Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e36332e39362e302f31392d3234203d3e20313331353936.roa
File:                     36312e36332e39362e302f31392d3234203d3e20313331353936.roa (raw, json)
Hash identifier:          e/e0s9DnuP1O6PMYlZkUxpLhZpP4ynlug+HelunYzKM=
Subject key identifier:   E5:76:68:A0:97:4D:01:F3:98:06:52:46:B2:44:B3:0D:3D:E6:AA:D8
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       660AA253E1D91627EB54BC35CF70F3779EF7CE50
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e36332e39362e302f31392d3234203d3e20313331353936.roa
Signing time:             Mon 11 May 2026 16:48:39 +0000
ROA not before:           Mon 11 May 2026 16:43:39 +0000
ROA not after:            Mon 10 May 2027 16:48:39 +0000
asID:                     131596
IP address blocks:        61.63.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0a:a2:53:e1:d9:16:27:eb:54:bc:35:cf:70:f3:77:9e:f7:ce:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 16:43:39 2026 GMT
            Not After : May 10 16:48:39 2027 GMT
        Subject: CN=E57668A0974D01F398065246B244B30D3DE6AAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:62:19:41:50:f9:18:95:0f:99:da:3b:f3:
                    a1:6b:2d:14:d8:25:c5:e2:06:9d:56:37:65:20:fb:
                    20:0a:fa:75:1d:8d:84:e7:e9:f1:33:4b:b1:1a:6a:
                    9e:d2:c5:14:1c:fa:1e:bc:df:4f:0e:bc:3c:57:6d:
                    0e:ac:30:c5:a4:7e:9c:ed:fb:e8:16:fa:67:dc:88:
                    0e:32:48:8e:ec:f9:ec:08:56:a3:f7:97:ef:2d:af:
                    68:70:d1:57:d1:bf:02:1b:6d:fe:29:46:49:b6:72:
                    6e:0f:b8:87:92:1f:1a:91:d1:f8:22:50:c6:4c:13:
                    8c:a3:3b:d1:16:7d:6e:c4:94:34:af:88:3d:11:09:
                    01:34:49:52:a5:9a:b8:50:fa:c7:be:d9:60:b4:44:
                    9d:f7:86:be:3a:d5:89:80:9c:6c:d3:55:9f:fc:69:
                    d4:1f:02:f0:8f:e7:26:ef:b7:35:3d:6f:35:2f:9e:
                    6d:d9:7d:8f:74:d5:c9:68:c1:24:46:95:8b:7f:5f:
                    94:04:aa:2a:d8:33:5f:93:ef:80:4a:bc:19:36:0c:
                    d6:67:38:15:6c:14:62:88:eb:a8:72:97:4b:2f:49:
                    99:f3:7b:75:3c:a3:d3:da:3d:12:30:27:a1:28:b9:
                    27:ea:44:10:c3:a8:25:a6:da:2d:81:fb:b8:a0:c9:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:76:68:A0:97:4D:01:F3:98:06:52:46:B2:44:B3:0D:3D:E6:AA:D8
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e36332e39362e302f31392d3234203d3e20313331353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:b0:07:02:2e:ee:46:1c:e9:14:4d:f3:58:b4:a2:7a:0d:
         bf:74:bb:0f:fa:d2:43:ce:47:73:07:eb:32:cb:55:b2:a6:5b:
         e7:8a:8e:bd:6c:a5:2f:30:aa:bb:e7:fb:b1:ed:e3:63:25:5c:
         03:20:34:49:fc:a2:e0:82:1c:16:57:7c:d2:b9:8a:80:11:bc:
         fa:62:85:e2:aa:06:9a:fe:1c:79:b4:54:39:3d:1e:d4:0e:ce:
         94:af:6c:64:7e:53:f0:fb:b0:fb:11:85:00:3a:66:20:c2:01:
         e7:61:bc:99:0b:42:26:7a:55:20:f0:79:5c:07:12:04:6d:1e:
         ac:db:f2:6e:b7:a2:0e:6e:00:95:43:2c:88:f6:33:dc:5d:c0:
         a7:3b:fd:e7:e4:0c:0b:35:da:89:10:94:f9:62:0f:f1:dc:b3:
         3e:fd:12:c9:31:02:60:f7:57:71:85:56:5f:95:04:85:39:6f:
         fe:6c:e9:c4:31:75:ef:07:1d:b0:9b:01:b5:73:b2:49:75:68:
         2e:e7:51:39:70:53:23:16:37:66:bb:79:ae:4d:39:e2:ff:ce:
         e5:8d:97:c9:d6:de:9c:de:27:8c:55:1d:95:07:21:e4:26:18:
         e4:6f:78:3c:e3:22:5d:7e:9a:70:62:fc:ab:1b:8e:72:1e:2c:
         d7:97:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:18 2026 by rpki-client