Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MORNMAPLE/0/3136332e36312e3132342e302f32332d3332203d3e20313334383233.roa
File:                     3136332e36312e3132342e302f32332d3332203d3e20313334383233.roa (raw, json)
Hash identifier:          xFPEEkvnZbxWQ72UZIKgvCV6vWOf7mvxfqvOLUdxGwM=
Subject key identifier:   B2:71:C4:23:AD:17:F7:64:BE:41:CA:85:5D:54:54:3B:E7:77:6E:31
Certificate issuer:       /CN=244C8E99B153753EBDDF52F3AE0D8258D1FE460B
Certificate serial:       725E8D80E5610B50D69C2BB619ED0149884CBECA
Authority key identifier: 24:4C:8E:99:B1:53:75:3E:BD:DF:52:F3:AE:0D:82:58:D1:FE:46:0B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/3136332e36312e3132342e302f32332d3332203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:39:53 +0000
ROA not before:           Mon 11 May 2026 17:34:53 +0000
ROA not after:            Mon 10 May 2027 17:39:53 +0000
asID:                     134823
IP address blocks:        163.61.124.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:5e:8d:80:e5:61:0b:50:d6:9c:2b:b6:19:ed:01:49:88:4c:be:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244C8E99B153753EBDDF52F3AE0D8258D1FE460B
        Validity
            Not Before: May 11 17:34:53 2026 GMT
            Not After : May 10 17:39:53 2027 GMT
        Subject: CN=B271C423AD17F764BE41CA855D54543BE7776E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e2:57:c1:20:25:36:01:ee:2d:08:18:1f:6b:
                    61:cb:e9:c4:ee:12:f2:8e:d0:2c:c8:41:3f:91:25:
                    df:42:78:a8:f9:d5:af:74:82:7f:3f:9e:72:8f:6f:
                    98:e6:89:ba:38:d8:81:88:72:46:4a:58:d3:3d:af:
                    44:8d:1b:ab:c9:c9:97:a3:58:39:b1:65:06:02:0a:
                    e1:1c:5c:78:74:67:87:c1:ff:5a:2f:e3:cb:9b:44:
                    96:b9:ba:cf:c3:a2:1d:1a:88:ea:43:ef:24:8a:0a:
                    8e:15:dc:54:78:38:5d:26:45:9a:3e:03:3e:c4:79:
                    e8:81:e9:dd:6c:e5:46:50:3a:c4:be:09:5a:dd:ce:
                    4b:96:8f:80:6b:32:8b:ae:68:46:5b:0f:43:da:33:
                    9c:b7:ea:d1:4c:25:a5:52:f6:1f:6c:3a:8b:57:3d:
                    84:17:85:17:d2:81:d1:34:9c:93:56:6b:3a:53:24:
                    84:a5:6d:d3:4f:71:17:5a:5f:8f:f5:52:a2:47:ff:
                    ed:21:9a:59:f3:ce:20:54:7b:a1:53:ff:0e:b5:8f:
                    61:1b:fd:44:0b:3d:c5:f3:17:e5:6f:79:17:cd:bf:
                    51:1f:72:e2:cd:7a:f9:10:8a:a4:90:7b:ae:bc:b8:
                    46:66:21:e6:ef:f7:64:cc:04:20:ab:56:d6:d8:88:
                    b8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:71:C4:23:AD:17:F7:64:BE:41:CA:85:5D:54:54:3B:E7:77:6E:31
            X509v3 Authority Key Identifier:
