Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ZAT/0/3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa
File:                     3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa (raw, json)
Hash identifier:          WRpRpWc9nNYJzvwhsCMAvWKmyMgtn7Z1UBftNahQj4c=
Subject key identifier:   A9:30:1B:D0:BE:1C:14:15:12:43:35:E5:F6:72:F8:CC:75:65:B6:57
Certificate issuer:       /CN=0291B733B1EED1AF7E817D958CE6F13A585F0695
Certificate serial:       6C31E9D788C68192DFA361B6A01AE9D53BB3BF81
Authority key identifier: 02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZAT/0/3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa
Signing time:             Mon 11 May 2026 17:59:05 +0000
ROA not before:           Mon 11 May 2026 17:54:05 +0000
ROA not after:            Mon 10 May 2027 17:59:05 +0000
asID:                     201217
IP address blocks:        210.79.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:31:e9:d7:88:c6:81:92:df:a3:61:b6:a0:1a:e9:d5:3b:b3:bf:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0291B733B1EED1AF7E817D958CE6F13A585F0695
        Validity
            Not Before: May 11 17:54:05 2026 GMT
            Not After : May 10 17:59:05 2027 GMT
        Subject: CN=A9301BD0BE1C1415124335E5F672F8CC7565B657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:97:9c:f3:28:91:f0:b6:8e:61:1c:71:35:
                    4f:4f:e7:76:90:3e:f9:93:88:bd:64:31:47:5c:2c:
                    a5:fb:4b:66:ed:ec:64:33:a9:3f:a3:2f:01:59:36:
                    df:cd:04:a9:5a:30:43:77:f4:bd:73:0e:11:e1:2f:
                    f9:94:41:bb:01:6c:59:fa:67:08:44:39:2e:12:1c:
                    0d:26:c5:8b:1b:d9:02:63:25:05:53:e9:2f:88:c9:
                    37:00:a0:60:42:87:4d:e3:cd:43:bb:17:16:dd:11:
                    a0:84:67:87:a8:1b:fc:8b:37:31:f1:56:24:db:d7:
                    d5:ad:3d:2c:e7:9d:dd:62:5e:67:46:36:99:46:dd:
                    c4:32:85:e2:e5:eb:8b:06:33:94:3d:66:35:e2:26:
                    2b:34:70:ab:70:fb:1d:a9:22:2b:01:1f:50:cc:16:
                    5c:51:4b:e0:6b:ae:c2:5c:64:91:ea:5c:bb:b0:88:
                    28:97:8e:36:3f:61:88:63:b2:8a:b2:6d:73:98:0e:
                    f9:20:17:77:2b:6c:43:c8:ae:60:e2:49:a8:95:f0:
                    04:0f:ba:f1:85:ba:6f:68:63:3f:63:2f:24:f7:ac:
                    75:76:67:59:0b:21:0e:57:55:f4:f6:9d:08:c7:45:
                    fd:98:1e:87:d4:46:d3:34:3f:8c:ca:a4:6c:6b:96:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:30:1B:D0:BE:1C:14:15:12:43:35:E5:F6:72:F8:CC:75:65:B6:57
            X509v3 Authority Key Identifier:
                keyid:02:91:B7:33:B1:EE:D1:AF:7E:81:7D:95:8C:E6:F1:3A:58:5F:06:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/0291B733B1EED1AF7E817D958CE6F13A585F0695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0291B733B1EED1AF7E817D958CE6F13A585F0695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZAT/0/3231302e37392e3135312e302f32342d3234203d3e20323031323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:22:fb:3a:7e:1e:86:6e:10:57:7f:bb:e4:25:6c:bb:e4:6f:
         c3:96:48:94:8b:3d:f7:d5:12:0e:4c:7b:9a:f9:9a:ec:96:d9:
         97:95:f0:91:36:bf:d2:70:3b:ef:8f:d8:ad:77:9d:64:11:17:
         e4:eb:a6:da:70:f1:59:71:4e:d5:20:aa:04:b6:47:df:cf:dd:
         2d:ab:53:e2:08:10:6f:6f:21:14:64:bd:fc:ac:d0:e9:85:59:
         1f:9d:57:a0:8d:c6:b3:3b:26:79:92:96:8f:19:46:0d:7f:91:
         aa:c4:17:a5:7c:c2:34:42:2d:99:33:e3:9a:b5:92:19:b0:b3:
         0d:b9:f3:ba:5d:75:8b:aa:0d:c3:35:8f:9e:38:9e:ed:30:b1:
         9f:c6:52:36:7d:4a:e5:32:ef:be:fa:74:9c:de:82:a1:ba:27:
         35:f6:b5:63:a8:43:9e:3a:fa:3e:08:06:b5:32:6a:2e:42:35:
         7a:e7:7a:06:79:92:87:21:23:0a:ea:e8:0e:a4:a8:fc:06:0e:
         52:42:2d:7a:55:22:55:50:79:66:8a:d8:b2:bb:c3:d1:fd:8b:
         1e:b8:c6:77:d2:2f:05:7a:61:1a:4e:c3:11:1d:31:06:46:30:
         df:f6:2a:06:68:d9:cf:a9:9e:43:80:73:0f:5b:a1:3b:1b:eb:
         d1:1c:fe:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:21 2026 by rpki-client