Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132322e39392e302e302f31382d3234203d3e203138303432.roa
File:                     3132322e39392e302e302f31382d3234203d3e203138303432.roa (raw, json)
Hash identifier:          Tz0cSD05i3OCST0PKGEitL9Cea02/7iZZXiFw8rsfjE=
Subject key identifier:   6D:AB:5B:C5:DA:E9:20:06:65:7B:FF:D4:94:80:42:36:EE:64:58:E9
Certificate issuer:       /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial:       06B8F481C7B7EAF6DCD46A263676B8AD69D866C7
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132322e39392e302e302f31382d3234203d3e203138303432.roa
Signing time:             Mon 11 May 2026 17:04:18 +0000
ROA not before:           Mon 11 May 2026 16:59:18 +0000
ROA not after:            Mon 10 May 2027 17:04:18 +0000
asID:                     18042
IP address blocks:        122.99.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b8:f4:81:c7:b7:ea:f6:dc:d4:6a:26:36:76:b8:ad:69:d8:66:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
        Validity
            Not Before: May 11 16:59:18 2026 GMT
            Not After : May 10 17:04:18 2027 GMT
        Subject: CN=6DAB5BC5DAE92006657BFFD494804236EE6458E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:bf:ec:56:c3:75:41:8e:62:85:10:8c:80:
                    fe:3c:f9:d3:f9:53:88:db:92:61:ce:79:72:eb:e8:
                    fb:8f:3c:92:4f:c0:2f:60:00:92:1a:8c:4a:c8:b9:
                    da:64:07:d9:77:af:28:7f:ca:5e:8a:00:15:04:80:
                    a3:f2:5d:00:fc:03:6f:e9:1f:88:31:7d:77:56:10:
                    ae:12:da:27:4f:05:47:a2:6e:23:e7:3e:ed:8c:3a:
                    b6:9c:1c:8a:45:52:ae:0a:27:e3:60:b3:fc:a2:84:
                    4f:9b:43:25:bd:10:43:6b:90:25:57:2b:fc:17:3c:
                    95:2f:81:18:9a:f4:ff:2a:08:80:26:82:ac:79:dd:
                    4e:12:4a:17:77:1c:04:c9:58:ca:ba:d8:9b:d5:c9:
                    20:67:83:f9:9f:43:c0:8a:1c:86:5b:e4:5f:14:95:
                    1e:21:ab:99:9e:eb:33:98:a6:16:0c:a0:78:64:33:
                    d7:45:28:4b:70:91:19:a4:a3:01:94:63:50:60:3a:
                    0c:7d:fc:2b:c0:f5:a4:29:82:9b:43:f8:96:89:18:
                    9e:26:cf:55:bf:0c:90:b9:20:bd:87:35:4c:4d:b7:
                    ee:52:69:0b:fd:6d:da:25:69:9f:62:e5:58:b0:8c:
                    26:e7:f5:b0:c6:2c:0d:1b:84:6f:68:85:5e:0b:2f:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:5B:C5:DA:E9:20:06:65:7B:FF:D4:94:80:42:36:EE:64:58:E9
            X509v3 Authority Key Identifier:
                keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132322e39392e302e302f31382d3234203d3e203138303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:7b:78:92:7f:10:79:11:f8:18:1f:0b:4f:40:f4:9c:75:
         f2:cc:18:e5:41:83:17:b0:bb:49:2d:3c:ec:58:35:c4:a4:3c:
         50:fa:65:93:82:88:00:1c:a9:72:2a:c2:15:19:89:84:bc:fb:
         84:be:8a:5a:48:6b:e7:39:1e:48:9e:f9:cc:2f:b8:f6:be:04:
         3d:b9:db:f0:67:ed:5c:2b:3d:49:a6:8d:4a:ea:df:07:6d:06:
         21:f5:f9:02:3d:29:82:51:37:ab:24:18:ed:43:b5:b0:4a:f6:
         49:d1:a6:c3:1e:77:bf:0d:52:2a:87:cd:87:7f:b7:02:e6:f6:
         48:a6:58:bf:78:93:be:a1:5b:69:3d:84:fc:40:48:44:4a:d1:
         b4:95:23:4c:d4:c9:c4:58:4f:a5:95:14:d9:8e:69:f6:6d:14:
         db:53:b8:82:79:cc:b0:f0:6a:c6:14:19:6c:9f:ff:79:6f:6d:
         ab:89:c1:4f:20:b8:bf:64:83:05:e9:d2:aa:63:89:20:46:17:
         de:e3:1b:2f:1e:fc:1e:c0:7f:3e:74:04:7c:97:43:6b:bc:7e:
         be:f8:63:28:b5:8e:ff:24:6b:07:2a:5e:11:46:d7:f4:cb:e9:
         f5:4b:e7:d1:90:a7:b9:43:d7:e1:6b:f2:c6:93:b9:b3:f1:72:
         af:59:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:24 2026 by rpki-client