Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e35362e302f32312d3231203d3e2039393136.roa
File:                     3134302e3132392e35362e302f32312d3231203d3e2039393136.roa (raw, json)
Hash identifier:          id/wEYqqn9BZ7cdUqcke5fVRDlgnVzVSTL7exP/hXTU=
Subject key identifier:   44:F8:10:2E:F6:CE:AB:C3:DD:F4:4E:64:09:97:06:22:A3:9A:86:9D
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       1B583A9996070AEF22E5D8A40CFDB8E1DC406727
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e35362e302f32312d3231203d3e2039393136.roa
Signing time:             Mon 11 May 2026 20:59:43 +0000
ROA not before:           Mon 11 May 2026 20:54:43 +0000
ROA not after:            Mon 10 May 2027 20:59:43 +0000
asID:                     9916
IP address blocks:        140.129.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:58:3a:99:96:07:0a:ef:22:e5:d8:a4:0c:fd:b8:e1:dc:40:67:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:43 2026 GMT
            Not After : May 10 20:59:43 2027 GMT
        Subject: CN=44F8102EF6CEABC3DDF44E6409970622A39A869D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:61:8d:73:2f:e1:ea:b4:eb:bc:d9:d9:93:
                    35:05:c0:c4:f3:fb:67:31:83:43:aa:dd:bf:2a:38:
                    7d:3b:54:a4:42:8f:52:63:9b:65:73:38:a5:ef:23:
                    72:23:5b:a2:65:ae:48:33:ec:f0:ef:ee:a8:dc:02:
                    be:9a:e6:66:55:47:c5:9a:26:c9:49:94:1d:b4:59:
                    d5:84:1c:e2:b4:ae:10:77:f0:53:53:7f:19:2e:86:
                    ae:b7:24:dd:8e:63:83:bd:5e:db:4a:6b:b4:50:95:
                    25:9d:2e:39:76:e8:e8:a9:a3:e2:16:4e:3c:83:f2:
                    38:5b:66:27:1e:7c:af:0d:3e:72:6b:3c:4d:a0:25:
                    23:d8:49:5f:76:6b:03:4e:92:43:35:29:68:b3:97:
                    8c:2c:23:b7:b6:5d:0c:6e:bf:f8:4e:5e:33:61:82:
                    99:9f:0d:7f:45:8c:26:24:8d:b2:2d:f9:41:bf:0b:
                    9f:29:48:b6:5a:34:30:db:92:d9:4d:a4:f9:31:46:
                    40:ad:fb:6b:8f:53:44:bd:8e:7f:60:09:b1:30:51:
                    ac:84:df:28:97:68:c8:3c:37:cd:95:e5:ee:a1:20:
                    7f:11:51:7a:34:2c:16:51:e2:7b:4a:95:8f:42:80:
                    a4:8f:44:5e:75:8d:eb:1e:00:58:06:65:a4:67:17:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F8:10:2E:F6:CE:AB:C3:DD:F4:4E:64:09:97:06:22:A3:9A:86:9D
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132392e35362e302f32312d3231203d3e2039393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.129.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:47:b5:73:8a:82:6f:ca:27:4c:0f:3a:4f:95:c1:43:ff:ef:
         39:56:c7:4a:ef:5a:50:0d:c5:15:96:a4:f0:75:b2:d6:3e:25:
         f5:11:d2:5f:c5:df:0e:70:a6:fc:25:40:d2:d7:21:81:67:ea:
         d5:69:59:de:97:d5:03:b1:7f:f8:e3:29:52:61:63:c3:86:ff:
         f7:9e:c4:ae:19:53:2d:40:ed:d8:22:e4:e0:4f:94:65:fa:cd:
         ec:55:97:a2:67:3a:39:7b:f4:e9:83:15:f4:da:3a:2f:83:00:
         af:74:b5:06:50:43:31:8b:87:dd:25:83:3e:2b:bf:ea:29:0b:
         77:3f:79:b9:71:07:6d:00:6d:c4:cb:00:b0:a2:09:52:67:cd:
         fa:8b:88:b9:32:bd:53:75:1c:81:b9:ed:3b:7b:c3:56:8c:c5:
         32:1b:0c:85:4d:24:b5:79:97:01:aa:a7:e5:2b:67:30:38:39:
         ab:14:7c:f0:bf:2f:f9:26:8e:7a:80:23:60:c1:b8:67:46:33:
         c7:29:0f:24:30:8f:dc:a7:d3:7e:b8:ba:80:c9:8f:a1:c2:18:
         c5:95:2b:68:bb:a7:ba:25:b7:ea:52:0e:6c:bd:7d:b1:8a:0f:
         01:bb:97:de:10:68:9a:82:2c:38:70:23:21:86:7b:59:43:20:
         bd:1e:c1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:01 2026 by rpki-client