Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/AS24614.roa
File:                     AS24614.roa (raw, json)
Hash identifier:          G7Gg7VCljIh1ubEFuZMNnhSLAWR0ry+skX1cGqlCX9g=
Subject key identifier:   5B:A8:8A:13:23:30:F0:EF:29:7B:4D:E9:B2:87:B4:1A:87:16:B4:26
Certificate issuer:       /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
Certificate serial:       7CEF980710F37FBB145F098CB7A4AEB27D20CACB
Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS24614.roa
Signing time:             Mon 11 May 2026 17:27:29 +0000
ROA not before:           Mon 11 May 2026 17:22:29 +0000
ROA not after:            Mon 10 May 2027 17:27:29 +0000
asID:                     24614
IP address blocks:        114.198.166.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ef:98:07:10:f3:7f:bb:14:5f:09:8c:b7:a4:ae:b2:7d:20:ca:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E
        Validity
            Not Before: May 11 17:22:29 2026 GMT
            Not After : May 10 17:27:29 2027 GMT
        Subject: CN=5BA88A132330F0EF297B4DE9B287B41A8716B426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:95:6e:c5:cd:b5:76:1a:63:1f:42:71:4e:
                    96:42:93:40:d5:df:a4:87:0b:69:42:8a:f1:13:86:
                    20:ab:2e:2b:ab:0c:1c:33:ec:41:c9:59:89:7c:9c:
                    94:46:b0:7a:71:43:72:05:8a:aa:4e:a8:a0:e3:c7:
                    da:8e:a8:c2:14:da:be:85:d9:25:cf:0f:9d:90:30:
                    95:38:e8:11:e6:24:da:e5:da:8b:68:1a:9e:eb:2a:
                    10:92:ab:21:a0:a7:83:c4:16:b3:75:99:0f:e4:0b:
                    fe:f9:f0:48:d1:86:09:df:7f:e9:6d:af:4f:8c:30:
                    7b:77:ce:8f:7d:74:5a:98:11:8e:40:4e:fa:ba:5d:
                    fb:14:39:60:70:8d:2f:dd:d4:e0:0f:5e:a9:52:c6:
                    64:e6:43:19:ac:28:fb:8a:da:21:c4:89:d9:3f:18:
                    bc:3d:a6:4d:5e:79:de:43:09:6e:ce:2e:8e:fc:0b:
                    48:61:e5:3e:2d:89:1a:3f:e7:52:16:42:50:00:3e:
                    ed:8d:c1:9a:13:18:40:bb:69:6a:2e:2a:8f:bd:1f:
                    b7:f7:d4:76:6f:90:05:62:b8:a8:4f:00:99:a8:6e:
                    cf:12:92:1e:e5:17:31:82:72:77:d3:ae:5f:1c:8b:
                    88:6d:ea:6e:3c:8e:9c:c9:77:2c:3d:6e:10:14:0a:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A8:8A:13:23:30:F0:EF:29:7B:4D:E9:B2:87:B4:1A:87:16:B4:26
            X509v3 Authority Key Identifier:
                keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS24614.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:94:43:91:da:da:5c:4d:fc:36:f5:cd:f0:97:35:d0:2b:
         4a:22:a1:da:2c:03:e8:42:47:5e:02:d7:10:92:41:c9:52:3b:
         a0:e7:20:bc:6a:63:35:6e:09:89:2c:aa:15:fc:3c:58:91:f0:
         64:e0:3d:00:3f:1f:a5:5d:db:8d:ad:51:48:ea:4a:94:cb:4d:
         db:f4:ff:1f:08:2d:ad:6a:c8:f3:39:d3:f5:69:38:f4:5f:f9:
         b4:bd:d2:be:f7:4a:37:9c:a6:15:ff:4b:5b:59:60:d9:88:7d:
         57:be:99:8c:f8:a8:aa:40:31:f1:c3:32:81:36:bb:35:e8:a2:
         b8:75:21:92:12:1e:7c:f4:e7:5b:a7:ad:a3:0d:d3:b7:4a:42:
         9e:15:77:52:af:58:1e:ad:b1:54:d0:c5:08:a3:ea:9d:3c:0e:
         0c:27:f5:02:c9:8c:93:c9:3f:e2:c9:62:52:c8:52:bd:d4:f1:
         ec:8a:50:a2:f1:c8:d4:b8:c9:69:1e:b3:f9:1c:eb:04:f5:eb:
         ca:b6:d6:2c:94:48:9a:e8:9b:2c:f0:fe:18:f1:89:9e:e2:73:
         f1:d5:82:c2:5a:be:83:7f:f0:b3:72:a8:b6:e8:b8:46:5f:18:
         c3:53:59:a0:cd:06:b8:fa:6f:17:34:46:a4:5a:f7:68:68:72:
         36:c9:96:10
-----BEGIN CERTIFICATE-----
MIIEqjCCA5KgAwIBAgIUfO+YBxDzf7sUXwmMt6Susn0gysswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4
QkVFM0EwRTAeFw0yNjA1MTExNzIyMjlaFw0yNzA1MTAxNzI3MjlaMDMxMTAvBgNV
BAMTKDVCQTg4QTEzMjMzMEYwRUYyOTdCNERFOUIyODdCNDFBODcxNkI0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+ZVuxc21dhpjH0JxTpZCk0DV
36SHC2lCivEThiCrLiurDBwz7EHJWYl8nJRGsHpxQ3IFiqpOqKDjx9qOqMIU2r6F
2SXPD52QMJU46BHmJNrl2otoGp7rKhCSqyGgp4PEFrN1mQ/kC/758EjRhgnff+lt
r0+MMHt3zo99dFqYEY5ATvq6XfsUOWBwjS/d1OAPXqlSxmTmQxmsKPuK2iHEidk/
GLw9pk1eed5DCW7OLo78C0hh5T4tiRo/51IWQlAAPu2NwZoTGEC7aWouKo+9H7f3
1HZvkAViuKhPAJmobs8Skh7lFzGCcnfTrl8ci4ht6m48jpzJdyw9bhAUCj3rAgMB
AAGjggG0MIIBsDAdBgNVHQ4EFgQUW6iKEyMw8O8pe03psoe0GocWtCYwHwYDVR0j
BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU
LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx
NzM1QzhCRUUzQTBFLmNlcjBNBggrBgEFBQcBCwRBMD8wPQYIKwYBBQUHMAuGMXJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvQVMyNDYxNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAXLGpjANBgkqhkiG9w0BAQsFAAOCAQEAqiGUQ5Ha2lxN/Db1zfCXNdAr
SiKh2iwD6EJHXgLXEJJByVI7oOcgvGpjNW4JiSyqFfw8WJHwZOA9AD8fpV3bja1R
SOpKlMtN2/T/HwgtrWrI8znT9Wk49F/5tL3SvvdKN5ymFf9LW1lg2Yh9V76ZjPio
qkAx8cMygTa7NeiiuHUhkhIefPTnW6etow3Tt0pCnhV3Uq9YHq2xVNDFCKPqnTwO
DCf1AsmMk8k/4sliUshSvdTx7IpQovHI1LjJaR6z+RzrBPXryrbWLJRImuibLPD+
GPGJnuJz8dWCwlq+g3/ws3Kotui4Rl8Yw1NZoM0GuPpvFzRGpFr3aGhyNsmWEA==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:33 2026 by rpki-client