:9e:52:52:8d:9e:23:c6:d3:ce:93:66:
                    6d:dd:84:9a:58:8d:2a:12:38:6f:df:23:2a:4a:33:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8E:80:52:5E:FF:3F:6F:9A:49:50:A2:76:15:C2:0F:AE:A5:F3:3C
            X509v3 Authority Key Identifier:
                keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:05:c1:9e:34:5c:bd:91:b5:40:31:a7:65:08:af:b8:ac:9e:
         44:01:9e:c4:47:95:18:8c:1e:ea:6b:00:7e:e0:57:39:ee:a6:
         ba:8b:7b:3d:90:c2:6c:74:01:1e:8c:6c:fd:60:65:b8:f5:c6:
         01:da:07:60:eb:65:07:0e:94:36:89:5f:c8:09:d3:9b:7b:f9:
         70:2d:30:be:de:d3:36:dc:95:5d:41:38:7a:57:7c:30:e1:f0:
         67:50:ae:97:9b:27:80:0b:1a:32:67:b9:52:b9:2d:3e:ea:c6:
         ae:8f:a8:2c:ee:52:33:a6:c3:bb:90:69:bb:e6:56:02:40:62:
         0b:90:09:09:40:46:e7:bf:3c:37:5a:7a:dc:d3:81:d1:45:ab:
         31:e1:3f:ca:cd:1f:46:44:c6:54:af:2a:95:b4:d1:cf:92:d8:
         6a:ac:ac:f1:61:3f:90:d8:4f:f6:0a:fc:2a:50:7e:02:c0:66:
         a5:38:e0:08:1e:32:e6:42:78:a8:7b:fe:bf:ba:02:2a:a9:4f:
         17:2e:a3:f7:01:99:4a:f3:2d:34:89:26:d2:d8:3e:af:59:ca:
         f8:90:e2:b7:a1:37:c8:7b:5a:76:de:29:81:33:23:fb:6f:56:
         17:17:f1:a2:40:45:5e:47:b8:25:ec:5d:e3:91:4c:bf:72:63:
         43:35:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:18 2026 by rpki-client