                keyid:24:4C:8E:99:B1:53:75:3E:BD:DF:52:F3:AE:0D:82:58:D1:FE:46:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/3136332e36312e3132342e302f32332d3332203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:f7:0c:ca:d8:14:14:c7:53:eb:c8:5f:9f:bb:31:7f:c0:
         2b:40:46:35:54:f3:07:51:4f:2e:a8:96:07:36:08:09:c0:fb:
         ad:e2:99:08:f8:5c:88:cf:57:c4:45:ad:f6:25:35:16:91:ba:
         0d:2c:35:b9:ba:aa:45:7e:ee:e4:72:6c:0c:a1:08:f2:89:1f:
         10:7b:24:58:67:d0:6b:a4:f2:8f:5a:a9:e5:d0:42:3c:de:b7:
         c4:95:ba:a0:f1:f0:ae:2f:f6:38:57:0d:60:bc:02:77:9c:a0:
         dc:ab:7b:d2:b7:8d:be:9a:3b:14:cd:62:24:c9:4e:22:a8:50:
         77:ed:ae:0e:02:cf:d5:d7:d0:ff:d4:58:89:bb:c1:0d:9c:c4:
         4f:3d:cb:2c:f5:fa:b3:2d:69:32:48:52:87:14:ab:c8:fc:a9:
         6a:8e:41:07:10:e2:c3:ab:72:03:47:87:94:5f:be:9c:d5:d0:
         e3:5d:36:1f:de:b7:a7:8d:8a:36:02:ba:fd:53:fa:01:1d:f6:
         8d:84:b6:3a:68:38:29:e4:61:90:99:71:f9:0c:69:0d:04:d1:
         c6:46:6c:55:9d:4a:c5:ac:62:39:55:86:05:a9:00:85:90:c2:
         8e:22:0a:ed:7f:a8:1f:df:f8:21:da:c8:ba:ea:b9:8b:87:8c:
         e1:a3:14:04
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUcl6NgOVhC1DWnCu2Ge0BSYhMvsowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0QzhFOTlCMTUzNzUzRUJEREY1MkYzQUUwRDgyNThE
MUZFNDYwQjAeFw0yNjA1MTExNzM0NTNaFw0yNzA1MTAxNzM5NTNaMDMxMTAvBgNV
BAMTKEIyNzFDNDIzQUQxN0Y3NjRCRTQxQ0E4NTVENTQ1NDNCRTc3NzZFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ4lfBICU2Ae4tCBgfa2HL6cTu
EvKO0CzIQT+RJd9CeKj51a90gn8/nnKPb5jmibo42IGIckZKWNM9r0SNG6vJyZej
WDmxZQYCCuEcXHh0Z4fB/1ov48ubRJa5us/Doh0aiOpD7ySKCo4V3FR4OF0mRZo+
Az7EeeiB6d1s5UZQOsS+CVrdzkuWj4BrMouuaEZbD0PaM5y36tFMJaVS9h9sOotX
PYQXhRfSgdE0nJNWazpTJISlbdNPcRdaX4/1UqJH/+0hmlnzziBUe6FT/w61j2Eb
/UQLPcXzF+VveRfNv1EfcuLNevkQiqSQe668uEZmIebv92TMBCCrVtbYiLjFAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUsnHEI60X92S+QcqFXVRUO+d3bjEwHwYDVR0j
BBgwFoAUJEyOmbFTdT6931Lzrg2CWNH+RgswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTU9STk1B
UExFLzAvMjQ0QzhFOTlCMTUzNzUzRUJEREY1MkYzQUUwRDgyNThEMUZFNDYwQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNDRDOEU5OUIxNTM3NTNFQkRERjUyRjNB
RTBEODI1OEQxRkU0NjBCLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01PUk5NQVBMRS8wLzMxMzYz
MzJlMzYzMTJlMzEzMjM0MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzEzMzM0Mzgz
MjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBoz18MA0GCSqGSIb3DQEBCwUAA4IBAQAr9/cMytgUFMdT
68hfn7sxf8ArQEY1VPMHUU8uqJYHNggJwPut4pkI+FyIz1fERa32JTUWkboNLDW5
uqpFfu7kcmwMoQjyiR8QeyRYZ9BrpPKPWqnl0EI83rfElbqg8fCuL/Y4Vw1gvAJ3
nKDcq3vSt42+mjsUzWIkyU4iqFB37a4OAs/V19D/1FiJu8ENnMRPPcss9fqzLWky
SFKHFKvI/KlqjkEHEOLDq3IDR4eUX76c1dDjXTYf3renjYo2Arr9U/oBHfaNhLY6
aDgp5GGQmXH5DGkNBNHGRmxVnUrFrGI5VYYFqQCFkMKOIgrtf6gf3/gh2si66rmL
h4zhoxQE
-----END CERTIFICATE-----
Generated at Wed May 13 02:51:58 2026 by rpki-client