Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa
File:                     3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa (raw, json)
Hash identifier:          QO6frV8aS6PVAILYRtHoeeGycA5ehxDpVQIfYin59M4=
Subject key identifier:   91:F4:CF:90:90:61:C0:17:5D:1E:47:D9:28:E2:3E:2B:76:47:CC:0F
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       260111E9C17E1A15DEABBF597216B83197C34288
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:55:25 +0000
ROA not before:           Mon 11 May 2026 17:50:25 +0000
ROA not after:            Mon 10 May 2027 17:55:25 +0000
asID:                     18046
IP address blocks:        116.118.176.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:01:11:e9:c1:7e:1a:15:de:ab:bf:59:72:16:b8:31:97:c3:42:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 11 17:50:25 2026 GMT
            Not After : May 10 17:55:25 2027 GMT
        Subject: CN=91F4CF909061C0175D1E47D928E23E2B7647CC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:9d:3c:f0:ba:ab:5d:53:f5:9a:96:3d:a0:
                    65:67:05:6c:7a:df:a1:4b:4a:41:90:1d:0a:de:43:
                    7f:87:f1:41:34:c9:76:e4:6e:a7:81:d5:e5:b9:51:
                    c3:7b:c7:fe:08:f3:0b:4b:dc:e6:c9:ea:17:fe:83:
                    d9:43:43:ec:83:15:b8:1c:4b:87:64:39:d1:04:98:
                    5a:82:f4:7c:61:1d:f6:ff:f0:54:3b:99:56:e5:85:
                    0d:99:22:de:b4:0f:88:2c:1d:4f:a0:a1:c0:b8:d1:
                    4d:0d:25:15:31:68:1d:45:96:25:a7:12:59:cb:6d:
                    b9:4a:4d:4f:71:35:37:f5:a6:04:98:ea:a3:88:a4:
                    6c:89:f1:93:47:c4:4f:75:f2:4d:dc:c4:bd:9a:b4:
                    e0:89:33:c3:e8:05:f6:b7:c9:a5:3d:72:8b:2f:18:
                    84:23:00:cc:d5:e6:06:39:3f:02:eb:b4:9e:15:fe:
                    ea:0f:b9:67:60:d8:b3:34:f9:10:1d:3b:52:cf:7a:
                    fc:d4:ef:d6:2f:2d:73:1e:17:98:39:b0:4f:52:8b:
                    06:c1:17:9c:f5:19:52:14:e3:f9:b8:f4:eb:d6:30:
                    23:b0:20:42:11:6b:10:0d:a9:61:9c:96:65:db:21:
                    df:b1:50:81:7e:e2:4c:74:2f:0e:bb:ae:d5:50:e8:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:CF:90:90:61:C0:17:5D:1E:47:D9:28:E2:3E:2B:76:47:CC:0F
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.118.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:db:cc:a7:8e:43:f1:63:a7:d7:1e:6a:43:2e:0e:27:5d:59:
         c3:17:6e:f6:13:cd:bd:b0:4c:dc:77:97:62:26:86:0d:48:e6:
         9e:d9:45:9e:4d:3b:41:86:62:69:87:54:c6:c7:27:25:61:b0:
         ed:77:cd:c9:e9:f3:e6:4d:bb:fb:71:89:e8:9b:87:fc:35:fc:
         f7:c6:46:a2:fd:e0:8a:3e:f5:47:60:d5:9a:b7:dc:e7:d2:76:
         21:19:db:a9:8f:ad:3b:53:23:31:0f:c1:d5:ad:6f:1b:69:c2:
         a1:4f:09:90:95:15:bc:e4:b0:0b:cb:32:70:70:fe:0c:09:97:
         fd:ea:c9:db:54:32:a0:7f:05:46:30:7b:f7:e6:03:5a:e4:50:
         01:1a:a4:d1:68:f7:9f:22:ff:a6:16:8b:cb:15:59:a2:fb:9d:
         08:e8:ed:fc:4e:ed:bf:2d:18:c1:21:df:c0:8f:86:4d:4d:82:
         d6:da:8c:4e:a0:34:47:78:52:89:19:78:f1:50:cb:0c:5d:25:
         0b:99:50:11:78:9c:47:44:88:c5:33:50:94:2c:e5:76:47:b5:
         e2:de:4a:72:fa:f4:e7:6b:75:e2:8b:b2:ac:c5:c8:e3:5d:62:
         87:13:9b:7d:f8:4b:de:76:e9:e3:85:c6:c0:be:73:27:23:13:
         33:76:09:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:02 2026 by rpki-client