Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35362e302f32312d3234203d3e203338383433.roa
File:                     3232332e32372e35362e302f32312d3234203d3e203338383433.roa (raw, json)
Hash identifier:          uIfRZDkMVPpzqVgYiRfIm/2Z3+nWwzIfSlamFGwOVG0=
Subject key identifier:   73:5D:46:7F:CD:F1:D0:C9:26:D6:3A:8E:51:F5:9A:B0:22:58:36:E6
Certificate issuer:       /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial:       623ED929BA3F703CD60B16616BAA87365938D756
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35362e302f32312d3234203d3e203338383433.roa
Signing time:             Mon 11 May 2026 17:11:26 +0000
ROA not before:           Mon 11 May 2026 17:06:26 +0000
ROA not after:            Mon 10 May 2027 17:11:26 +0000
asID:                     38843
IP address blocks:        223.27.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:d9:29:ba:3f:70:3c:d6:0b:16:61:6b:aa:87:36:59:38:d7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
        Validity
            Not Before: May 11 17:06:26 2026 GMT
            Not After : May 10 17:11:26 2027 GMT
        Subject: CN=735D467FCDF1D0C926D63A8E51F59AB0225836E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:98:3a:ff:22:0a:8a:db:3d:77:52:0e:41:07:
                    39:d0:97:48:8a:e5:75:cc:93:21:d0:03:36:07:43:
                    09:98:b8:49:32:d8:66:61:9b:35:d4:c7:3a:96:1e:
                    a8:71:72:ce:1c:62:4f:62:80:6a:4b:79:a3:39:de:
                    fc:9e:ba:26:65:79:90:0c:c3:b7:00:e7:b0:d8:f8:
                    0e:28:fe:d5:95:e8:fd:c6:33:cc:d6:ef:42:a6:54:
                    7b:29:05:48:22:ba:ec:ec:f8:c8:aa:26:fd:59:9d:
                    e6:cc:94:77:e1:1c:54:39:01:09:5d:98:87:e2:d3:
                    26:cd:8c:3e:db:11:7d:4a:50:f2:66:9f:5a:56:0a:
                    e5:ad:17:a8:ff:77:61:de:3c:96:33:c2:58:5c:e0:
                    63:02:a1:89:4a:d3:c0:84:17:aa:8c:62:e6:0f:eb:
                    d6:ce:6c:c9:d5:88:45:ee:11:10:d5:f4:5d:e5:ae:
                    b8:0c:b1:c7:76:89:df:8e:b9:a8:c9:ff:e7:c8:1f:
                    01:b8:2d:d3:16:de:2d:b8:87:1e:a9:57:4d:1e:a4:
                    8c:9f:13:42:8c:02:e5:e3:4c:bf:bc:67:2a:3c:35:
                    da:e8:b3:49:d2:94:6c:8f:ee:67:a0:df:ee:a4:66:
                    47:c5:4d:d1:db:bf:b9:2f:2a:3b:49:51:11:a7:dd:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5D:46:7F:CD:F1:D0:C9:26:D6:3A:8E:51:F5:9A:B0:22:58:36:E6
            X509v3 Authority Key Identifier:
                keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35362e302f32312d3234203d3e203338383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:26:00:6b:f4:99:95:14:7a:24:bf:ad:24:7a:e1:2b:48:6f:
         8c:d1:d8:c4:fe:99:f4:d5:15:04:00:4c:8d:d9:cc:59:54:ff:
         b5:7b:e4:3c:af:ba:a5:55:22:5a:62:be:b7:97:cf:8b:7b:66:
         37:01:f9:0f:a7:86:62:25:0d:92:7f:15:68:42:84:8b:8b:6d:
         40:b9:0b:0b:18:32:bb:9e:8b:7d:6b:90:3e:76:04:ee:a2:83:
         95:8a:85:86:c9:c6:8f:df:18:bf:65:11:2b:72:42:ce:23:e7:
         8e:33:3e:18:87:36:ec:54:23:f3:df:59:a6:b4:88:17:2a:f1:
         e4:ba:e5:5c:5c:39:b3:6f:19:12:48:aa:f7:d9:ac:14:5e:25:
         84:38:28:a8:22:34:a3:5c:c3:d2:36:48:db:42:7d:a2:ce:de:
         fc:23:b6:0e:bd:ed:d8:5e:c7:d2:db:ce:bf:42:5d:d7:dd:56:
         12:b0:70:18:c8:83:ad:8d:e0:d6:f9:10:dc:6f:65:37:e5:c3:
         2e:cc:2b:4e:0b:2a:ab:d3:39:01:b3:22:9b:56:c6:33:c8:8f:
         b4:3c:1e:fc:31:ad:28:f3:9f:ab:d8:eb:7c:85:a9:93:75:ef:
         b5:a0:a2:55:01:de:f9:25:bd:9e:4e:24:65:a2:89:52:c0:1f:
         2f:b2:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:26 2026 by rpki-client