Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136362e302f32332d3233203d3e2031363539.roa
File:                     3139322e38332e3136362e302f32332d3233203d3e2031363539.roa (raw, json)
Hash identifier:          H5s6znQ/2wtdiHy/vU5eMCfZ9/Yfpcut86Al2mZdTIg=
Subject key identifier:   89:9E:5F:55:B8:D1:EC:A6:09:62:6B:39:2F:1D:F7:E7:55:C0:29:DE
Certificate issuer:       /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
Certificate serial:       59A2E48C869F537ABEE6BECE0723B4D0C023532D
Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136362e302f32332d3233203d3e2031363539.roa
Signing time:             Mon 11 May 2026 20:59:37 +0000
ROA not before:           Mon 11 May 2026 20:54:37 +0000
ROA not after:            Mon 10 May 2027 20:59:37 +0000
asID:                     1659
IP address blocks:        192.83.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a2:e4:8c:86:9f:53:7a:be:e6:be:ce:07:23:b4:d0:c0:23:53:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A
        Validity
            Not Before: May 11 20:54:37 2026 GMT
            Not After : May 10 20:59:37 2027 GMT
        Subject: CN=899E5F55B8D1ECA609626B392F1DF7E755C029DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:bb:18:7f:07:1c:92:e2:84:3d:56:b2:93:
                    24:87:13:c7:29:bb:12:51:50:1d:1b:ff:0c:ab:fb:
                    82:ce:0c:fb:96:4d:f2:9c:3a:51:57:2a:ca:7c:16:
                    02:05:3f:e9:fe:ee:22:fe:c1:0a:5c:dc:30:73:57:
                    68:c6:07:88:01:7c:2c:e3:01:81:53:3d:68:db:f5:
                    b1:70:d0:4a:9e:c5:87:e7:fd:88:7d:3a:40:06:ca:
                    0b:d1:8c:e7:20:e3:bf:2d:aa:ee:d5:b3:61:dc:df:
                    b6:64:6b:3f:39:1a:cc:51:2f:68:ef:e7:c4:76:a6:
                    19:b2:7c:dd:4f:ed:d1:66:10:1a:d3:33:3a:c2:c7:
                    93:f0:05:7e:be:2c:e2:c8:43:c6:7d:ba:2f:2b:60:
                    66:95:38:8d:ca:5d:2f:b3:15:3b:52:0e:ce:82:3d:
                    66:b5:76:1c:e5:71:39:d1:43:f0:a3:2b:af:23:0b:
                    e3:20:f3:7b:f0:9e:8e:23:1c:01:f4:27:4f:5e:3f:
                    5f:55:d8:f9:19:56:cf:4d:d7:f5:78:66:68:98:98:
                    4c:e8:36:0f:d5:9c:50:a9:20:7a:62:5f:da:c1:b5:
                    17:83:1a:78:ef:aa:58:2c:0b:85:5f:ef:9c:84:49:
                    49:ca:fa:39:72:3a:ea:4a:9f:0e:6a:62:9f:1e:b4:
                    15:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9E:5F:55:B8:D1:EC:A6:09:62:6B:39:2F:1D:F7:E7:55:C0:29:DE
            X509v3 Authority Key Identifier:
                keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136362e302f32332d3233203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:7f:1d:6d:c1:b8:96:e4:25:4d:7c:a9:48:39:f0:e1:f8:ae:
         ac:a7:42:0f:d7:99:6e:ac:d3:f6:c3:f9:ac:35:12:cb:02:36:
         17:a1:9a:1b:88:3c:26:69:40:f3:de:62:d2:58:28:00:ec:63:
         12:1d:87:c8:ae:16:b3:57:99:ff:e7:18:11:36:0a:de:43:41:
         a6:ca:ad:f3:02:e8:0f:2a:a6:ab:65:18:58:40:2f:de:e5:e8:
         96:54:d7:cc:9e:94:65:b7:1c:12:4a:08:e6:28:52:ca:1b:0f:
         98:de:f9:a4:ae:c5:69:0f:08:f9:d0:44:8e:68:63:e5:cf:0a:
         b1:14:cf:40:48:f1:4b:47:4d:35:fb:f1:5b:30:e0:e4:66:20:
         da:e8:77:e0:0e:77:65:bb:78:b2:8a:63:86:91:77:b3:5e:b7:
         a9:cb:b9:32:00:b8:88:d1:66:79:27:3f:47:fe:f4:f4:37:0f:
         c0:6b:fd:c2:a2:ab:c8:31:7b:83:1f:fb:ec:3b:98:60:f9:a2:
         6d:c0:ce:d9:74:5f:a4:04:51:e0:45:69:4b:48:0e:48:50:7e:
         25:ee:e3:f3:e1:92:fd:00:88:cc:17:cb:9a:97:4a:8d:32:b1:
         4a:3b:7d:ef:68:c3:2b:0a:c1:fc:a4:a4:56:19:f5:c3:e6:2b:
         45:0a:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:05 2026 by rpki-client