Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e36332e39362e302f31392d3234203d3e203137373039.roa
File:                     36312e36332e39362e302f31392d3234203d3e203137373039.roa (raw, json)
Hash identifier:          XV5jtPB+DtvzD9Qd1EBOKkkOL7feLxQMxnz65QsVz/U=
Subject key identifier:   99:8F:D8:DA:85:93:8E:E2:91:D2:CF:F7:64:8C:09:6A:64:55:38:67
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       79A775239051A8BDE41FF29381791C12DDF2BFAC
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e36332e39362e302f31392d3234203d3e203137373039.roa
Signing time:             Mon 11 May 2026 17:37:11 +0000
ROA not before:           Mon 11 May 2026 17:32:11 +0000
ROA not after:            Mon 10 May 2027 17:37:11 +0000
asID:                     17709
IP address blocks:        61.63.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a7:75:23:90:51:a8:bd:e4:1f:f2:93:81:79:1c:12:dd:f2:bf:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:32:11 2026 GMT
            Not After : May 10 17:37:11 2027 GMT
        Subject: CN=998FD8DA85938EE291D2CFF7648C096A64553867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:fa:2a:81:a4:b7:d1:98:8c:77:d0:b7:c8:
                    bd:c4:96:8c:70:7f:f4:cc:55:0f:6d:ca:be:09:ec:
                    d0:11:60:ce:22:b5:fe:47:e7:df:3c:18:4f:94:52:
                    98:e7:a5:ca:50:6f:4c:e3:3b:cc:28:d6:01:69:a8:
                    a3:ae:b3:f8:85:06:49:9b:12:da:d8:12:a0:20:89:
                    59:5b:46:56:7c:9f:39:da:48:56:4d:19:85:dd:44:
                    11:74:3a:66:76:d6:6e:02:43:0b:33:02:d3:b5:5d:
                    7b:c8:f3:14:a2:b5:06:18:27:54:12:99:cd:46:4f:
                    70:72:2e:74:a7:67:53:5c:9f:51:16:62:3d:42:76:
                    52:a8:79:68:ea:fd:c8:34:4c:c7:37:b8:0c:9b:55:
                    46:25:7c:90:c5:a3:52:96:06:23:dc:79:7d:8e:6f:
                    d3:8e:e4:be:0d:7f:16:62:53:28:b1:b8:82:a1:f4:
                    e1:c3:10:bb:cb:bb:02:f3:98:69:b1:02:b5:bb:d8:
                    dd:ac:2c:c2:3b:35:e8:44:cf:0c:64:7e:eb:e3:df:
                    f9:1e:0b:4a:a0:e2:e7:9c:73:34:6f:b5:01:02:cd:
                    ee:27:b7:36:7f:69:27:3b:e5:6c:be:05:63:61:75:
                    19:52:1b:40:4b:63:4c:78:92:59:4f:83:ca:da:1b:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8F:D8:DA:85:93:8E:E2:91:D2:CF:F7:64:8C:09:6A:64:55:38:67
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e36332e39362e302f31392d3234203d3e203137373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:50:db:3b:58:b0:d0:32:67:4d:ce:52:4b:56:07:8d:07:8d:
         32:11:46:c5:4f:79:78:eb:1d:6e:fb:c9:1d:03:98:2e:e8:3e:
         e8:53:ea:8e:fb:20:e7:4b:74:63:e7:62:39:46:75:6c:0c:f3:
         93:5e:26:33:12:9a:7f:97:f3:9e:a3:13:6c:62:f2:05:52:fb:
         c6:cb:23:25:fa:d9:c4:a6:32:d2:c6:7a:2d:95:fd:6f:79:0e:
         41:d4:3a:60:d2:f6:bd:b9:f8:6b:85:7d:bb:91:f6:d5:49:b8:
         dc:03:10:a3:c6:50:da:3a:62:0c:2c:09:60:d5:06:bf:48:da:
         36:a0:87:99:ae:ce:12:3f:e7:e6:86:09:dd:54:6f:68:ed:9c:
         f6:ec:97:b0:0a:72:65:de:98:57:a9:a3:5a:ab:25:96:b2:7a:
         0d:27:46:76:aa:b2:3f:29:1c:c4:de:4c:31:0d:e3:7d:5f:32:
         a9:9a:81:d5:db:56:28:a6:75:77:f4:94:81:ad:03:b5:02:02:
         1d:ea:61:59:9a:36:cd:a7:da:e4:0f:c0:d0:10:3f:2c:49:94:
         c7:4a:0c:ee:6e:03:ca:33:10:71:7d:c9:f3:38:fc:62:fd:ad:
         e0:3b:c5:e9:64:df:a0:9d:b2:90:df:64:e3:00:9a:14:68:d3:
         6c:c6:9b:52
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUead1I5BRqL3kH/KTgXkcEt3yv6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2
OTY4Q0I0MDAeFw0yNjA1MTExNzMyMTFaFw0yNzA1MTAxNzM3MTFaMDMxMTAvBgNV
BAMTKDk5OEZEOERBODU5MzhFRTI5MUQyQ0ZGNzY0OEMwOTZBNjQ1NTM4NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM1PoqgaS30ZiMd9C3yL3Eloxw
f/TMVQ9tyr4J7NARYM4itf5H5988GE+UUpjnpcpQb0zjO8wo1gFpqKOus/iFBkmb
EtrYEqAgiVlbRlZ8nznaSFZNGYXdRBF0OmZ21m4CQwszAtO1XXvI8xSitQYYJ1QS
mc1GT3ByLnSnZ1Ncn1EWYj1CdlKoeWjq/cg0TMc3uAybVUYlfJDFo1KWBiPceX2O
b9OO5L4NfxZiUyixuIKh9OHDELvLuwLzmGmxArW72N2sLMI7NehEzwxkfuvj3/ke
C0qg4uecczRvtQECze4ntzZ/aSc75Wy+BWNhdRlSG0BLY0x4kllPg8raGxgjAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUmY/Y2oWTjuKR0s/3ZIwJamRVOGcwHwYDVR0j
BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v
MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy
NjgwNjk2OENCNDAuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM2MzEyZTM2MzMyZTM5
MzYyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM3MzczMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF
PT9gMA0GCSqGSIb3DQEBCwUAA4IBAQBSUNs7WLDQMmdNzlJLVgeNB40yEUbFT3l4
6x1u+8kdA5gu6D7oU+qO+yDnS3Rj52I5RnVsDPOTXiYzEpp/l/OeoxNsYvIFUvvG
yyMl+tnEpjLSxnotlf1veQ5B1Dpg0va9ufhrhX27kfbVSbjcAxCjxlDaOmIMLAlg
1Qa/SNo2oIeZrs4SP+fmhgndVG9o7Zz27JewCnJl3phXqaNaqyWWsnoNJ0Z2qrI/
KRzE3kwxDeN9XzKpmoHV21YopnV39JSBrQO1AgId6mFZmjbNp9rkD8DQED8sSZTH
SgzubgPKMxBxfcnzOPxi/a3gO8XpZN+gnbKQ32TjAJoUaNNsxptS
-----END CERTIFICATE-----
Generated at Wed May 13 02:49:01 2026 by rpki-client