Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/R40PM6mgFTbYpxG9hs423j9HpoE.roa
File:                     R40PM6mgFTbYpxG9hs423j9HpoE.roa (raw, json)
Hash identifier:          NB5ne9k/LBFeOEAsjmsMjaNxp388DLKPcqEDP+gZd7s=
Subject key identifier:   47:8D:0F:33:A9:A0:15:36:D8:A7:11:BD:86:CE:36:DE:3F:47:A6:81
Certificate issuer:       /CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
Certificate serial:       06F6
Authority key identifier: F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/R40PM6mgFTbYpxG9hs423j9HpoE.roa
Signing time:             Wed 29 Apr 2026 10:35:31 +0000
ROA not before:           Wed 29 Apr 2026 10:35:31 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     197537
IP address blocks:        163.227.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1782 (0x6f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F4A472FFA07BA10E42F7CEE61F205ACA165F6E
        Validity
            Not Before: Apr 29 10:35:31 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=478D0F33A9A01536D8A711BD86CE36DE3F47A681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:16:15:bd:bd:6f:0e:bc:13:ee:96:0c:b6:
                    83:9b:46:b3:ea:f9:1d:50:3e:bc:0b:28:87:56:5a:
                    6d:b5:88:67:75:64:b9:ee:c0:b1:ec:39:d3:37:f8:
                    36:cb:98:e5:46:9a:8f:51:33:e7:0d:c3:df:d0:4c:
                    6b:ba:85:db:f9:57:9c:89:59:e0:f8:a4:a9:59:a2:
                    9e:21:8d:08:4e:84:45:13:81:e7:39:68:a3:2d:4d:
                    7f:e0:96:a7:25:31:e5:00:47:89:0a:82:56:8e:fa:
                    57:62:ef:0a:c9:bd:c5:06:4e:9b:84:8e:6a:07:36:
                    91:39:a1:47:33:87:d2:84:d1:57:2f:65:2d:0b:c6:
                    5c:9b:a0:fc:72:2a:8e:97:dd:26:b6:8b:b7:8e:21:
                    8f:63:40:15:a0:b1:73:4c:fb:e4:06:5e:74:8b:29:
                    6d:e6:8c:86:64:2a:10:96:98:28:fc:71:8e:b3:96:
                    f0:80:4b:43:6c:92:ec:f2:1b:7d:7a:31:67:a6:9f:
                    5a:1a:dd:93:f4:1f:67:5b:06:d3:3c:69:e8:57:02:
                    e4:e2:9e:27:33:85:24:e7:a4:c4:b9:8c:8c:43:c7:
                    69:d6:79:83:62:c1:55:ee:00:07:7f:53:0c:90:ea:
                    86:41:b6:ec:78:b5:94:a5:9e:8f:db:c6:c7:d8:64:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:0F:33:A9:A0:15:36:D8:A7:11:BD:86:CE:36:DE:3F:47:A6:81
            X509v3 Authority Key Identifier:
                keyid:F9:F4:A4:72:FF:A0:7B:A1:0E:42:F7:CE:E6:1F:20:5A:CA:16:5F:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/-fSkcv-ge6EOQvfO5h8gWsoWX24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-fSkcv-ge6EOQvfO5h8gWsoWX24.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZEROONEINF/R40PM6mgFTbYpxG9hs423j9HpoE.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:66:94:04:84:09:9c:66:ff:74:0a:c0:9f:17:20:57:ed:bb:
