Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/1/3134342e37392e36362e302f32332d3234203d3e203138303433.roa
File:                     3134342e37392e36362e302f32332d3234203d3e203138303433.roa (raw, json)
Hash identifier:          I/nH3WfH4w3frC/mXwjMQ3leEpW2mw7DOz5WWS1+97M=
Subject key identifier:   25:EB:80:84:C5:98:76:9D:25:99:5A:C7:18:ED:89:AD:95:AA:62:9B
Certificate issuer:       /CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
Certificate serial:       7248003C2E0F326B776CF3B5C946DAF0916949A0
Authority key identifier: 59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/3134342e37392e36362e302f32332d3234203d3e203138303433.roa
Signing time:             Mon 11 May 2026 17:57:20 +0000
ROA not before:           Mon 11 May 2026 17:52:20 +0000
ROA not after:            Mon 10 May 2027 17:57:20 +0000
asID:                     18043
IP address blocks:        144.79.66.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:48:00:3c:2e:0f:32:6b:77:6c:f3:b5:c9:46:da:f0:91:69:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C
        Validity
            Not Before: May 11 17:52:20 2026 GMT
            Not After : May 10 17:57:20 2027 GMT
        Subject: CN=25EB8084C598769D25995AC718ED89AD95AA629B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:af:a5:ca:04:38:0a:4a:b2:77:02:9e:fc:
                    7f:39:e4:65:9b:68:89:79:d1:0c:8f:58:1d:6b:fa:
                    f0:3a:8b:73:5b:f3:51:61:8b:7f:fe:2d:3c:2b:91:
                    30:24:51:e2:4c:00:02:06:5a:af:d8:9d:c5:af:bb:
                    a1:73:58:17:3d:a1:ef:d5:7a:65:bc:a0:ed:a6:ef:
                    9f:91:1c:09:34:4a:03:84:d3:2f:2a:32:cf:db:33:
                    13:f8:17:0a:9b:3e:8e:dc:10:b9:67:5a:07:8b:b9:
                    df:8a:6f:fd:16:77:f7:d0:ba:fc:d3:af:7b:cc:7c:
                    66:64:89:ad:38:b9:76:fb:b3:57:81:a1:58:eb:a8:
                    70:47:5d:4c:2f:b1:1c:ab:7f:73:e0:ec:1b:07:fc:
                    c5:c4:e0:30:c6:fd:d8:79:5f:3f:dc:a5:a5:fc:40:
                    72:09:07:95:cf:11:e9:26:28:d5:78:83:63:2c:ee:
                    6c:01:42:34:4f:2d:1b:3f:f9:e1:8d:ac:7b:9c:13:
                    a2:f2:aa:c6:b6:fb:95:a3:6a:dc:25:47:2a:a2:f1:
                    f3:97:03:19:d5:82:cd:ac:2d:85:16:39:fb:20:1b:
                    43:75:fd:ee:ac:dc:7a:3e:5b:d3:4d:41:59:06:3b:
                    9c:48:99:e3:a8:39:cc:a5:db:06:e4:b8:ba:d8:97:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:80:84:C5:98:76:9D:25:99:5A:C7:18:ED:89:AD:95:AA:62:9B
            X509v3 Authority Key Identifier:
                keyid:59:D9:8E:8C:BB:AB:DC:DF:7B:22:2D:A5:00:F5:CD:E6:3F:F2:DA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/59D98E8CBBABDCDF7B222DA500F5CDE63FF2DA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/1/3134342e37392e36362e302f32332d3234203d3e203138303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:11:01:55:d9:8f:d8:4f:47:83:cc:ad:da:a0:93:79:54:
         bc:16:4d:56:b1:a0:e4:fb:06:80:65:03:c2:0b:f1:ec:d5:27:
         e8:30:37:93:a6:96:64:fb:0c:08:70:41:af:c4:07:ab:94:8a:
         f7:b7:2b:73:80:92:2b:62:f2:21:26:8b:40:23:f4:82:14:31:
         21:a7:24:78:b5:b8:d2:33:92:54:52:67:26:96:ee:c6:d7:71:
         9a:e0:d2:2b:ee:5b:c8:be:39:ae:a3:dc:92:2a:50:4e:7b:97:
         9c:6a:c0:cf:a5:9c:7b:50:31:29:f7:e2:b8:93:b7:a9:cc:f8:
         b6:4f:97:73:9a:88:27:02:de:b2:b9:c1:81:36:88:4b:31:fe:
         79:20:75:a0:27:78:c0:44:d0:6e:fb:55:ff:eb:ec:2a:e2:39:
         9e:b0:20:c5:f2:ba:3c:77:7f:4d:7d:34:a4:de:67:34:90:67:
         99:ea:fd:22:65:aa:a3:6a:eb:93:ca:ef:58:c3:e2:17:ee:cc:
         60:d4:a7:e9:cc:fa:a3:93:2f:1b:ad:b4:e8:d1:44:d6:bf:85:
         8c:61:dd:cb:9e:e7:20:67:5f:90:70:8b:9b:da:1c:a3:03:b7:
         16:55:45:89:87:51:dc:c5:8b:ee:12:10:41:76:01:7c:0c:4b:
         63:c3:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:06 2026 by rpki-client