Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32322e302f32332d3233203d3e2031363539.roa
File:                     3139322e3139322e32322e302f32332d3233203d3e2031363539.roa (raw, json)
Hash identifier:          JKiDYZeq3ozNWrYv/xn74hrYAQGg6jGMgKP2OGScDsw=
Subject key identifier:   E4:6A:8B:1D:3F:81:41:8A:24:D2:8F:65:0F:53:F0:F8:D3:06:8E:FE
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       06815B59990F923A5BCBF08C67244EE3D1899E89
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32322e302f32332d3233203d3e2031363539.roa
Signing time:             Mon 11 May 2026 21:00:37 +0000
ROA not before:           Mon 11 May 2026 20:55:37 +0000
ROA not after:            Mon 10 May 2027 21:00:37 +0000
asID:                     1659
IP address blocks:        192.192.22.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:81:5b:59:99:0f:92:3a:5b:cb:f0:8c:67:24:4e:e3:d1:89:9e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:55:37 2026 GMT
            Not After : May 10 21:00:37 2027 GMT
        Subject: CN=E46A8B1D3F81418A24D28F650F53F0F8D3068EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:e6:ce:a1:00:0c:dd:c0:7e:90:47:4b:7d:
                    0c:4a:a5:99:6b:b7:3f:1d:99:87:3d:1b:4b:dc:0d:
                    d9:c5:93:ff:b0:0a:f2:6d:ee:05:08:92:17:2f:54:
                    60:7f:30:d4:28:fc:87:76:de:11:25:34:96:3e:fc:
                    d2:5a:15:af:4b:42:08:5c:a8:d2:6e:f8:f0:99:7f:
                    2c:7f:87:c5:af:f5:b5:82:25:2a:3d:3b:93:fe:b7:
                    c4:ef:b9:bd:11:a1:ec:64:f6:c8:98:8f:94:cc:a9:
                    8b:78:c1:66:93:2f:d2:a5:7a:de:37:d6:70:a0:48:
                    0d:83:4f:28:f4:d4:c3:a7:de:cb:b7:e2:60:ff:5b:
                    73:b1:60:f0:2c:cf:2f:53:3f:11:60:12:f0:de:da:
                    9a:3b:b1:b1:2f:c1:68:63:f1:f3:49:67:29:fc:6c:
                    49:09:67:a5:29:31:22:70:d3:f9:bd:97:9c:43:58:
                    e9:23:3a:09:2d:3b:69:92:74:4f:96:aa:b5:81:1b:
                    ea:6d:29:0c:a0:53:19:cd:0e:51:d3:85:89:0f:84:
                    c5:0e:4b:64:35:77:d9:ba:d8:b3:a7:59:41:36:bb:
                    75:af:36:9c:ca:e5:5e:22:cb:c4:9a:6e:ac:4f:f7:
                    56:67:96:25:50:be:f5:09:29:cf:ed:3a:33:1b:6c:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6A:8B:1D:3F:81:41:8A:24:D2:8F:65:0F:53:F0:F8:D3:06:8E:FE
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e32322e302f32332d3233203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.192.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:55:0e:59:f7:9d:d1:ab:d4:44:86:e7:e1:d0:cc:5d:c9:9a:
         11:5a:54:c9:3b:99:2a:41:1b:29:43:49:b8:ed:0e:88:ba:ca:
         de:43:2f:63:a1:41:4e:24:9f:d5:fb:9b:8d:d2:a6:4d:74:18:
         fc:c6:43:8d:df:62:cb:e9:89:19:83:6f:49:b7:7b:c1:a2:9a:
         fe:2c:17:04:cd:64:01:7b:fb:77:80:62:6e:92:e4:e4:b5:e7:
         c3:18:92:7f:19:58:8f:be:24:59:b8:29:6c:4c:c8:35:89:3b:
         b2:74:71:23:e5:54:61:e4:96:b4:32:3e:fd:c2:94:67:65:87:
         57:3f:ce:a7:bf:b0:ac:07:3c:0c:bb:9f:0c:b5:1a:73:2c:f9:
         39:4f:c0:aa:da:6e:3c:17:5a:f5:bb:3a:e5:74:31:be:a3:f8:
         7f:b3:dd:8c:67:cf:4a:47:d8:27:d5:04:a8:d6:b4:06:60:3e:
         a2:a2:85:c7:b2:26:d5:19:46:4b:9d:6e:cd:df:bf:7c:12:04:
         c0:f8:db:76:64:b4:c6:6c:23:66:64:39:da:aa:45:c0:26:87:
         0d:c2:b4:da:0d:a5:78:22:f8:f8:21:81:60:03:46:12:da:1f:
         9a:c9:7e:bd:5f:4e:81:5a:2a:64:fd:68:60:8c:a1:0d:6d:46:
         24:1a:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:14 2026 by rpki-client