Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132362e302e302f31362d3136203d3e2039393136.roa
File:                     3134302e3132362e302e302f31362d3136203d3e2039393136.roa (raw, json)
Hash identifier:          J43XbGSuTozIJ4lFq9DRwWXKsPn1Q/1JQ/qLtAyGzPU=
Subject key identifier:   B6:4B:B7:7C:CE:80:0A:1A:11:3D:CB:0E:49:27:7F:9E:65:AD:6B:90
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       7F153F634997BA2FD6F5E667AAEDD2D7557929A3
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132362e302e302f31362d3136203d3e2039393136.roa
Signing time:             Mon 11 May 2026 21:00:20 +0000
ROA not before:           Mon 11 May 2026 20:55:20 +0000
ROA not after:            Mon 10 May 2027 21:00:20 +0000
asID:                     9916
IP address blocks:        140.126.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:15:3f:63:49:97:ba:2f:d6:f5:e6:67:aa:ed:d2:d7:55:79:29:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:20 2026 GMT
            Not After : May 10 21:00:20 2027 GMT
        Subject: CN=B64BB77CCE800A1A113DCB0E49277F9E65AD6B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:9d:fb:80:1a:01:35:b1:13:5c:13:cc:b1:
                    c2:54:ae:d5:52:dc:fe:5b:d1:3e:16:24:64:ac:8a:
                    84:8e:df:65:21:ae:ec:ac:1d:fc:d8:48:37:6a:9a:
                    c3:88:95:c2:16:35:a0:d7:f4:41:86:29:75:39:ca:
                    23:03:d0:61:7e:47:5a:ac:ea:0d:c3:29:b8:38:b6:
                    11:cd:11:31:54:82:47:4d:bb:7c:c5:06:fe:39:25:
                    c6:f5:ef:2b:93:68:9e:74:d3:fc:49:53:d9:01:61:
                    97:63:17:b2:63:ee:72:ad:18:e7:9d:7f:9e:d1:91:
                    a7:b6:a6:ef:8a:82:f1:63:e7:98:58:1a:08:2d:10:
                    76:f8:ef:57:f6:d9:73:21:e0:c7:70:94:2d:6f:a6:
                    0d:ae:64:2c:f3:33:dc:35:c0:66:87:69:24:e0:6e:
                    0b:55:a2:9d:6c:64:5a:90:d7:f2:f8:3d:a6:fb:56:
                    50:ec:72:c1:72:c4:c7:48:9c:9a:65:06:36:18:8f:
                    ac:f7:de:98:f9:25:a4:11:ed:f8:b0:41:6d:4a:36:
                    ba:85:25:d3:1b:a4:ac:50:f3:b5:38:af:b3:ce:9c:
                    b2:6d:97:f1:91:56:cf:a2:9f:05:74:97:dc:c5:9f:
                    8e:8e:dc:38:04:1a:b7:89:0a:f3:02:dc:25:0e:ab:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4B:B7:7C:CE:80:0A:1A:11:3D:CB:0E:49:27:7F:9E:65:AD:6B:90
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132362e302e302f31362d3136203d3e2039393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:63:98:6a:7f:a5:d3:99:3d:33:ac:4b:5b:d4:4a:bd:2d:
         6d:f4:cd:78:ec:c6:23:3a:aa:73:13:94:d0:1e:9a:31:34:ee:
         a0:84:da:3d:cf:1c:99:f5:02:c8:cf:48:12:ba:1a:b0:62:db:
         0c:9f:c4:c2:0b:04:08:8c:42:80:bb:e7:78:0f:fb:f6:3a:ad:
         3d:82:fa:40:f1:74:4f:aa:26:65:22:10:25:6c:87:b7:35:f9:
         0d:82:3d:a0:21:8e:45:f5:94:d6:48:77:f6:8f:63:2c:45:27:
         a5:f9:02:99:fb:fc:2f:f4:7c:d1:fb:eb:1c:bc:44:6c:a6:cf:
         c7:3c:8f:a1:b9:c0:a0:58:9b:12:c7:f0:3c:34:e9:8d:48:64:
         82:9c:fb:4c:31:9c:77:01:ca:19:db:06:bf:18:db:e9:89:2b:
         8e:cc:bb:28:a0:2c:e6:78:7e:ea:99:7c:bc:a2:d0:9e:29:65:
         ac:12:d3:d7:16:d0:03:2b:f6:41:41:d7:35:e2:2a:5c:1e:39:
         de:71:27:02:72:aa:5b:c4:7a:f3:5e:58:4b:e4:8e:e6:ed:5d:
         be:04:66:38:f4:a4:fb:bd:e7:39:8f:0b:c1:2f:0d:8a:53:66:
         d8:c9:57:cf:44:a1:ec:42:d1:f0:6a:66:6b:ec:43:23:3c:71:
         ad:f3:ed:5c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUfxU/Y0mXui/W9eZnqu3S11V5KaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1MjBaFw0yNzA1MTAyMTAwMjBaMDMxMTAvBgNV
BAMTKEI2NEJCNzdDQ0U4MDBBMUExMTNEQ0IwRTQ5Mjc3RjlFNjVBRDZCOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY7537gBoBNbETXBPMscJUrtVS
3P5b0T4WJGSsioSO32UhruysHfzYSDdqmsOIlcIWNaDX9EGGKXU5yiMD0GF+R1qs
6g3DKbg4thHNETFUgkdNu3zFBv45Jcb17yuTaJ500/xJU9kBYZdjF7Jj7nKtGOed
f57Rkae2pu+KgvFj55hYGggtEHb471f22XMh4MdwlC1vpg2uZCzzM9w1wGaHaSTg
bgtVop1sZFqQ1/L4Pab7VlDscsFyxMdInJplBjYYj6z33pj5JaQR7fiwQW1KNrqF
JdMbpKxQ87U4r7POnLJtl/GRVs+inwV0l9zFn46O3DgEGreJCvMC3CUOq0drAgMB
AAGjggHcMIIB2DAdBgNVHQ4EFgQUtku3fM6AChoRPcsOSSd/nmWta5AwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMjM2
MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM5MzkzMTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
jH4wDQYJKoZIhvcNAQELBQADggEBAHI6Y5hqf6XTmT0zrEtb1Eq9LW30zXjsxiM6
qnMTlNAemjE07qCE2j3PHJn1AsjPSBK6GrBi2wyfxMILBAiMQoC753gP+/Y6rT2C
+kDxdE+qJmUiECVsh7c1+Q2CPaAhjkX1lNZId/aPYyxFJ6X5Apn7/C/0fNH76xy8
RGymz8c8j6G5wKBYmxLH8Dw06Y1IZIKc+0wxnHcByhnbBr8Y2+mJK47MuyigLOZ4
fuqZfLyi0J4pZawS09cW0AMr9kFB1zXiKlweOd5xJwJyqlvEevNeWEvkjubtXb4E
Zjj0pPu95zmPC8EvDYpTZtjJV89EoexC0fBqZmvsQyM8ca3z7Vw=
-----END CERTIFICATE-----
Generated at Wed May 13 02:16:12 2026 by rpki-client