Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MITACMDC/0/323430343a646230303a3a2f33322d3332203d3e203138313739.roa
File:                     323430343a646230303a3a2f33322d3332203d3e203138313739.roa (raw, json)
Hash identifier:          ScKz5v7qY5jPX8fFHjF9zU3+yWebwV6lUVVjO7sfadI=
Subject key identifier:   30:8E:82:CB:A7:C2:4C:E2:C2:6A:56:91:02:C8:35:E1:C0:C4:50:2F
Certificate issuer:       /CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
Certificate serial:       3B2B4B6D0758FF384696136D3F48B305D791B137
Authority key identifier: F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MITACMDC/0/323430343a646230303a3a2f33322d3332203d3e203138313739.roa
Signing time:             Mon 11 May 2026 17:03:57 +0000
ROA not before:           Mon 11 May 2026 16:58:57 +0000
ROA not after:            Mon 10 May 2027 17:03:57 +0000
asID:                     18179
IP address blocks:        2404:db00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2b:4b:6d:07:58:ff:38:46:96:13:6d:3f:48:b3:05:d7:91:b1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA
        Validity
            Not Before: May 11 16:58:57 2026 GMT
            Not After : May 10 17:03:57 2027 GMT
        Subject: CN=308E82CBA7C24CE2C26A569102C835E1C0C4502F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:56:cd:a3:8a:f3:62:ed:ed:41:5f:5e:5b:a0:
                    82:3e:5a:d8:6f:97:2e:59:8c:6c:8d:03:9a:a7:46:
                    87:5a:22:4a:46:f8:76:a7:24:89:70:e3:72:a1:57:
                    14:27:f7:02:ac:c2:0d:7c:33:7a:2a:36:0e:20:96:
                    2e:fe:21:c6:c9:51:f8:d2:2f:ee:68:10:68:46:5f:
                    9c:76:03:08:6e:35:10:19:d1:74:5e:2d:6b:e3:97:
                    db:d2:fb:7b:d9:bb:06:31:b5:c5:51:5d:a1:d2:bc:
                    e6:4c:c5:b2:83:48:05:3c:6f:57:0d:91:c7:3e:30:
                    27:df:51:a0:8e:bc:a8:a7:9c:27:53:0d:8a:3a:ce:
                    44:bc:7d:59:1e:d6:dc:60:6a:95:dd:98:80:0b:21:
                    82:a3:4b:8b:f8:18:84:ab:4a:39:31:5e:37:dc:f2:
                    27:cb:b2:da:0e:59:27:8c:fe:c3:6d:9e:47:38:65:
                    dc:ab:65:a1:67:6a:01:8a:69:e2:6c:d6:68:dc:85:
                    08:5f:08:b1:ea:dd:e7:20:92:cb:ea:de:c7:5f:c2:
                    c5:8c:42:24:05:2b:57:43:14:a4:08:5e:e3:23:47:
                    7d:9e:95:ec:02:c6:d5:e1:61:6c:71:f9:34:72:47:
                    67:8e:5c:99:66:2d:a3:63:21:db:db:04:24:33:cd:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:82:CB:A7:C2:4C:E2:C2:6A:56:91:02:C8:35:E1:C0:C4:50:2F
            X509v3 Authority Key Identifier:
                keyid:F1:CE:AE:4A:E1:3A:71:AF:6A:07:09:A4:C3:00:AD:A4:62:3A:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1CEAE4AE13A71AF6A0709A4C300ADA4623A2CAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MITACMDC/0/323430343a646230303a3a2f33322d3332203d3e203138313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:33:de:88:89:47:14:b2:1a:b4:6f:51:9a:7a:9a:32:a6:
         40:fa:8e:92:53:7c:fa:ae:b1:a5:5c:44:40:0e:00:c5:f3:41:
         9d:9e:4d:30:09:c6:ff:2b:bb:2b:19:f9:12:61:d3:f9:90:70:
         7c:ac:0d:61:6d:f9:01:2b:b6:0c:de:15:d2:d6:00:0d:e4:ef:
         43:a0:e0:f0:ea:a6:40:56:84:1c:a4:d8:4f:7f:54:f7:5a:b7:
         9b:a7:9d:73:47:27:53:16:67:80:f7:3f:0a:ef:8f:b1:86:19:
         47:50:c0:9d:f7:85:3d:d5:28:39:b7:2c:78:fa:4b:a8:2b:0f:
         41:d2:58:f8:b1:46:af:bf:cc:f7:6e:2a:ff:8a:a1:32:ea:21:
         50:70:92:6d:f9:d9:1c:48:7c:df:33:e0:4a:01:06:e7:e7:a1:
         15:26:f7:3a:67:97:68:44:cd:13:80:d6:78:ce:8d:4c:82:49:
         c8:e1:02:5e:0f:a3:1a:43:58:77:44:35:b6:fe:90:55:02:7b:
         ea:ed:59:3b:a0:b0:b7:07:5a:d1:32:89:d9:f9:d8:aa:ab:44:
         1a:7d:8f:ec:83:5a:e0:67:74:68:d8:a1:e3:f9:d6:33:14:7d:
         41:5b:73:a0:5b:72:fa:c8:b7:61:21:c2:bd:b4:0a:73:69:85:
         24:17:91:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:07 2026 by rpki-client