Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232302e302f32342d3234203d3e203134363138.roa
File:                     3136302e32352e3232302e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          bCnkn2jAVE9KleuH5oDTsZDVKf1Fw7/YQWS5kX1HeTE=
Subject key identifier:   DB:E1:DE:32:3A:F5:9B:18:A8:74:EB:55:67:D6:07:A9:EA:A1:8A:B9
Certificate issuer:       /CN=18D1FE81C173554ED00687499D810AFDA7832B87
Certificate serial:       13C9CF93CEE37D53820AF932097DC37B239D5414
Authority key identifier: 18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232302e302f32342d3234203d3e203134363138.roa
Signing time:             Mon 11 May 2026 17:37:23 +0000
ROA not before:           Mon 11 May 2026 17:32:23 +0000
ROA not after:            Mon 10 May 2027 17:37:23 +0000
asID:                     14618
IP address blocks:        160.25.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c9:cf:93:ce:e3:7d:53:82:0a:f9:32:09:7d:c3:7b:23:9d:54:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D1FE81C173554ED00687499D810AFDA7832B87
        Validity
            Not Before: May 11 17:32:23 2026 GMT
            Not After : May 10 17:37:23 2027 GMT
        Subject: CN=DBE1DE323AF59B18A874EB5567D607A9EAA18AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:e3:d3:2e:97:b7:0e:4b:bc:7f:c6:12:7c:
                    e4:ab:4f:c6:d3:85:66:7d:8f:7f:4b:0c:5b:be:d2:
                    7c:6d:6a:de:b8:11:ea:e2:f1:fc:c6:ab:91:76:9a:
                    eb:90:65:0f:93:a9:7b:0a:8a:a3:6d:fb:df:b4:e0:
                    ec:90:18:8c:93:d4:f3:77:c4:95:6e:f2:ce:7d:b1:
                    7b:ad:31:57:fb:4a:5e:cf:27:35:a8:67:18:20:e4:
                    df:6c:eb:05:7a:01:ba:b3:7c:c1:ec:0c:f1:28:1f:
                    c7:d2:66:06:28:71:fb:24:13:c9:f8:79:e9:b3:59:
                    fc:98:72:1b:d4:bf:a2:a4:3d:13:8e:6d:ef:47:aa:
                    45:67:ef:c8:aa:47:12:b5:c8:cc:92:95:b0:57:3e:
                    c7:9e:f6:91:ec:7b:28:4a:34:c9:73:9d:54:e6:1f:
                    83:b3:3d:e1:6a:1d:ea:1e:c2:6f:42:d5:ff:79:70:
                    db:58:14:d3:f6:92:50:64:2f:eb:2b:ec:8a:8f:cc:
                    4b:8a:9c:66:48:b0:cc:45:30:89:7d:a4:97:46:a9:
                    1a:55:1f:79:fd:40:4b:02:7f:20:03:ae:09:40:97:
                    41:8a:b8:e5:6a:4b:6f:08:82:62:70:32:de:f1:5d:
                    c3:cf:14:d7:6a:ef:44:32:c1:23:ae:58:18:39:59:
                    35:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:DE:32:3A:F5:9B:18:A8:74:EB:55:67:D6:07:A9:EA:A1:8A:B9
            X509v3 Authority Key Identifier:
                keyid:18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232302e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:1f:38:ac:49:d8:74:1c:f2:20:d9:c7:89:fd:a3:ff:77:87:
         2e:0b:f4:c4:0d:18:73:37:27:81:8b:82:43:1e:12:61:08:bc:
         92:6f:83:10:c9:43:a8:b4:1e:e0:94:cb:ce:34:d7:fe:80:80:
         9b:2d:ce:f9:45:39:85:0d:34:b8:07:00:40:85:e0:a2:5a:a5:
         f6:8e:80:e4:d7:3d:a1:ec:e1:6a:55:0b:ed:44:ac:fc:62:0e:
         a3:8e:94:e2:d7:79:af:31:bb:63:61:a6:28:78:d8:b3:77:26:
         f5:e9:58:ea:4b:d7:44:4c:f1:3a:b0:d3:3e:25:1e:94:4e:a7:
         52:6b:99:ce:09:b1:32:77:f1:b1:1b:55:16:47:ec:e3:fd:2c:
         f4:74:cb:d6:8e:7c:09:c9:f7:80:7b:f0:40:bb:6c:10:0a:16:
         91:ff:c4:b3:09:22:91:60:60:7f:6e:e9:ba:73:1f:39:88:27:
         f2:4a:e8:29:cc:f9:dd:e7:38:9f:12:84:42:93:ec:a6:e5:ba:
         ce:bb:64:af:88:54:71:d2:ea:bb:4c:1b:8a:40:db:b3:8a:3a:
         d0:d6:ec:30:40:c3:76:2d:1f:c0:57:70:50:6d:1e:d2:25:b7:
         1a:36:fd:80:8f:82:06:79:9d:41:6e:7d:a0:80:99:4f:9e:90:
         f8:e1:a1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:46 2026 by rpki-client