Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e203137343038.roa
File:                     3136302e32352e3232312e302f32342d3234203d3e203137343038.roa (raw, json)
Hash identifier:          DcORFKNZWB0zprz/YGx3XCHKdNb/SVKWG++JjaAt6oM=
Subject key identifier:   38:65:6E:93:DC:47:A5:52:C5:DA:02:CC:09:88:C1:97:8C:37:82:79
Certificate issuer:       /CN=18D1FE81C173554ED00687499D810AFDA7832B87
Certificate serial:       76FA058FE82FABF5FEA7FF7AB162E30CFEF7F631
Authority key identifier: 18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:38:47 +0000
ROA not before:           Mon 11 May 2026 17:33:47 +0000
ROA not after:            Mon 10 May 2027 17:38:47 +0000
asID:                     17408
IP address blocks:        160.25.221.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fa:05:8f:e8:2f:ab:f5:fe:a7:ff:7a:b1:62:e3:0c:fe:f7:f6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18D1FE81C173554ED00687499D810AFDA7832B87
        Validity
            Not Before: May 11 17:33:47 2026 GMT
            Not After : May 10 17:38:47 2027 GMT
        Subject: CN=38656E93DC47A552C5DA02CC0988C1978C378279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:0e:db:34:cd:12:a8:c1:cc:d1:3f:d8:b3:
                    f8:63:17:68:f2:3a:6b:82:d0:65:f2:a8:cd:41:3f:
                    22:1a:4c:3e:ef:e0:ac:28:8e:46:23:d0:55:c8:d2:
                    05:90:a3:46:6e:8b:0f:f1:be:27:f2:c8:18:3f:9b:
                    de:2e:af:b7:85:ea:fb:9c:4a:b6:05:bc:74:ab:aa:
                    1f:1c:a1:42:cd:b9:a9:f9:85:30:d6:26:93:7d:08:
                    94:69:7f:7e:15:1f:09:c8:4e:ee:73:2d:3a:d8:4f:
                    aa:ff:a0:79:e3:f7:e1:dd:85:d6:44:a7:33:69:55:
                    6e:87:2f:87:95:43:2d:7b:ed:97:67:63:7c:51:f3:
                    c3:ca:b1:89:62:a1:f7:42:7d:3d:2c:f9:69:9e:ba:
                    46:3b:b7:3b:c6:96:43:80:7d:ed:44:ea:fd:69:e1:
                    64:b6:96:b3:38:6c:b9:32:85:27:e4:54:87:cb:ed:
                    27:5a:d1:88:13:d1:78:5b:c0:d2:a5:c5:fd:59:5a:
                    39:3b:2d:93:72:ca:90:63:cd:c3:57:b1:f1:49:d8:
                    a2:e9:d4:cd:68:a7:2a:b3:96:42:95:6e:8f:25:3b:
                    4d:17:11:1f:c2:de:6b:6c:8c:bc:8d:55:b6:26:70:
                    dd:72:3f:49:d5:f3:ec:26:cb:07:d4:99:fb:24:e9:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:65:6E:93:DC:47:A5:52:C5:DA:02:CC:09:88:C1:97:8C:37:82:79
            X509v3 Authority Key Identifier:
                keyid:18:D1:FE:81:C1:73:55:4E:D0:06:87:49:9D:81:0A:FD:A7:83:2B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/18D1FE81C173554ED00687499D810AFDA7832B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/18D1FE81C173554ED00687499D810AFDA7832B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/1/3136302e32352e3232312e302f32342d3234203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:49:d4:af:76:b2:7a:1b:c1:4f:cc:50:87:74:98:94:37:a4:
         81:c1:86:f5:af:ff:33:4c:1c:59:40:78:76:82:59:95:9e:39:
         84:e0:c4:33:f0:b9:0d:4f:07:6e:3b:f5:02:a9:10:0e:df:20:
         12:27:59:2d:13:68:a1:c8:e9:4f:fc:4c:6e:99:c9:4a:31:d1:
         d7:0a:42:36:09:12:5b:a1:f1:3a:13:dd:db:10:37:d6:2e:17:
         43:e3:7d:92:59:22:6f:a1:a3:9c:b6:41:80:35:3e:32:f9:97:
         65:25:d8:87:8a:69:1f:c3:23:53:07:30:e3:e3:74:52:8b:0f:
         cd:7b:92:cf:20:0c:6f:8c:81:38:01:3b:d5:28:09:06:06:cd:
         7a:1a:b0:a6:2b:cb:86:6e:e5:22:77:0b:a6:62:f1:78:6a:6e:
         ec:8b:ae:59:92:d8:57:cd:d2:9a:e7:86:18:54:48:dd:cd:48:
         43:e8:ab:af:2d:e1:e8:fe:8a:da:e6:a3:27:97:b5:93:1a:a3:
         4a:ba:eb:9a:e9:2a:ec:f2:20:19:0e:05:13:11:7b:46:e7:89:
         68:66:1d:6c:f2:8d:40:44:65:d0:c1:90:c7:72:96:0e:19:d1:
         5f:86:1f:89:79:2f:a1:03:e5:19:50:ae:da:36:ab:1b:1f:f9:
         c0:0c:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:22 2026 by rpki-client