Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e2039343136.roa
File:                     3132332e3235322e302e302f31372d3234203d3e2039343136.roa (raw, json)
Hash identifier:          8JxW+fPG8BWMJ3eQJdeafOLn1uT7L6DDouqnppnhNkg=
Subject key identifier:   9B:FE:BC:7A:44:A6:30:CB:52:55:79:BA:9A:5B:9D:52:31:3A:11:89
Certificate issuer:       /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial:       74089BFC37F3EA8EB7F2CF6284E34527BA5D942A
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e2039343136.roa
Signing time:             Mon 11 May 2026 17:09:17 +0000
ROA not before:           Mon 11 May 2026 17:04:17 +0000
ROA not after:            Mon 10 May 2027 17:09:17 +0000
asID:                     9416
IP address blocks:        123.252.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:9b:fc:37:f3:ea:8e:b7:f2:cf:62:84:e3:45:27:ba:5d:94:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
        Validity
            Not Before: May 11 17:04:17 2026 GMT
            Not After : May 10 17:09:17 2027 GMT
        Subject: CN=9BFEBC7A44A630CB525579BA9A5B9D52313A1189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:69:9a:46:7a:3f:5f:5b:ff:16:b0:ea:6d:
                    cf:e5:fd:74:d8:06:9c:97:5f:11:ef:bb:d7:7a:fd:
                    ae:87:e4:f9:8f:19:14:3c:c6:af:68:a1:cf:1f:e2:
                    77:01:57:ed:d3:2a:52:14:1a:2c:01:04:1d:1f:0e:
                    5e:36:0e:bc:a4:cc:ba:88:12:31:69:10:7b:8b:11:
                    7e:8d:b6:bb:51:00:6e:70:38:e0:ee:9e:ea:a0:5c:
                    74:05:9c:b3:ac:76:94:4f:03:e1:6e:dc:36:d6:39:
                    6a:32:c8:bd:31:f9:68:89:87:6e:cb:b3:b5:34:7d:
                    7c:98:1a:52:e0:c4:bd:f9:25:38:fa:9d:6f:c7:c8:
                    b8:0d:7e:f4:3f:68:03:d7:7e:37:18:0b:52:9a:2f:
                    f2:03:98:3c:e8:f1:81:f6:c8:36:dc:ce:84:5b:da:
                    9d:9b:81:e7:94:87:de:e9:19:4f:7d:c4:a8:e7:bc:
                    79:a1:b6:fe:55:9d:9a:cd:b3:a4:57:8e:a5:34:48:
                    8f:24:98:9c:0a:88:32:11:94:c1:0b:b7:cc:c5:61:
                    2d:78:6f:02:f3:7f:8b:62:c4:77:e6:07:4d:cb:c1:
                    c8:32:02:85:28:92:85:c5:9f:12:2b:36:e8:87:86:
                    38:63:00:ba:55:27:b9:7e:42:ee:96:cf:d6:49:3e:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FE:BC:7A:44:A6:30:CB:52:55:79:BA:9A:5B:9D:52:31:3A:11:89
            X509v3 Authority Key Identifier:
                keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e2039343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.252.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:38:30:3a:b9:7a:9e:5a:3d:ac:19:18:80:61:6c:c4:31:94:
         00:d7:a8:55:0f:ff:c5:a3:cd:4e:58:4a:e0:ad:70:d6:ed:f5:
         d0:ef:7d:47:7b:06:e5:e7:d7:a8:24:97:03:78:fe:95:48:47:
         51:65:a6:f7:16:96:22:8d:f4:af:96:0b:21:60:cb:57:c6:24:
         f4:92:87:01:03:d8:f1:08:5b:f9:73:ef:80:0d:5a:ff:8e:21:
         21:8e:20:a7:06:5d:48:7c:54:52:b5:eb:67:e3:06:a0:a9:e0:
         aa:86:fc:61:22:5e:0a:f0:d4:95:78:66:c5:c4:5e:8d:2d:a5:
         e9:16:ef:0a:cb:2e:fb:06:42:5b:b4:1e:de:00:ca:1c:d2:4d:
         d8:dd:31:35:79:85:cd:3c:f7:70:20:50:cb:04:8a:c9:5e:62:
         18:fe:f5:c6:9b:49:30:75:83:8b:8a:4c:ea:51:47:2b:b1:b0:
         57:74:99:35:98:28:d4:ed:c7:a9:a5:4d:a4:d7:97:cd:b8:e5:
         03:b6:0d:b5:9a:59:70:73:49:47:70:c3:aa:c7:8c:aa:6b:ee:
         c8:6f:ce:c8:bf:bd:71:28:ac:14:24:62:91:9c:52:29:91:bd:
         93:5a:f3:be:82:f5:a5:ad:7e:42:fe:26:6a:ba:59:90:a2:a4:
         da:1e:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:42 2026 by rpki-client