Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCLOUD/0/323430343a613363303a3a2f33322d3438203d3e20313334383233.roa
File:                     323430343a613363303a3a2f33322d3438203d3e20313334383233.roa (raw, json)
Hash identifier:          6MS/SLD9lZIc8AKT/cRuJveakCuE+VHdiffB4G+t2T8=
Subject key identifier:   3B:52:12:3E:D9:FE:7A:01:D0:A7:55:BE:A4:EE:01:71:B9:F1:FC:39
Certificate issuer:       /CN=113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D
Certificate serial:       63CEF90930FCB688ABDF3367A351F3697688C161
Authority key identifier: 11:3F:12:7C:C4:8B:AD:8F:6A:B9:E6:67:26:BB:D4:0C:B4:C1:F9:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/323430343a613363303a3a2f33322d3438203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:37:43 +0000
ROA not before:           Mon 11 May 2026 17:32:43 +0000
ROA not after:            Mon 10 May 2027 17:37:43 +0000
asID:                     134823
IP address blocks:        2404:a3c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ce:f9:09:30:fc:b6:88:ab:df:33:67:a3:51:f3:69:76:88:c1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D
        Validity
            Not Before: May 11 17:32:43 2026 GMT
            Not After : May 10 17:37:43 2027 GMT
        Subject: CN=3B52123ED9FE7A01D0A755BEA4EE0171B9F1FC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:36:38:d4:13:c6:51:c3:47:92:65:77:a6:
                    83:3e:16:c8:17:01:a4:0d:20:fc:6d:f6:71:b0:0c:
                    7c:5d:c7:8d:b0:2e:8b:cc:ec:6d:2a:b7:e4:47:56:
                    9c:b6:13:31:da:17:9f:f5:a5:e5:01:6c:e5:1c:88:
                    5c:63:db:48:6e:93:c6:89:31:af:0b:8f:29:c8:1e:
                    ee:57:0c:68:08:a3:93:02:df:67:14:72:c1:12:22:
                    65:df:0e:25:02:b8:fe:00:dd:05:a6:cb:42:dc:63:
                    60:67:7a:38:43:ac:76:5d:2c:b9:93:87:23:d3:cb:
                    5b:1e:98:20:fd:bb:ee:65:1a:01:dc:07:f0:af:99:
                    9f:6c:27:1a:23:28:dd:66:3b:2d:a0:98:0d:6e:c4:
                    5f:c8:df:05:00:89:b8:e1:d3:f3:f2:da:ed:cf:ac:
                    e6:c3:8e:65:14:54:8e:80:8a:36:fe:c1:86:7a:aa:
                    fd:73:dd:f8:60:36:9c:98:a5:d3:b8:3b:81:e2:85:
                    d3:f4:e3:08:73:13:ae:8d:72:75:8c:d5:fe:77:88:
                    b9:1c:53:01:14:c8:3a:6e:0a:c9:1b:90:f6:52:7a:
                    53:15:26:2f:ad:b6:52:ee:29:f8:4f:26:85:7b:6f:
                    dc:08:50:a7:d6:76:62:b9:4c:aa:8f:73:8c:6f:a0:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:12:3E:D9:FE:7A:01:D0:A7:55:BE:A4:EE:01:71:B9:F1:FC:39
            X509v3 Authority Key Identifier:
                keyid:11:3F:12:7C:C4:8B:AD:8F:6A:B9:E6:67:26:BB:D4:0C:B4:C1:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/113F127CC48BAD8F6AB9E66726BBD40CB4C1F93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCLOUD/0/323430343a613363303a3a2f33322d3438203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:b5:9e:d8:e0:76:dd:c3:64:11:13:27:7a:b0:43:9d:74:94:
         fa:d8:ed:9a:8d:c2:aa:ee:02:5e:69:8f:8e:a1:f9:9f:fd:b0:
         29:55:56:cf:15:69:e1:23:bd:c1:a9:e3:57:93:23:df:68:10:
         36:de:60:e9:e3:b7:1a:69:2c:77:e1:36:47:11:9f:88:1b:97:
         52:f8:ff:fe:93:f9:4e:a8:55:8d:eb:48:f2:06:53:74:b2:61:
         15:5d:1c:8f:0a:a1:1f:93:b4:27:34:d2:8f:d1:64:13:cf:af:
         a0:52:b4:51:d7:f2:ea:9b:bb:6e:6a:90:da:d9:49:c6:1b:6a:
         96:68:a2:d0:95:8b:cf:69:b4:6e:af:54:48:41:93:96:f0:f1:
         f6:d8:8f:01:1e:a5:5a:98:c9:55:e1:9b:52:26:90:31:36:10:
         3d:21:d2:a0:3d:87:0a:c3:3d:47:6f:6a:da:ae:2e:36:46:63:
         6a:48:64:5d:28:66:5d:33:49:6e:63:79:a2:af:b3:d6:fe:2c:
         32:5c:0a:a5:0f:b8:1e:6b:98:81:df:50:15:f2:88:06:ab:4d:
         12:43:31:58:b7:10:29:07:4d:b7:bd:78:e5:1d:a9:b6:e5:50:
         b1:f4:0b:da:50:79:1c:46:86:93:9d:74:ef:64:ce:90:0d:7c:
         5f:3b:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----