Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3130392e3232342e302f32332d3233203d3e203138323137.roa
File:                     3134302e3130392e3232342e302f32332d3233203d3e203138323137.roa (raw, json)
Hash identifier:          zN0UMf4J2hscIIaacZG4qknvXU0xZg1fFpi6iKSYccE=
Subject key identifier:   92:91:9D:9F:57:73:88:73:9F:3C:8C:3C:6A:F7:A6:66:D5:CC:7C:67
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       3839F120B759C508C80E00E5A03581457104B347
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3130392e3232342e302f32332d3233203d3e203138323137.roa
Signing time:             Mon 11 May 2026 20:59:53 +0000
ROA not before:           Mon 11 May 2026 20:54:53 +0000
ROA not after:            Mon 10 May 2027 20:59:53 +0000
asID:                     18217
IP address blocks:        140.109.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:39:f1:20:b7:59:c5:08:c8:0e:00:e5:a0:35:81:45:71:04:b3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:53 2026 GMT
            Not After : May 10 20:59:53 2027 GMT
        Subject: CN=92919D9F577388739F3C8C3C6AF7A666D5CC7C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:4d:e2:b2:a4:70:8f:57:dc:4a:e5:b8:73:
                    25:5d:f8:a5:3a:e2:9f:20:c8:fb:9c:de:0a:ea:68:
                    69:a1:b7:1e:83:1a:83:e4:d4:9f:6e:c0:26:18:d3:
                    fe:db:5c:10:6b:df:82:6f:16:c9:a7:10:79:a5:95:
                    16:68:4f:d2:b7:e9:ed:be:d9:6e:ce:50:dd:de:e3:
                    4c:84:1f:2c:0d:0c:a6:32:65:03:a5:b8:cb:07:c8:
                    ef:e0:e7:4f:63:45:e3:97:3e:5e:50:f6:f4:ce:7d:
                    92:a3:94:04:2d:dc:fe:f8:f0:c4:b7:92:c9:58:4d:
                    07:63:e9:cd:cd:99:bc:6f:3e:84:ca:c4:f3:5d:4b:
                    7a:e7:d1:0f:41:7f:64:5c:8d:d2:c0:c3:5c:bd:a3:
                    6a:53:d9:a4:e2:76:2a:56:4a:d1:9f:dd:fb:3c:1a:
                    33:0b:1d:78:7c:5a:ac:8d:a3:56:a6:0f:1e:95:8a:
                    90:df:89:dd:a9:96:b0:3c:f7:a7:2d:71:5b:89:7e:
                    1d:34:02:ab:19:07:17:a2:8e:b9:06:86:ce:66:cc:
                    e3:1b:11:0b:dd:6c:16:fd:d6:83:7e:9e:11:2a:bb:
                    6e:47:19:e0:11:ab:b4:85:89:9f:a7:97:94:4b:56:
                    48:6e:d6:a0:b7:6c:fc:76:43:85:8e:aa:ae:63:71:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:9D:9F:57:73:88:73:9F:3C:8C:3C:6A:F7:A6:66:D5:CC:7C:67
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3130392e3232342e302f32332d3233203d3e203138323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.109.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:fc:5d:0a:d9:52:9e:e7:13:ca:b3:3c:5d:54:d7:35:64:ea:
         af:14:c9:ce:e5:c9:82:df:f2:bd:6f:22:85:07:80:04:bb:02:
         aa:7d:7e:05:88:1e:de:34:7e:78:20:28:fa:e7:18:69:0e:47:
         06:0e:a8:14:66:ca:5e:8b:a2:44:20:4e:b5:b0:8f:8c:de:49:
         1b:4e:4a:90:df:1e:fe:1f:9b:ca:0d:95:f1:2f:ed:a0:4c:c5:
         6c:47:61:5f:3b:e6:05:50:41:89:e6:cf:fa:62:49:cf:17:3f:
         c5:bb:3e:20:93:65:82:19:6b:ff:e8:e2:16:17:3c:3d:7c:7f:
         80:fc:ca:9f:8d:92:b0:4b:cb:f8:96:d8:92:ee:dc:b1:e1:3c:
         97:04:b2:c7:3b:23:b4:7e:2c:b6:32:8d:a1:63:52:a2:04:31:
         41:30:03:94:e3:13:89:4c:45:9f:b0:aa:99:b7:84:68:ab:2a:
         de:1c:82:3c:87:b7:10:d9:76:01:ba:7d:9b:3a:dc:03:23:79:
         19:19:3c:e7:e3:fa:b6:23:e6:04:f9:2c:5f:01:50:1c:52:bf:
         a5:91:0e:e6:49:84:5c:ca:11:ac:e6:5a:52:4b:e8:e5:52:37:
         77:a6:ab:8e:a4:7a:3b:80:14:4d:5c:fc:0f:80:9b:eb:f4:67:
         f1:c1:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:09 2026 by rpki-client