Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGDING/1/3136352e3130312e38362e302f32332d3234203d3e20313334383233.roa
File:                     3136352e3130312e38362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          X9cgg5To/tOSqEbLz+VmO5OOyOSIyUo2tulTtg9S+xk=
Subject key identifier:   FA:30:06:43:D0:89:51:CE:12:84:A7:4E:93:96:B5:C7:20:50:A2:67
Certificate issuer:       /CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
Certificate serial:       36F2BDDD8BB9A76E3449FDB680A3C673970C53CD
Authority key identifier: 54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGDING/1/3136352e3130312e38362e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:40:32 +0000
ROA not before:           Mon 11 May 2026 17:35:32 +0000
ROA not after:            Mon 10 May 2027 17:40:32 +0000
asID:                     134823
IP address blocks:        165.101.86.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f2:bd:dd:8b:b9:a7:6e:34:49:fd:b6:80:a3:c6:73:97:0c:53:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
        Validity
            Not Before: May 11 17:35:32 2026 GMT
            Not After : May 10 17:40:32 2027 GMT
        Subject: CN=FA300643D08951CE1284A74E9396B5C72050A267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:33:5c:21:bb:ea:ce:4f:6f:25:02:67:7b:
                    5c:97:41:9a:65:4c:c2:3c:4d:3a:ef:c3:7b:f9:23:
                    38:c1:58:e7:0f:eb:68:c5:96:e9:86:e7:2b:05:4e:
                    21:83:35:c1:75:d8:70:a8:68:f7:a4:ac:70:c8:df:
                    71:da:c4:f6:9f:74:7a:9e:e5:9d:9e:82:53:e3:63:
                    21:93:63:b6:bd:6b:49:51:c8:0a:8f:98:76:84:72:
                    e8:be:8c:8d:0b:ba:88:00:40:4b:d9:b4:ac:db:ed:
                    6f:2e:70:eb:f5:2b:10:b5:fc:4d:2c:a8:51:de:ce:
                    55:74:38:33:90:5d:80:08:c2:96:ff:fa:0a:db:24:
                    61:a4:e1:fa:69:41:09:a2:0e:72:b0:c5:ce:69:07:
                    51:ca:33:98:3a:e5:3a:27:17:a3:4b:6f:ea:e9:4e:
                    71:42:b9:c6:a2:dd:02:9f:77:99:07:a3:68:3d:bb:
                    4a:18:eb:25:f5:fd:70:4f:00:e8:c9:7e:48:d7:23:
                    5e:49:35:6a:6c:2d:fc:bb:2b:d4:da:32:30:09:38:
                    a8:9f:9c:84:b1:e5:00:18:6c:07:c2:e6:30:49:13:
                    76:09:d4:4d:9c:a1:23:86:9c:ea:64:79:c4:eb:55:
                    02:27:55:2d:b6:0d:2b:b3:27:3d:04:b6:c6:b7:86:
                    1c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:06:43:D0:89:51:CE:12:84:A7:4E:93:96:B5:C7:20:50:A2:67
            X509v3 Authority Key Identifier:
                keyid:54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/3136352e3130312e38362e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:af:c7:e6:35:50:f8:d4:7d:60:a3:fa:05:7e:18:23:cc:
         dd:c5:41:2d:c7:5f:a7:a3:4b:c1:a6:df:c3:50:22:39:27:6d:
         8f:90:d8:c9:4a:06:14:38:59:26:c3:04:21:65:d4:42:33:88:
         be:37:12:a3:b4:f8:3d:c6:86:1e:98:7e:7a:95:0d:04:b1:07:
         d3:88:36:fe:63:97:89:a7:f0:0a:e2:90:77:d6:b7:c2:d1:29:
         22:3c:cb:59:10:0c:40:b9:51:7d:38:14:26:71:e9:63:e6:63:
         3d:c0:50:5e:2f:a2:03:5d:50:d3:1b:4c:bd:37:a1:10:0c:0a:
         56:29:24:1d:c6:ed:53:5f:86:62:7d:c1:c2:6a:21:4c:43:01:
         d5:38:e0:81:cc:75:d8:13:9f:3a:7c:d2:9d:bd:ac:38:bc:8a:
         a6:a0:d8:11:70:12:b1:0b:5b:45:72:e0:5b:ad:6e:5e:0f:8a:
         92:94:98:66:3c:43:9b:2a:4c:c3:0c:8c:59:d9:6e:1b:48:ee:
         c3:cb:d4:44:1c:1d:c9:f2:7a:71:c9:ac:c9:89:97:32:34:f5:
         b8:b3:15:9f:de:95:de:22:02:24:9d:2a:4a:09:b8:36:b3:54:
         3f:1b:4a:c0:56:bd:a4:54:bd:0f:5d:fa:df:97:82:64:2f:32:
         bf:9a:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:52 2026 by rpki-client