Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/BEIDOU/1/3136302e33302e37382e302f32332d3332203d3e203137343038.roa
File:                     3136302e33302e37382e302f32332d3332203d3e203137343038.roa (raw, json)
Hash identifier:          CuSCoz+B9kOtQiiebXf4SYUoQ5yR/B7hKVta2ybaqW4=
Subject key identifier:   D1:03:7E:42:11:A1:6A:EF:64:D2:DD:AA:4A:1E:97:CA:00:43:EF:CF
Certificate issuer:       /CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
Certificate serial:       7BE9DD45DA695103D20F50FD9BA4CDEAB16584C7
Authority key identifier: 06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BEIDOU/1/3136302e33302e37382e302f32332d3332203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:44:46 +0000
ROA not before:           Mon 11 May 2026 17:39:46 +0000
ROA not after:            Mon 10 May 2027 17:44:46 +0000
asID:                     17408
IP address blocks:        160.30.78.0/23 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e9:dd:45:da:69:51:03:d2:0f:50:fd:9b:a4:cd:ea:b1:65:84:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06068E54F196F9CB56DECEC6BDF81F4E477ABF5C
        Validity
            Not Before: May 11 17:39:46 2026 GMT
            Not After : May 10 17:44:46 2027 GMT
        Subject: CN=D1037E4211A16AEF64D2DDAA4A1E97CA0043EFCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:ec:bf:2d:c8:14:73:61:2e:ce:dc:2f:51:
                    48:ba:60:64:e2:76:c5:c2:d2:c4:54:01:21:b0:d6:
                    02:83:b6:0d:b3:af:4b:a1:e8:85:64:ed:49:b4:8d:
                    c6:e6:df:1a:e6:e6:d5:d5:44:05:e1:ca:4e:96:b3:
                    aa:7b:33:6b:03:46:4f:c1:f9:22:df:48:fa:93:f2:
                    b5:ab:30:78:0f:17:67:79:02:06:d5:1e:da:df:33:
                    a6:bb:ca:2c:c2:a1:a8:ae:9f:ec:90:03:b8:18:0c:
                    bc:6f:43:70:c8:56:02:8f:f5:5a:9b:3b:e5:f1:9a:
                    1e:b9:85:0c:e5:7f:c7:1d:b4:30:98:79:3d:e3:18:
                    72:a1:8e:0a:d3:9f:93:f6:54:f8:3c:ae:c0:e5:c7:
                    a8:3f:6e:27:2c:d5:00:b5:d5:af:c4:ae:07:64:08:
                    51:14:d8:14:4e:38:c8:34:b4:90:b3:0a:2f:9e:3f:
                    40:b8:f3:cf:49:0b:91:df:3b:c6:ce:6d:48:06:74:
                    4e:fb:6f:6d:31:b7:58:7d:f0:09:b7:18:b9:61:c6:
                    e3:ee:de:8f:63:88:31:8f:78:6b:86:b2:6b:91:cc:
                    1d:ed:2e:37:8e:9d:cf:a8:39:10:ea:6f:66:e7:2b:
                    1c:bd:4d:b6:f7:62:6a:9e:02:ce:6f:71:ba:fb:32:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:7E:42:11:A1:6A:EF:64:D2:DD:AA:4A:1E:97:CA:00:43:EF:CF
            X509v3 Authority Key Identifier:
                keyid:06:06:8E:54:F1:96:F9:CB:56:DE:CE:C6:BD:F8:1F:4E:47:7A:BF:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/06068E54F196F9CB56DECEC6BDF81F4E477ABF5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/1/3136302e33302e37382e302f32332d3332203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:dd:7d:1a:4f:fc:4b:43:04:d8:34:f8:a8:5a:09:da:c8:
         99:98:c0:f8:95:6b:0c:02:a4:37:48:ad:6a:1e:10:38:6b:48:
         58:a8:72:11:4d:df:bc:14:6e:4a:e8:9c:18:97:47:90:2d:64:
         08:9d:3f:9f:9d:8a:f2:b0:46:c8:e1:9c:eb:ee:e9:99:ac:87:
         8a:9e:10:18:e1:f3:96:26:a6:68:86:d6:47:12:2d:f8:60:90:
         3b:0c:8a:ee:89:e2:f1:6d:9d:10:c9:aa:6f:08:83:ea:cb:48:
         a3:f8:3f:82:56:c6:f6:77:65:49:9b:6b:47:23:e8:3c:26:77:
         cd:a9:e4:18:26:bc:a1:d4:30:25:1d:64:11:8f:3d:e3:63:12:
         68:ca:f7:c9:28:7e:85:86:3c:75:49:aa:c2:0f:d2:4f:ba:66:
         26:f7:3a:34:eb:bf:24:c1:8c:ea:c9:8b:85:34:0e:f4:4d:a2:
         3d:72:9d:c1:75:04:d4:67:ec:a6:7f:bd:82:17:82:49:c7:f6:
         d4:c8:03:33:d7:d2:82:50:39:ea:9d:24:98:35:06:bd:bc:11:
         53:e0:a8:2f:e7:a6:38:8e:98:e6:36:7a:d3:6c:4c:22:1d:b0:
         9c:8a:df:9e:a3:90:ea:2b:ac:46:ed:94:f8:ce:77:9c:f2:1a:
         45:92:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:00 2026 by rpki-client