Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa
File:                     3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa (raw, json)
Hash identifier:          vzvsaRt3rkqEGPQk4J2sABSExNjL19sA4MUYScGsF+g=
Subject key identifier:   3A:18:75:71:66:9D:BA:9A:18:09:0A:87:E2:34:BC:A0:19:C5:E8:53
Certificate issuer:       /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial:       311631B39BB2830F780E369C79422B71B5AE7377
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa
Signing time:             Mon 11 May 2026 17:15:28 +0000
ROA not before:           Mon 11 May 2026 17:10:28 +0000
ROA not after:            Mon 10 May 2027 17:15:28 +0000
asID:                     133955
IP address blocks:        223.165.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:16:31:b3:9b:b2:83:0f:78:0e:36:9c:79:42:2b:71:b5:ae:73:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
        Validity
            Not Before: May 11 17:10:28 2026 GMT
            Not After : May 10 17:15:28 2027 GMT
        Subject: CN=3A187571669DBA9A18090A87E234BCA019C5E853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:a6:f5:dc:f4:34:33:be:b5:6d:72:8a:34:
                    0d:b6:e2:c5:5b:4b:64:8c:99:82:e4:77:42:0b:2f:
                    90:b2:9e:f8:81:54:da:eb:a3:38:1e:93:f6:c8:bf:
                    66:ee:6c:3d:a9:d4:35:50:a4:60:77:24:d2:f4:02:
                    1f:d8:15:17:28:84:5e:b8:76:ff:1a:4e:4e:3e:7a:
                    81:fe:96:41:10:5f:95:15:12:b6:fb:bf:32:d7:65:
                    71:69:bc:f3:dd:cb:e8:b3:04:88:de:6d:52:8c:46:
                    25:ae:e4:f7:6e:06:63:b9:ef:cf:89:63:83:21:62:
                    54:74:68:10:81:57:29:c4:ec:01:d5:f2:f3:68:ea:
                    73:f1:b5:0a:20:48:75:62:4b:33:64:33:78:a4:a9:
                    1f:45:c5:70:01:be:77:2d:fb:78:92:02:25:10:a6:
                    07:78:20:c3:c2:b1:15:62:71:4f:63:88:ff:c4:8a:
                    b5:e6:1c:30:3e:e8:e6:cd:3e:9e:8d:d2:c7:72:c6:
                    2f:a6:ac:ba:37:a0:bd:9b:78:b9:c3:25:e0:0c:67:
                    18:63:21:2c:33:00:a2:0c:fc:1f:94:06:44:14:7a:
                    f9:3f:f7:dd:1d:2e:66:10:5f:b8:be:92:52:e1:4f:
                    8b:2b:a5:ad:ae:72:ac:df:7f:6f:27:ef:ee:c7:c9:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:18:75:71:66:9D:BA:9A:18:09:0A:87:E2:34:BC:A0:19:C5:E8:53
            X509v3 Authority Key Identifier:
                keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e31352e302f32342d3234203d3e20313333393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:b3:96:12:6e:d8:1f:68:7a:1a:16:30:3d:49:93:58:78:
         99:1f:45:bb:e2:bb:e8:4a:53:78:ba:b2:f5:86:6c:a1:a1:4c:
         66:bf:9a:48:6c:77:dd:1d:a0:50:9b:9c:f4:01:17:9a:c0:dd:
         4d:c7:29:3b:f5:7a:d0:9e:a0:6f:d1:55:3c:8b:84:2e:1d:f7:
         e2:cd:67:17:ab:9e:77:53:cc:03:a4:9f:90:ff:4c:de:d0:2a:
         84:e6:22:a4:18:1d:51:ac:20:7f:c1:f3:fa:7a:bf:df:81:9f:
         a9:23:45:a0:77:b0:ca:2a:ab:d5:e9:7c:9b:64:1e:34:82:99:
         f6:12:0e:56:40:97:3e:ca:eb:4c:59:fb:0b:90:49:d9:c2:6a:
         a3:9e:66:40:a3:9a:d1:c5:b7:b2:0c:09:21:b6:9a:fc:44:2d:
         e8:25:4e:0c:83:db:2f:c1:3b:fc:1c:7a:de:fa:af:1f:78:bd:
         17:3a:4f:f6:70:56:ad:c4:cc:f5:50:61:21:77:09:26:fc:6a:
         d5:60:e4:89:04:76:fc:8d:2d:ea:c2:0a:34:9c:18:19:78:67:
         f8:41:ae:5c:74:09:b5:e3:0f:51:fb:66:3d:11:f5:dd:fb:8c:
         a2:02:a8:9c:bf:66:d3:21:ee:d9:8b:db:6d:07:4b:73:33:23:
         9a:ee:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:06 2026 by rpki-client