Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3231342e302f32332d3233203d3e203137373133.roa
File:                     3139322e3139322e3231342e302f32332d3233203d3e203137373133.roa (raw, json)
Hash identifier:          S6WD9hc4tJhHXKESkV5frIlTz4/5iBp1NI/UbKHxExQ=
Subject key identifier:   BD:AD:C5:AF:A7:AE:AB:BE:9E:62:40:03:E0:74:EE:51:83:D7:EE:F8
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       39092A06CB4F5CC258726CFD1AB84513F0165129
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3231342e302f32332d3233203d3e203137373133.roa
Signing time:             Mon 11 May 2026 21:02:56 +0000
ROA not before:           Mon 11 May 2026 20:57:56 +0000
ROA not after:            Mon 10 May 2027 21:02:56 +0000
asID:                     17713
IP address blocks:        192.192.214.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:09:2a:06:cb:4f:5c:c2:58:72:6c:fd:1a:b8:45:13:f0:16:51:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:57:56 2026 GMT
            Not After : May 10 21:02:56 2027 GMT
        Subject: CN=BDADC5AFA7AEABBE9E624003E074EE5183D7EEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:75:ff:ba:58:df:94:35:6e:f6:30:a3:cb:
                    57:b5:7a:30:c5:dc:92:fe:de:a3:bd:73:30:42:70:
                    6a:70:17:26:73:31:71:5a:c4:8c:41:61:8c:c1:84:
                    29:74:23:0e:c3:6a:c6:fd:1f:aa:23:e1:67:ff:22:
                    be:7d:4b:9b:36:6f:e1:35:3d:3d:5b:4a:eb:f1:6d:
                    0c:04:c9:ed:38:80:2a:b0:84:d8:ed:86:60:9a:e0:
                    af:d6:f6:64:b8:68:9c:12:7c:46:9f:8f:71:eb:e8:
                    df:29:93:9a:81:a0:bf:df:c0:f8:6f:32:77:8c:51:
                    4b:63:84:51:f0:08:98:7f:50:44:9e:60:70:a6:1b:
                    20:44:f9:89:c4:90:a1:7d:4d:d5:94:90:7e:63:42:
                    40:d2:b8:57:72:d1:11:09:7d:42:fa:29:e8:d9:c4:
                    bc:63:ae:b4:e7:ea:14:e4:46:09:fa:63:05:07:22:
                    dc:43:b8:ee:40:e6:9c:17:49:79:c8:4f:37:2c:b4:
                    68:9a:9f:ed:f9:f1:c9:97:5e:ad:a2:32:64:71:d4:
                    d2:d0:69:3d:65:c3:a5:a7:96:5d:d1:fe:7c:2b:bc:
                    5c:98:21:8b:98:dc:de:c9:b7:ed:2b:a8:16:c4:8b:
                    3f:91:eb:d9:26:20:26:b4:9e:5d:3b:6c:df:0d:71:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:C5:AF:A7:AE:AB:BE:9E:62:40:03:E0:74:EE:51:83:D7:EE:F8
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3231342e302f32332d3233203d3e203137373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:0a:4f:c4:73:e2:5f:46:38:3f:89:d2:9a:b3:43:11:10:8b:
         06:ce:36:3a:e4:3a:53:95:bd:34:a1:e3:84:57:2f:15:aa:62:
         e7:e1:e6:b8:9e:cb:05:12:01:94:8c:bc:fe:47:78:b6:43:5f:
         28:9f:68:5e:78:94:21:97:87:3c:24:ff:c6:77:5e:d0:0b:8e:
         c4:f1:43:11:7c:79:fd:4e:24:0a:ec:6f:06:b4:f8:83:90:9d:
         bf:db:b5:9a:11:4d:c6:81:79:fb:44:9f:5f:d0:f9:70:7f:98:
         9f:62:2a:4e:95:0b:3b:db:dd:df:c0:25:d4:4a:e8:8a:4c:9b:
         f2:c5:f9:01:42:95:e3:1d:41:4d:2f:d8:cd:a2:22:17:86:a8:
         05:7f:64:c1:c8:2c:61:c1:3a:f6:0d:92:c4:26:1b:1f:5f:1c:
         48:cf:df:83:2c:56:75:e1:d2:1f:3e:40:01:82:2e:92:df:ce:
         92:60:93:f4:ab:b7:3b:a1:48:7a:57:b2:63:8e:0d:7c:f8:f2:
         81:48:ab:19:62:c2:99:37:77:4b:a5:f5:1b:c0:d5:09:16:53:
         37:bd:98:00:df:61:56:b9:0a:e1:2f:19:cf:d0:75:15:46:04:
         a5:a9:da:83:9a:6a:2a:8d:69:c8:98:87:36:7f:c0:de:ae:57:
         67:45:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:45 2026 by rpki-client