Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TISNET/1/3133392e3232332e302e302f31362d3234203d3e2037353335.roa
File:                     3133392e3232332e302e302f31362d3234203d3e2037353335.roa (raw, json)
Hash identifier:          2M8Snc2Vnx2xHHe0U+3Y4YWbG6tGQcMbc/MaaHa9LV0=
Subject key identifier:   E4:3C:D1:8B:A5:55:01:95:D8:86:C2:70:FE:66:16:9A:BF:22:32:D2
Certificate issuer:       /CN=2076FD1E205EAAA79648391917551245C47976BF
Certificate serial:       2E5F3117B0CCD7C6016CB814B38B627D6351FD05
Authority key identifier: 20:76:FD:1E:20:5E:AA:A7:96:48:39:19:17:55:12:45:C4:79:76:BF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/2076FD1E205EAAA79648391917551245C47976BF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TISNET/1/3133392e3232332e302e302f31362d3234203d3e2037353335.roa
Signing time:             Mon 11 May 2026 17:32:00 +0000
ROA not before:           Mon 11 May 2026 17:27:00 +0000
ROA not after:            Mon 10 May 2027 17:32:00 +0000
asID:                     7535
IP address blocks:        139.223.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5f:31:17:b0:cc:d7:c6:01:6c:b8:14:b3:8b:62:7d:63:51:fd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2076FD1E205EAAA79648391917551245C47976BF
        Validity
            Not Before: May 11 17:27:00 2026 GMT
            Not After : May 10 17:32:00 2027 GMT
        Subject: CN=E43CD18BA5550195D886C270FE66169ABF2232D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:17:68:26:20:bb:bc:37:6e:9f:81:8f:83:
                    b6:4f:53:06:47:b6:64:fd:d3:6f:2a:8f:64:7c:6f:
                    a2:e2:df:14:91:ce:fd:5d:c2:a1:bf:f8:d5:b7:9e:
                    d1:4f:9d:b0:c7:c8:d6:91:2b:9e:75:03:ae:d8:2f:
                    69:50:e3:4e:f9:bc:9f:c6:b9:70:2b:a8:67:a3:a0:
                    46:7e:27:e6:15:69:68:53:f0:eb:bc:e0:29:dd:e6:
                    db:47:9a:5b:a9:9f:58:db:ed:84:f0:10:dd:29:62:
                    da:b2:52:a6:2f:2b:ca:c1:d6:fd:d6:e5:66:49:f7:
                    ef:66:3b:af:55:7a:a5:a1:aa:55:28:a0:ba:85:3f:
                    02:9d:02:28:f7:1a:5a:18:5c:6f:b1:3c:2d:af:ec:
                    bf:2d:f4:94:3b:a5:c4:c1:01:99:ed:39:1f:c8:ea:
                    59:ff:2d:10:ba:60:2d:a0:f9:dc:4d:d5:32:f2:21:
                    28:70:bc:94:96:b5:c5:2d:eb:5d:0d:27:c4:bf:7b:
                    59:94:b0:ff:21:f5:40:d8:79:91:ee:e3:79:0d:38:
                    41:98:38:83:d3:79:f2:2d:d7:d2:a9:60:96:c8:45:
                    de:40:e3:ba:cf:69:09:5a:0e:0d:d8:55:aa:b6:f2:
                    cd:0f:40:be:ca:29:14:ff:31:cf:84:eb:1a:b6:67:
                    1f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3C:D1:8B:A5:55:01:95:D8:86:C2:70:FE:66:16:9A:BF:22:32:D2
            X509v3 Authority Key Identifier:
                keyid:20:76:FD:1E:20:5E:AA:A7:96:48:39:19:17:55:12:45:C4:79:76:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TISNET/1/2076FD1E205EAAA79648391917551245C47976BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/2076FD1E205EAAA79648391917551245C47976BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/1/3133392e3232332e302e302f31362d3234203d3e2037353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:6d:be:ed:e2:68:c4:3b:38:a9:63:9e:ed:79:13:18:81:
         a7:a2:f3:30:2e:7c:b8:bf:48:99:ae:87:8c:f3:42:8a:ba:2c:
         f3:51:87:ff:97:7c:a7:45:fd:2d:48:f2:62:59:37:b4:63:36:
         4c:cf:7d:df:f4:c7:8a:27:f2:4a:aa:ad:93:de:8d:13:da:0a:
         80:13:1b:7a:c8:17:63:c0:e7:5f:e1:51:34:8a:00:9e:fe:be:
         39:bc:20:dd:e4:55:dd:aa:ba:e8:23:52:2b:91:a4:f5:ab:ef:
         23:c1:eb:8f:fc:ca:da:60:d1:6e:c3:8a:b7:3e:78:c6:a0:37:
         8f:bf:20:ce:ac:f9:52:22:4a:5b:af:09:e3:52:b3:8c:4f:4f:
         3b:70:55:8b:07:94:85:c7:66:7c:0e:54:fa:94:aa:24:21:55:
         75:56:15:09:a3:fd:1e:ae:53:f7:5f:c7:85:8c:f3:1a:3b:9e:
         79:e2:3a:06:21:27:42:df:91:a0:96:67:8e:70:72:ab:cb:6b:
         ea:5e:3e:aa:64:8f:7c:84:99:28:3b:7d:03:c0:5e:2d:3a:16:
         68:41:4a:a5:ac:0e:9b:ed:8b:8c:fa:29:2c:1e:67:75:34:03:
         60:46:bc:e9:3e:a0:0a:21:97:14:98:61:4f:c6:c2:90:e7:05:
         cb:da:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:43 2026 by rpki-client