         dd:e1:b6:9a:15:6f:d1:d0:aa:76:c7:c0:c2:18:4f:fd:5f:36:
         b9:9a:4a:4e:20:8b:0c:a0:1a:38:91:c0:b3:8c:56:6a:a3:0f:
         a0:c6:50:23:dd:bc:02:86:86:a5:fb:f7:99:e2:0f:01:dc:a3:
         ae:ba:30:c0:09:13:12:d8:24:c7:7a:37:d3:47:7a:86:fd:d5:
         77:d3:5a:37:8f:3f:ea:51:3d:d3:b4:1c:60:aa:96:57:9e:d4:
         2d:b3:b7:ae:1d:51:ad:87:8f:18:6f:32:d8:3b:d0:65:bc:33:
         84:28:ff:0a:b2:fd:10:d2:7b:e3:b0:32:9e:a8:bb:dc:fd:56:
         ef:a6:37:02:51:49:6c:59:b7:d1:69:6b:47:5a:f8:ec:b3:a0:
         cc:0b:54:d3:db:9a:f1:37:5a:11:0b:07:04:65:3b:e2:19:bb:
         71:76:8a:af:06:f2:32:4c:55:64:3b:43:31:dd:f9:ef:32:4e:
         f7:f4:93:09:be:94:68:1d:fd:06:8a:ff:21:8a:04:e7:90:50:
         7d:10:ec:ed:e1:78:4c:ac:7a:0f:92:80:d4:69:79:0c:8a:51:
         3f:56:2e:f2:3b:f1:fe:7f:87:c0:4e:dd:92:8a:da:26:ad:6b:
         83:84:81:90
-----BEGIN CERTIFICATE-----
MIIE2jCCA8KgAwIBAgICBvYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjlG
NEE0NzJGRkEwN0JBMTBFNDJGN0NFRTYxRjIwNUFDQTE2NUY2RTAeFw0yNjA0Mjkx
MDM1MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ3OEQwRjMzQTlBMDE1
MzZEOEE3MTFCRDg2Q0UzNkRFM0Y0N0E2ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2thYVvb1vDrwT7pYMtoObRrPq+R1QPrwLKIdWWm21iGd1ZLnu
wLHsOdM3+DbLmOVGmo9RM+cNw9/QTGu6hdv5V5yJWeD4pKlZop4hjQhOhEUTgec5
aKMtTX/glqclMeUAR4kKglaO+ldi7wrJvcUGTpuEjmoHNpE5oUczh9KE0VcvZS0L
xlyboPxyKo6X3Sa2i7eOIY9jQBWgsXNM++QGXnSLKW3mjIZkKhCWmCj8cY6zlvCA
S0NskuzyG316MWemn1oa3ZP0H2dbBtM8aehXAuTiniczhSTnpMS5jIxDx2nWeYNi
wVXuAAd/UwyQ6oZBtux4tZSlno/bxsfYZEejAgMBAAGjggH2MIIB8jAdBgNVHQ4E
FgQUR40PM6mgFTbYpxG9hs423j9HpoEwHwYDVR0jBBgwFoAU+fSkcv+ge6EOQvfO
5h8gWsoWX24wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvWkVST09O
RUlORi8tZlNrY3YtZ2U2RU9RdmZPNWg4Z1dzb1dYMjQuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBLy1mU2tjdi1nZTZFT1F2Zk81aDhnV3NvV1gyNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1pFUk9PTkVJTkYvUjQwUE02bWdG
VGJZcHhHOWhzNDIzajlIcG9FLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAKPjrTANBgkqhkiG9w0BAQsFAAOCAQEAFWaUBIQJnGb/dArAnxcgV+27
3eG2mhVv0dCqdsfAwhhP/V82uZpKTiCLDKAaOJHAs4xWaqMPoMZQI928AoaGpfv3
meIPAdyjrrowwAkTEtgkx3o300d6hv3Vd9NaN48/6lE907QcYKqWV57ULbO3rh1R
rYePGG8y2DvQZbwzhCj/CrL9ENJ747Aynqi73P1W76Y3AlFJbFm30WlrR1r47LOg
zAtU09ua8TdaEQsHBGU74hm7cXaKrwbyMkxVZDtDMd357zJO9/STCb6UaB39Bor/
IYoE55BQfRDs7eF4TKx6D5KA1Gl5DIpRP1Yu8jvx/n+HwE7dkoraJq1rg4SBkA==
-----END CERTIFICATE-----
Generated at Tue Jun 16 15:31:33 2026 by rpki-client