Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133362e302e302f31352d3135203d3e2031363539.roa
File:                     3134302e3133362e302e302f31352d3135203d3e2031363539.roa (raw, json)
Hash identifier:          LgRL+5EuX4HdJT3uLWkG4PH+3CLb1MbCsPFxNkUFdX4=
Subject key identifier:   0B:73:A2:36:7D:0B:E5:8B:D1:22:83:A9:F8:80:A5:14:66:05:AD:B0
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       4A54AD6187CE3B0484E9EC1E857C716795C4A05E
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133362e302e302f31352d3135203d3e2031363539.roa
Signing time:             Mon 11 May 2026 20:59:11 +0000
ROA not before:           Mon 11 May 2026 20:54:11 +0000
ROA not after:            Mon 10 May 2027 20:59:11 +0000
asID:                     1659
IP address blocks:        140.136.0.0/15 maxlen: 15
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:ad:61:87:ce:3b:04:84:e9:ec:1e:85:7c:71:67:95:c4:a0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:11 2026 GMT
            Not After : May 10 20:59:11 2027 GMT
        Subject: CN=0B73A2367D0BE58BD12283A9F880A5146605ADB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:62:f2:16:e1:5d:cf:54:fe:a7:f9:99:e3:
                    79:21:68:41:30:b7:72:04:02:64:40:86:28:20:9b:
                    80:f7:90:e9:19:73:a2:c4:1a:b3:f8:76:e8:54:a6:
                    25:14:f6:70:ae:e4:69:1a:04:40:39:30:06:f8:0d:
                    b1:3f:fa:7e:ce:a7:eb:24:ed:e0:b1:68:c4:dc:10:
                    4e:ac:1c:ec:83:48:66:36:35:35:63:35:a7:6e:a6:
                    72:ad:90:be:58:e4:55:90:b5:db:62:41:ed:1b:5c:
                    9b:74:27:69:30:08:b1:21:58:0b:3a:eb:e7:71:29:
                    5e:8b:4c:ca:f2:92:60:27:43:48:bd:dd:eb:51:34:
                    bc:57:84:61:be:f3:9b:9c:6b:e7:26:ac:21:6b:e8:
                    97:1e:d8:78:6b:79:3e:8f:a1:71:e5:4a:53:d7:86:
                    a5:7a:a7:eb:79:bd:2e:a5:dd:77:17:b8:24:19:6c:
                    b5:ab:81:50:22:e3:1c:2e:7a:e2:8e:70:8d:9f:af:
                    f1:76:4c:a3:b3:5e:bc:0c:b5:16:3c:c4:c4:d6:a7:
                    cc:98:49:49:16:7f:c1:c8:41:86:e6:0f:95:b9:1c:
                    1c:e5:b7:f4:f1:c6:a8:05:52:9f:66:a0:0b:2f:21:
                    d8:2e:65:9b:25:7e:ae:be:b5:a5:fa:e0:cd:d3:46:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:A2:36:7D:0B:E5:8B:D1:22:83:A9:F8:80:A5:14:66:05:AD:B0
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133362e302e302f31352d3135203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.136.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6f:80:ad:e0:a1:74:3a:a2:e7:cc:2e:94:d2:5e:6c:80:cf:7c:
         ad:f7:40:92:1b:5d:e1:cb:6b:fb:73:c9:f5:a7:06:a5:21:6b:
         bb:9a:91:92:50:98:e1:6c:f1:7d:1b:63:d1:86:39:fb:be:7d:
         25:e7:9b:d6:b5:1b:d2:3f:ea:ed:b1:7a:ef:c1:22:2b:e7:14:
         fd:3c:eb:1a:ed:04:ed:51:31:84:46:ff:1f:45:0b:3b:93:3f:
         a7:3f:ab:a8:2b:1a:bc:0c:c6:ea:39:c0:e4:0b:19:87:f4:18:
         9e:18:20:53:b8:53:10:c8:61:58:77:01:f3:15:28:68:e4:8d:
         83:b3:8e:24:c9:82:ea:83:7a:ae:9e:2a:46:b4:03:d6:d5:1a:
         f7:3e:27:b8:aa:d2:d8:84:e4:79:a1:46:31:ef:4d:90:bb:b6:
         3f:35:2f:3c:4f:8f:fd:9e:fa:d1:af:71:e7:7b:71:eb:36:b6:
         69:da:7a:68:8b:d7:ed:fd:06:6d:0e:95:dd:aa:ac:70:24:73:
         6b:23:41:60:51:c3:b8:5b:a2:f9:32:94:d1:cf:ad:3e:27:b4:
         01:41:a9:12:8b:ba:15:22:fa:62:b3:ae:94:12:74:5f:e7:81:
         ad:71:63:b8:c2:98:44:3c:d1:4d:42:0e:27:1e:76:88:d9:de:
         9a:3e:e4:39
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIUSlStYYfOOwSE6ewehXxxZ5XEoF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU0MTFaFw0yNzA1MTAyMDU5MTFaMDMxMTAvBgNV
BAMTKDBCNzNBMjM2N0QwQkU1OEJEMTIyODNBOUY4ODBBNTE0NjYwNUFEQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7mGLyFuFdz1T+p/mZ43khaEEw
t3IEAmRAhiggm4D3kOkZc6LEGrP4duhUpiUU9nCu5GkaBEA5MAb4DbE/+n7Op+sk
7eCxaMTcEE6sHOyDSGY2NTVjNadupnKtkL5Y5FWQtdtiQe0bXJt0J2kwCLEhWAs6
6+dxKV6LTMrykmAnQ0i93etRNLxXhGG+85uca+cmrCFr6Jce2HhreT6PoXHlSlPX
hqV6p+t5vS6l3XcXuCQZbLWrgVAi4xwueuKOcI2fr/F2TKOzXrwMtRY8xMTWp8yY
SUkWf8HIQYbmD5W5HBzlt/TxxqgFUp9moAsvIdguZZslfq6+taX64M3TRgsJAgMB
AAGjggHcMIIB2DAdBgNVHQ4EFgQUC3OiNn0L5YvRIoOp+IClFGYFrbAwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMzM2
MmUzMDJlMzAyZjMxMzUyZDMxMzUyMDNkM2UyMDMxMzYzNTM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB
jIgwDQYJKoZIhvcNAQELBQADggEBAG+AreChdDqi58wulNJebIDPfK33QJIbXeHL
a/tzyfWnBqUha7uakZJQmOFs8X0bY9GGOfu+fSXnm9a1G9I/6u2xeu/BIivnFP08
6xrtBO1RMYRG/x9FCzuTP6c/q6grGrwMxuo5wOQLGYf0GJ4YIFO4UxDIYVh3AfMV
KGjkjYOzjiTJguqDeq6eKka0A9bVGvc+J7iq0tiE5HmhRjHvTZC7tj81LzxPj/2e
+tGvced7ces2tmnaemiL1+39Bm0Old2qrHAkc2sjQWBRw7hbovkylNHPrT4ntAFB
qRKLuhUi+mKzrpQSdF/nga1xY7jCmEQ80U1CDicedojZ3po+5Dk=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:57 2026 by rpki-client