Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133312e302e302f31362d3136203d3e203137373136.roa
File:                     3134302e3133312e302e302f31362d3136203d3e203137373136.roa (raw, json)
Hash identifier:          MfJiseJpsAgFY3CQuyMbh0Ifbji7GQYjUBNGinT/xBc=
Subject key identifier:   86:B7:23:A5:26:EF:61:48:38:0D:34:44:DA:FD:53:F2:55:88:23:B0
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       34BC87BB20FEC79E404015AC5D2FC09C0E957B5C
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133312e302e302f31362d3136203d3e203137373136.roa
Signing time:             Mon 11 May 2026 21:00:24 +0000
ROA not before:           Mon 11 May 2026 20:55:24 +0000
ROA not after:            Mon 10 May 2027 21:00:24 +0000
asID:                     17716
IP address blocks:        140.131.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bc:87:bb:20:fe:c7:9e:40:40:15:ac:5d:2f:c0:9c:0e:95:7b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:24 2026 GMT
            Not After : May 10 21:00:24 2027 GMT
        Subject: CN=86B723A526EF6148380D3444DAFD53F2558823B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:83:b5:fb:a2:d8:1a:ff:e7:4a:5c:da:eb:
                    cf:63:f7:8a:bb:67:4f:c3:9f:a8:63:a2:f0:af:77:
                    4f:fa:a7:d0:9d:62:7c:88:41:40:5c:b4:3d:d9:bc:
                    88:d9:f6:f9:90:ee:40:c6:2f:79:a3:b8:64:e7:aa:
                    0d:ce:f4:c5:8c:a2:8f:f8:25:a8:8b:4f:93:52:15:
                    79:df:56:eb:5e:3f:da:54:7e:13:1c:e6:a0:76:f7:
                    3c:8b:bd:f9:cb:42:06:55:37:90:d0:07:04:01:e9:
                    a7:5c:24:1b:02:d5:4d:b5:24:5a:4a:f6:c8:4b:fb:
                    ba:1d:0a:2b:13:70:45:b9:8c:96:a0:3e:f5:f8:71:
                    92:db:3b:1d:1e:ce:ed:78:61:be:6f:82:91:ef:92:
                    0f:fb:74:48:da:3a:8d:c9:56:6a:8b:cd:fe:04:64:
                    2f:a0:23:53:99:8b:e4:94:e1:b8:a9:c5:2d:e2:ae:
                    f1:39:d3:da:5b:55:32:53:cb:b3:ea:16:18:31:61:
                    f9:6e:61:10:5d:f3:a6:f2:87:4d:74:d9:70:21:19:
                    3b:e0:df:2f:70:70:e8:a7:c2:5a:16:21:e8:1f:9d:
                    8d:7a:48:b5:a8:b7:0f:c0:18:1c:b7:19:d0:cf:88:
                    5a:13:ae:13:5e:e6:21:0e:be:af:5e:0e:db:56:95:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B7:23:A5:26:EF:61:48:38:0D:34:44:DA:FD:53:F2:55:88:23:B0
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133312e302e302f31362d3136203d3e203137373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:4b:bc:26:88:01:94:a2:cd:3c:b0:ae:9e:2a:b0:02:ff:
         e3:94:d4:bb:09:28:32:09:4f:cb:c5:9c:3c:27:75:2a:e0:54:
         c9:6f:8c:66:79:ba:04:1d:fb:54:31:d2:85:db:85:8c:a2:c9:
         bc:20:e9:a9:3b:46:c3:56:81:c0:c1:b6:56:fd:11:30:59:2a:
         45:f6:8e:13:5d:10:76:6c:17:6a:2d:13:7f:e9:02:68:6a:d3:
         cf:61:3e:06:00:a0:95:1e:f3:9c:d5:ef:0c:22:ea:f0:c8:15:
         1e:68:ad:b7:ff:bd:2f:e0:c3:45:17:22:53:54:8d:61:99:3e:
         b4:a7:a7:7d:43:e2:cc:9e:b9:b6:a0:b1:44:0a:95:2a:20:ac:
         1a:52:bc:ec:83:8e:f8:e0:71:af:f2:7b:da:dd:ac:40:c7:3e:
         b3:66:38:28:cc:e7:49:8a:41:f2:ef:a2:6e:9a:95:a4:85:68:
         30:09:ef:1c:6c:f8:59:40:ad:81:d4:a2:dd:97:af:cb:ec:bb:
         dc:27:cc:5f:02:88:63:cb:42:79:ac:7a:62:83:c8:48:7a:67:
         41:6c:dc:75:9e:ab:6a:18:39:28:3c:b5:19:4d:fc:bd:bf:41:
         4b:39:f2:f6:41:2d:7a:82:ba:a3:2d:75:3c:58:88:2b:8b:f8:
         c0:31:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:58 2026 by rpki-client