Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3131342e302f32332d3233203d3e2031363539.roa
File:                     3139322e3139322e3131342e302f32332d3233203d3e2031363539.roa (raw, json)
Hash identifier:          Z128t72IGlX0rLCgRZXNEiGeJsY4XyBC0gQNGtu6H58=
Subject key identifier:   23:C3:E9:32:E0:E6:E3:EB:51:9D:7D:33:1B:72:F1:F6:AC:9E:25:93
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       2C54E749DD62C659664DE9393921EA2448DC84B9
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3131342e302f32332d3233203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:42 +0000
ROA not before:           Mon 11 May 2026 20:55:42 +0000
ROA not after:            Mon 10 May 2027 21:00:42 +0000
asID:                     1659
IP address blocks:        192.192.114.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:e7:49:dd:62:c6:59:66:4d:e9:39:39:21:ea:24:48:dc:84:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:42 2026 GMT
            Not After : May 10 21:00:42 2027 GMT
        Subject: CN=23C3E932E0E6E3EB519D7D331B72F1F6AC9E2593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:53:a9:02:18:61:74:22:b8:f7:67:59:72:
                    90:4d:78:6e:c3:b9:1a:7c:0e:d0:c3:f4:77:97:91:
                    c2:8f:71:dc:05:bf:1b:39:03:b8:92:a7:84:55:bc:
                    a6:d7:d8:83:31:c6:77:4e:eb:ec:6c:03:a4:da:74:
                    fe:17:69:12:23:b8:da:a7:dc:bd:1c:47:9f:41:ac:
                    83:01:6d:dd:56:9f:d9:96:2c:71:3e:8c:98:0a:e4:
                    3e:de:88:03:10:80:1d:d8:03:f4:a0:50:76:4b:4f:
                    88:76:3f:57:87:a4:92:cd:9c:b6:6e:76:e9:0b:45:
                    0c:54:e1:32:63:12:57:0c:e8:f0:d3:f5:a8:2f:51:
                    21:f1:a5:ed:4c:81:43:70:ac:9c:fc:6e:15:73:dd:
                    ae:89:b8:ee:2f:9e:0b:8c:b0:8e:e6:bb:6c:07:83:
                    dd:53:59:95:e6:2d:09:38:f7:da:91:ae:06:0e:43:
                    e3:de:02:8e:28:ea:40:b2:3e:11:e8:ba:f2:0c:9a:
                    93:84:20:b7:b7:9e:26:d2:6c:f7:15:34:11:a0:c6:
                    b4:e3:66:a7:1b:0a:53:12:97:7a:31:f4:32:54:c5:
                    d9:1f:a2:16:a3:c5:8b:6d:66:44:6c:d9:5f:ae:35:
                    72:40:7e:17:40:9d:7e:b7:0b:ad:ba:41:07:cb:e1:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C3:E9:32:E0:E6:E3:EB:51:9D:7D:33:1B:72:F1:F6:AC:9E:25:93
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3131342e302f32332d3233203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:db:95:78:8b:23:c8:b4:e3:ce:96:0f:b0:92:b6:7e:02:
         2d:06:17:a7:c4:91:6d:6d:b8:39:0b:fa:a3:f2:c7:7c:9a:87:
         02:1c:ad:8f:7d:3b:dc:4a:7b:23:ac:3f:78:db:d9:1a:f2:00:
         2d:fd:db:c3:32:2c:ed:1d:54:33:66:a8:16:b2:68:ef:44:54:
         13:b3:9c:71:4a:eb:ae:54:c1:1a:91:90:66:68:ce:ac:f2:3e:
         2e:d1:de:23:14:3f:40:2e:02:31:7b:40:55:e2:07:02:0d:28:
         c9:46:cb:3a:b2:97:7e:c7:04:d3:63:82:60:bb:61:28:7e:81:
         54:99:d4:30:aa:5f:c6:50:11:e0:80:d3:eb:00:ee:6e:d7:c0:
         39:4a:82:75:a0:de:9c:8a:02:ea:5e:10:2e:d6:cc:c5:ca:cf:
         ab:90:2c:c1:e6:71:db:2a:50:d4:d1:bb:68:db:d1:18:ce:ff:
         65:e6:e5:b3:31:58:8e:4f:8d:5a:87:30:cb:b4:a3:c8:70:3b:
         6d:d3:b6:19:1a:08:60:d4:44:18:b2:02:36:c0:77:d6:41:9d:
         fc:28:3e:03:b5:b8:b5:1f:a0:95:e2:90:80:2e:3d:72:fd:91:
         c9:58:4f:c3:37:54:44:c2:c2:98:0a:69:0e:48:ba:f3:ea:6f:
         cc:d4:33:ad
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIULFTnSd1ixllmTek5OSHqJEjchLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3
NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1NDJaFw0yNzA1MTAyMTAwNDJaMDMxMTAvBgNV
BAMTKDIzQzNFOTMyRTBFNkUzRUI1MTlEN0QzMzFCNzJGMUY2QUM5RTI1OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSFOpAhhhdCK492dZcpBNeG7D
uRp8DtDD9HeXkcKPcdwFvxs5A7iSp4RVvKbX2IMxxndO6+xsA6TadP4XaRIjuNqn
3L0cR59BrIMBbd1Wn9mWLHE+jJgK5D7eiAMQgB3YA/SgUHZLT4h2P1eHpJLNnLZu
dukLRQxU4TJjElcM6PDT9agvUSHxpe1MgUNwrJz8bhVz3a6JuO4vnguMsI7mu2wH
g91TWZXmLQk499qRrgYOQ+PeAo4o6kCyPhHouvIMmpOEILe3nibSbPcVNBGgxrTj
ZqcbClMSl3ox9DJUxdkfohajxYttZkRs2V+uNXJAfhdAnX63C626QQfL4QG/AgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUI8PpMuDm4+tRnX0zG3Lx9qyeJZMwHwYDVR0j
BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv
MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND
RjUwNzZCM0NGNkEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy
MmUzMTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM2MzUzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcDAcjANBgkqhkiG9w0BAQsFAAOCAQEAHCnblXiLI8i0486WD7CStn4CLQYX
p8SRbW24OQv6o/LHfJqHAhytj3073Ep7I6w/eNvZGvIALf3bwzIs7R1UM2aoFrJo
70RUE7OccUrrrlTBGpGQZmjOrPI+LtHeIxQ/QC4CMXtAVeIHAg0oyUbLOrKXfscE
02OCYLthKH6BVJnUMKpfxlAR4IDT6wDubtfAOUqCdaDenIoC6l4QLtbMxcrPq5As
weZx2ypQ1NG7aNvRGM7/ZeblszFYjk+NWocwy7SjyHA7bdO2GRoIYNREGLICNsB3
1kGd/Cg+A7W4tR+gleKQgC49cv2RyVhPwzdURMLCmAppDki68+pvzNQzrQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:40:46 2026 by rpki-client