Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e20313334353138.roa
File:                     3136302e32352e3232312e302f32342d3234203d3e20313334353138.roa (raw, json)
Hash identifier:          7IoYQpo1T/5YhDfvSsGkmAx+L0WawF2gleD9NZlKOWc=
Subject key identifier:   96:5A:A5:52:A0:6F:FF:A9:3D:85:31:7F:94:1B:02:3D:B6:29:CE:B2
Certificate issuer:       /CN=18D1FE81C173554ED00687499D810AFDA7832B87
Certificate serial:       22F32A5F57A67850B96CC2DA17B921522C367A4A
Authority key identifier: 18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e20313334353138.roa
Signing time:             Mon 11 May 2026 17:44:47 +0000
ROA not before:           Mon 11 May 2026 17:39:47 +0000
ROA not after:            Mon 10 May 2027 17:44:47 +0000
asID:                     134518
IP address blocks:        160.25.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f3:2a:5f:57:a6:78:50:b9:6c:c2:da:17:b9:21:52:2c:36:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D1FE81C173554ED00687499D810AFDA7832B87
        Validity
            Not Before: May 11 17:39:47 2026 GMT
            Not After : May 10 17:44:47 2027 GMT
        Subject: CN=965AA552A06FFFA93D85317F941B023DB629CEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e8:2a:e0:a8:ab:20:d3:c2:41:3f:37:d6:d8:
                    38:a6:e9:83:1e:71:96:3e:f5:da:bf:dc:fb:45:6b:
                    78:3c:dc:7c:81:6c:b2:f2:0d:dd:6c:cc:b8:4e:9c:
                    1f:51:7c:12:bf:f8:3d:2c:25:e8:3c:21:61:80:03:
                    3f:1d:e1:64:1d:89:3d:a4:66:74:d3:8a:4b:6b:67:
                    2f:66:0c:c8:54:9e:44:55:38:c3:3d:8c:fe:33:4c:
                    88:70:0d:95:98:41:57:56:85:34:23:4f:65:cd:b9:
                    f9:63:3d:96:d0:3c:1e:c7:66:ef:2a:9d:59:69:0c:
                    1f:57:db:03:12:04:a8:22:c8:88:67:12:0e:a5:1f:
                    2f:80:ee:ca:5d:1c:c5:bd:c8:23:dd:7a:ee:9b:58:
                    66:bc:56:83:74:8c:f4:b9:55:1c:d5:4d:fb:89:8f:
                    c1:2d:39:e8:97:77:19:70:12:35:80:d2:8a:dd:25:
                    9c:09:68:e2:1e:bb:2d:32:bd:90:27:e9:69:10:a8:
                    4b:65:83:62:4e:b3:36:f4:49:4f:54:f7:cd:85:7d:
                    a4:20:de:cf:d1:f8:e2:94:e3:c2:c4:42:b2:c0:1b:
                    28:1a:ee:b4:26:2b:f2:a1:6e:3f:4c:80:de:c5:d3:
                    1d:f1:01:31:aa:36:a1:9f:ee:ed:78:6a:b9:9c:12:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:A5:52:A0:6F:FF:A9:3D:85:31:7F:94:1B:02:3D:B6:29:CE:B2
            X509v3 Authority Key Identifier:
                keyid:18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e20313334353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:3f:47:e2:a5:93:f8:13:64:a8:64:27:d7:39:dd:3f:f0:
         91:10:20:6c:1f:90:23:ed:90:67:f3:8f:2b:3d:3a:24:d0:68:
         45:9a:14:cf:56:1b:75:36:d5:63:85:57:81:1e:f0:6b:e9:90:
         b6:b2:07:05:ad:e4:78:40:5a:06:a1:27:e9:31:c2:89:a2:99:
         00:db:10:fd:25:ff:bd:d9:e4:8a:fd:9b:3e:eb:a1:fc:78:ff:
         02:87:41:10:9d:07:65:76:28:1e:d2:cb:1b:93:b9:b6:16:b6:
         68:d4:7c:4c:bc:ae:6c:6e:46:9b:8d:75:08:a2:17:c9:0f:09:
         c5:83:79:69:ed:d5:7d:6f:4b:22:a8:42:ef:3b:93:7b:e5:3f:
         c3:a2:d0:0f:c0:d1:47:96:bd:91:61:dd:ff:6f:e0:cc:d9:04:
         c6:5e:a6:dc:5d:a8:b4:52:cc:58:af:11:ef:bb:1a:e7:a7:6d:
         01:35:f7:2c:23:03:4b:1a:0b:a5:ef:23:43:f9:d5:09:40:b0:
         93:7c:8a:37:d1:e5:7f:71:60:ac:b5:e3:2f:c8:c7:54:96:29:
         42:c2:00:45:37:f9:fa:c4:f6:45:15:87:d0:51:06:d7:c0:55:
         1a:20:ff:ff:85:9f:4e:3b:e4:67:b5:0f:0a:b0:0c:57:6b:ed:
         0b:5c:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:08 2026 by rpki-client