Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa
File:                     3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa (raw, json)
Hash identifier:          P9ySgHddPveY+6EtVJoOuOaViOtED+utlhZfdlH05gM=
Subject key identifier:   13:38:28:5F:27:C0:A9:02:36:60:DF:E6:12:55:E3:F2:1A:3C:3B:AE
Certificate issuer:       /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial:       23160FB427B96C5EFCF65C0B9EE72A6B29334650
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KE-ING/0/3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa
Signing time:             Mon 11 May 2026 17:40:05 +0000
ROA not before:           Mon 11 May 2026 17:35:05 +0000
ROA not after:            Mon 10 May 2027 17:40:05 +0000
asID:                     9416
IP address blocks:        203.118.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:16:0f:b4:27:b9:6c:5e:fc:f6:5c:0b:9e:e7:2a:6b:29:33:46:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
        Validity
            Not Before: May 11 17:35:05 2026 GMT
            Not After : May 10 17:40:05 2027 GMT
        Subject: CN=1338285F27C0A9023660DFE61255E3F21A3C3BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e5:dd:a6:fd:9b:e8:ea:91:59:32:dd:56:ab:
                    a3:aa:23:ea:57:1b:f7:2f:a7:8b:c1:fb:0b:bf:5c:
                    11:fe:2b:32:88:ae:11:6f:c2:72:5d:97:cc:0c:dc:
                    7d:ae:e8:92:82:de:9f:3a:4a:56:bb:7e:09:5e:b4:
                    23:e2:9a:6c:85:85:cf:02:c1:b3:db:61:09:4b:35:
                    e1:cb:52:eb:ae:f7:71:9e:1e:f4:0a:84:c4:eb:2c:
                    c7:63:8a:4c:af:fb:f3:4f:bd:09:01:cc:04:d6:fa:
                    27:54:50:95:ab:94:8f:c8:c1:8d:f0:5c:d5:ec:45:
                    81:89:13:10:47:66:e5:5f:52:7a:b4:8b:95:11:ec:
                    8f:d8:6f:6e:a1:f7:d1:48:5d:fa:eb:20:41:48:1b:
                    3c:f6:12:22:a6:31:b4:88:3d:52:9d:a9:d3:6f:51:
                    6b:35:92:a2:73:f4:63:cd:dd:a8:93:fc:56:70:47:
                    15:04:95:45:13:9c:5d:7d:6f:46:c4:f8:38:c3:24:
                    36:e7:86:b2:64:44:c6:b1:7d:c7:9a:13:71:30:a0:
                    3d:a5:24:27:20:e0:8f:06:a2:6d:dd:6f:86:61:aa:
                    3e:c5:dd:c7:fd:ba:db:ac:fa:ac:8e:c2:bf:ac:57:
                    ce:ee:fc:46:1a:d4:64:40:36:12:f3:88:7a:ec:42:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:38:28:5F:27:C0:A9:02:36:60:DF:E6:12:55:E3:F2:1A:3C:3B:AE
            X509v3 Authority Key Identifier:
                keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3230332e3131382e3232342e302f32302d3230203d3e2039343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.118.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:5f:81:a6:0b:c5:04:98:c0:1f:cc:84:2b:af:36:28:ea:c8:
         70:df:a0:81:e0:6c:29:3c:ac:f2:d7:ff:88:46:db:a2:0c:76:
         e7:d8:5f:d7:66:f6:b8:09:a6:4b:fd:60:a6:d2:cc:30:ca:f2:
         a4:13:f0:dd:5e:f8:2e:78:7a:6b:5f:7f:77:1c:56:8b:94:89:
         24:30:ce:ae:84:cd:b2:25:ae:bd:46:1d:2b:bf:0a:9e:f8:db:
         dc:88:76:27:16:32:43:9b:fe:64:59:f7:a5:2b:79:08:1a:80:
         de:35:f5:ee:0a:4d:4e:40:b0:ae:89:12:67:04:0d:72:e7:ba:
         4b:96:ea:83:d7:0f:d8:29:fc:bc:6c:c1:ae:f6:88:4e:1b:85:
         95:e0:e6:6c:06:82:81:26:35:a0:5f:49:5b:26:a2:39:ac:ba:
         23:b4:c3:bf:91:32:d8:1b:24:f1:5f:f1:63:e7:27:84:71:86:
         f8:dc:51:f3:0c:8f:4d:5f:a5:d5:96:d9:f1:fa:3c:d9:49:74:
         a9:ed:16:79:1a:86:fb:c3:f6:e5:f6:c6:58:18:a4:69:c5:a0:
         aa:64:e1:10:8a:1d:94:1c:a8:7b:22:10:5b:57:bf:be:78:68:
         14:c7:99:0d:86:52:61:99:9e:bc:84:66:5d:15:f5:48:cd:b8:
         3b:dd:29:35
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUIxYPtCe5bF789lwLnucqaykzRlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy
MzMyNEU0QjAeFw0yNjA1MTExNzM1MDVaFw0yNzA1MTAxNzQwMDVaMDMxMTAvBgNV
BAMTKDEzMzgyODVGMjdDMEE5MDIzNjYwREZFNjEyNTVFM0YyMUEzQzNCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn5d2m/Zvo6pFZMt1Wq6OqI+pX
G/cvp4vB+wu/XBH+KzKIrhFvwnJdl8wM3H2u6JKC3p86Sla7fgletCPimmyFhc8C
wbPbYQlLNeHLUuuu93GeHvQKhMTrLMdjikyv+/NPvQkBzATW+idUUJWrlI/IwY3w
XNXsRYGJExBHZuVfUnq0i5UR7I/Yb26h99FIXfrrIEFIGzz2EiKmMbSIPVKdqdNv
UWs1kqJz9GPN3aiT/FZwRxUElUUTnF19b0bE+DjDJDbnhrJkRMaxfceaE3EwoD2l
JCcg4I8Gom3db4Zhqj7F3cf9utus+qyOwr+sV87u/EYa1GRANhLziHrsQrj5AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUEzgoXyfAqQI2YN/mElXj8ho8O64wHwYDVR0j
BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H
LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF
ODdDRDIzMzI0RTRCLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzIzMDMzMmUzMTMx
MzgyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDM5MzQzMTM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQEy3bgMA0GCSqGSIb3DQEBCwUAA4IBAQCmX4GmC8UEmMAfzIQrrzYo6shw
36CB4GwpPKzy1/+IRtuiDHbn2F/XZva4CaZL/WCm0swwyvKkE/DdXvgueHprX393
HFaLlIkkMM6uhM2yJa69Rh0rvwqe+NvciHYnFjJDm/5kWfelK3kIGoDeNfXuCk1O
QLCuiRJnBA1y57pLluqD1w/YKfy8bMGu9ohOG4WV4OZsBoKBJjWgX0lbJqI5rLoj
tMO/kTLYGyTxX/Fj5yeEcYb43FHzDI9NX6XVltnx+jzZSXSp7RZ5Gob7w/bl9sZY
GKRpxaCqZOEQih2UHKh7IhBbV7++eGgUx5kNhlJhmZ68hGZdFfVIzbg73Sk1
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:28 2026 by rpki-client