Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3132332e3131302e302e302f31362d3234203d3e203137373039.roa
File:                     3132332e3131302e302e302f31362d3234203d3e203137373039.roa (raw, json)
Hash identifier:          3VM3P9As++63O5Eo9j9FI7Q7CGQEQ4y5H65XR6B3h84=
Subject key identifier:   1C:83:63:F5:E0:CD:DE:79:1F:D5:C6:80:EA:C4:91:8D:5A:88:CC:D8
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       1684078D2B9A8EB3D4B755D89D6C240F9F9F5453
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3131302e302e302f31362d3234203d3e203137373039.roa
Signing time:             Mon 11 May 2026 17:37:02 +0000
ROA not before:           Mon 11 May 2026 17:32:02 +0000
ROA not after:            Mon 10 May 2027 17:37:02 +0000
asID:                     17709
IP address blocks:        123.110.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:84:07:8d:2b:9a:8e:b3:d4:b7:55:d8:9d:6c:24:0f:9f:9f:54:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:32:02 2026 GMT
            Not After : May 10 17:37:02 2027 GMT
        Subject: CN=1C8363F5E0CDDE791FD5C680EAC4918D5A88CCD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:e7:2f:f0:d2:99:12:8e:bc:86:15:a1:23:
                    de:97:13:7e:d8:9e:df:a4:a0:a5:aa:34:ad:59:57:
                    e8:ff:a6:d7:93:22:c0:21:da:79:f8:9f:a5:b3:9f:
                    bd:a1:de:9e:13:16:6c:a3:59:a1:7c:d3:59:1f:ff:
                    72:b8:40:d2:6f:ac:67:71:14:76:a3:5f:a2:ef:dc:
                    17:d6:b4:bb:b8:5d:40:44:83:2f:1a:86:49:d4:b7:
                    d6:29:c2:30:3f:2c:04:d8:f6:36:07:ec:10:b6:8c:
                    2a:e5:9f:0a:c3:77:5f:c8:09:75:62:39:a1:7a:99:
                    b2:97:79:21:96:ce:3c:84:7a:56:06:8c:a7:62:34:
                    e6:9c:a9:36:5d:5b:ee:e9:f7:3c:5d:f4:14:ea:f5:
                    1e:bc:a8:db:77:5d:a8:7d:49:e2:e8:ad:d4:a5:2c:
                    66:e4:91:dd:5f:fe:8a:c8:8c:a9:a4:07:ab:1c:9f:
                    70:e8:3b:09:c9:1f:60:98:80:3d:55:fc:c7:52:81:
                    c6:e0:60:ff:34:9c:db:eb:f5:b9:61:6d:77:f9:2a:
                    dd:c9:ff:a8:9f:48:78:bd:0e:77:23:ea:eb:bc:cf:
                    81:ab:bb:70:28:f7:2e:00:2c:7c:a6:98:ce:0e:68:
                    10:0c:62:01:ae:77:9e:fe:9d:85:f2:7e:cb:79:7b:
                    ad:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:63:F5:E0:CD:DE:79:1F:D5:C6:80:EA:C4:91:8D:5A:88:CC:D8
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3131302e302e302f31362d3234203d3e203137373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:bb:d2:8a:9e:c6:09:2a:7c:09:c7:3d:1b:8b:6b:3d:13:
         bf:ec:31:27:ca:c5:b5:8e:0a:14:5b:41:f2:34:e4:dd:1c:9b:
         a2:8a:10:23:22:12:c7:35:f2:ad:ae:86:47:ab:47:0e:d0:52:
         18:72:2d:79:3c:34:4b:2e:0e:bd:eb:55:c9:1b:1e:da:d9:95:
         d5:83:f3:7b:cc:ab:83:fe:2b:17:5f:e4:cb:18:29:8d:95:a0:
         13:7c:60:69:95:6d:5c:3b:e2:e9:c7:64:2a:c4:8e:d6:8d:30:
         b8:39:59:47:8b:40:39:dc:94:af:35:65:72:09:97:a6:06:67:
         e4:f5:96:b7:83:03:cc:94:39:3b:d1:92:a6:52:ab:55:c8:ab:
         1e:5c:c4:32:70:e8:83:d6:67:6e:2a:cb:c7:4b:78:bd:73:d5:
         73:df:e2:e2:f6:47:73:ed:d0:4b:11:bc:c7:dc:8c:c0:a0:59:
         b2:25:23:26:68:0a:c6:12:6d:ad:42:0d:09:00:80:bf:37:7d:
         33:16:ac:89:73:cf:68:08:82:e8:3c:9d:77:9b:20:cb:cd:09:
         74:a0:b6:bd:aa:19:cf:a3:c7:80:7d:4e:59:65:74:bf:1e:5b:
         30:33:b5:42:af:1e:e3:17:47:96:35:96:4c:ef:a2:11:36:76:
         06:9c:22:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:07 2026 by rpki-client