Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132332e302e302f31362d3136203d3e203137373132.roa
File:                     3134302e3132332e302e302f31362d3136203d3e203137373132.roa (raw, json)
Hash identifier:          T/SqSgfP8j8yNV0DlyKMDHLPHWXZsWdFUSFx7wfh4N4=
Subject key identifier:   AE:44:CA:AD:7C:81:7D:86:CE:FD:C0:3C:C6:0C:98:CC:DB:EB:7C:BD
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       4CFBF74781E1978373555949CE76DF70F34D261C
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132332e302e302f31362d3136203d3e203137373132.roa
Signing time:             Mon 11 May 2026 21:00:17 +0000
ROA not before:           Mon 11 May 2026 20:55:17 +0000
ROA not after:            Mon 10 May 2027 21:00:17 +0000
asID:                     17712
IP address blocks:        140.123.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fb:f7:47:81:e1:97:83:73:55:59:49:ce:76:df:70:f3:4d:26:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:17 2026 GMT
            Not After : May 10 21:00:17 2027 GMT
        Subject: CN=AE44CAAD7C817D86CEFDC03CC60C98CCDBEB7CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:db:88:62:a3:c9:1a:fd:0c:9b:7a:f4:d4:
                    ae:51:ba:c1:99:42:90:88:b0:c1:ed:28:b1:d0:6f:
                    d4:7b:f4:f0:c7:84:bb:9e:43:a6:0a:1f:da:27:0d:
                    82:c3:ef:a9:2a:a3:fb:c2:ab:c5:41:31:47:b8:1d:
                    b6:20:17:89:fc:db:29:70:9a:d7:b4:3a:6c:22:aa:
                    c5:d9:1f:07:66:ae:ed:22:c6:7e:dc:6a:10:f9:57:
                    96:24:ce:09:d2:e0:10:09:a5:54:ec:16:d1:2e:34:
                    b1:97:04:8f:9e:f6:23:74:5a:82:b5:19:b9:69:f5:
                    de:55:ae:fe:c5:4e:ca:a7:cb:78:e1:d7:85:58:b9:
                    df:73:8b:28:cb:96:9b:8b:37:ff:59:de:45:58:ed:
                    a7:6d:cd:06:e9:5b:68:2d:b8:bf:f3:19:ee:ab:95:
                    24:84:c0:f2:17:2e:38:2f:6b:2b:83:bf:cf:1e:80:
                    5c:21:37:ec:64:ec:8d:b0:75:f1:65:48:cf:d6:59:
                    78:a8:87:b9:df:6e:4c:63:c0:20:47:7a:b8:ee:57:
                    67:7c:01:45:bb:e4:e1:1a:cf:5b:36:0f:00:a3:a6:
                    0a:79:4c:c6:b0:a2:cb:a6:81:74:a7:ae:f8:b9:3e:
                    04:f3:a9:72:3e:aa:73:46:a0:55:48:3a:ec:b6:4c:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:CA:AD:7C:81:7D:86:CE:FD:C0:3C:C6:0C:98:CC:DB:EB:7C:BD
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132332e302e302f31362d3136203d3e203137373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:0f:e9:dd:af:d2:23:62:b7:b6:46:2c:1a:7c:31:65:b2:6d:
         c4:e9:fc:82:79:04:5c:83:a5:80:35:c9:33:36:08:5c:17:a2:
         7f:50:60:0e:ef:65:9b:fc:1e:cb:73:ef:cb:ce:cf:08:e2:81:
         99:20:bd:c3:04:fc:d6:11:f5:50:33:83:0c:f5:48:a0:64:54:
         ce:36:26:0c:48:26:79:17:b0:b6:57:a9:9a:59:82:4e:80:36:
         d9:b3:c8:36:d9:ad:81:92:fe:e2:70:ff:4c:79:84:3f:81:d9:
         5b:a7:d8:ec:93:da:7e:e2:cf:6d:58:98:54:9a:f9:c9:4b:f3:
         ee:5d:8c:f8:49:aa:74:61:35:77:ea:66:7c:e6:b8:37:29:a4:
         36:0f:d7:6d:26:e4:d4:63:89:13:5a:07:32:d4:f5:12:83:10:
         99:e8:83:0b:54:e7:ef:bb:37:d0:09:a7:e2:88:c1:fa:d2:b1:
         74:1f:6c:e4:17:63:96:5b:a0:d2:e6:bb:a9:86:09:ca:e9:f9:
         cb:ff:83:41:f0:4d:b8:2a:ec:ab:26:dc:5e:90:1b:88:9d:f5:
         df:97:3a:3c:bc:aa:3d:80:95:f4:a0:c9:06:ff:92:ea:fc:0a:
         11:8d:44:7a:63:a0:c5:28:57:ed:0a:ac:6f:17:6b:99:fe:92:
         be:d2:d1:56
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIUTPv3R4Hhl4NzVVlJznbfcPNNJhwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1MTdaFw0yNzA1MTAyMTAwMTdaMDMxMTAvBgNV
BAMTKEFFNDRDQUFEN0M4MTdEODZDRUZEQzAzQ0M2MEM5OENDREJFQjdDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCduIYqPJGv0Mm3r01K5RusGZ
QpCIsMHtKLHQb9R79PDHhLueQ6YKH9onDYLD76kqo/vCq8VBMUe4HbYgF4n82ylw
mte0OmwiqsXZHwdmru0ixn7cahD5V5YkzgnS4BAJpVTsFtEuNLGXBI+e9iN0WoK1
Gblp9d5Vrv7FTsqny3jh14VYud9ziyjLlpuLN/9Z3kVY7adtzQbpW2gtuL/zGe6r
lSSEwPIXLjgvayuDv88egFwhN+xk7I2wdfFlSM/WWXioh7nfbkxjwCBHerjuV2d8
AUW75OEaz1s2DwCjpgp5TMawosumgXSnrvi5PgTzqXI+qnNGoFVIOuy2TPhpAgMB
AAGjggHeMIIB2jAdBgNVHQ4EFgQUrkTKrXyBfYbO/cA8xgyYzNvrfL0wHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMjMz
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzczNzMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwCMezANBgkqhkiG9w0BAQsFAAOCAQEAnw/p3a/SI2K3tkYsGnwxZbJtxOn8gnkE
XIOlgDXJMzYIXBeif1BgDu9lm/wey3Pvy87PCOKBmSC9wwT81hH1UDODDPVIoGRU
zjYmDEgmeRewtlepmlmCToA22bPINtmtgZL+4nD/THmEP4HZW6fY7JPafuLPbViY
VJr5yUvz7l2M+EmqdGE1d+pmfOa4NymkNg/XbSbk1GOJE1oHMtT1EoMQmeiDC1Tn
77s30Amn4ojB+tKxdB9s5Bdjllug0ua7qYYJyun5y/+DQfBNuCrsqybcXpAbiJ31
35c6PLyqPYCV9KDJBv+S6vwKEY1EemOgxShX7Qqsbxdrmf6SvtLRVg==
-----END CERTIFICATE-----
Generated at Wed May 13 03:23:44 2026 by rpki-client