Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138470/0/323430303a353036303a3a2f33322d3634203d3e203633383933.roa
File:                     323430303a353036303a3a2f33322d3634203d3e203633383933.roa (raw, json)
Hash identifier:          BHydVbU3JrPLjHj9vIjP5kSoTesZAdHvlP38+Eg+13A=
Subject key identifier:   B7:71:48:0E:DD:37:F9:43:C6:4D:DA:2A:F8:51:76:22:BB:B5:D0:F6
Certificate issuer:       /CN=30886A5C2BBD980DCAD17065B483FDADE1588115
Certificate serial:       2CC443627D1C79BAC2692BBD8ABA402299EE5141
Authority key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138470/0/323430303a353036303a3a2f33322d3634203d3e203633383933.roa
Signing time:             Mon 11 May 2026 17:15:49 +0000
ROA not before:           Mon 11 May 2026 17:10:49 +0000
ROA not after:            Mon 10 May 2027 17:15:49 +0000
asID:                     63893
IP address blocks:        2400:5060::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c4:43:62:7d:1c:79:ba:c2:69:2b:bd:8a:ba:40:22:99:ee:51:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30886A5C2BBD980DCAD17065B483FDADE1588115
        Validity
            Not Before: May 11 17:10:49 2026 GMT
            Not After : May 10 17:15:49 2027 GMT
        Subject: CN=B771480EDD37F943C64DDA2AF8517622BBB5D0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:25:20:49:6c:fd:12:74:b3:45:cf:85:ce:
                    ad:ec:75:08:63:58:93:75:8f:2c:0e:3c:f7:43:ca:
                    25:ca:95:eb:3c:0d:d4:75:15:f3:ad:c4:f8:f5:e5:
                    57:fd:d0:f7:4a:e7:c8:65:ba:f4:4d:21:35:a0:d6:
                    5b:b3:7d:4a:eb:32:a1:7a:6a:ba:8d:d5:5e:3d:e9:
                    45:8a:67:b3:fd:02:db:50:e8:c6:d1:5f:36:90:a9:
                    2a:2f:22:6b:e9:7d:38:5c:f3:16:2d:49:94:b0:c4:
                    d0:90:bb:e7:4f:12:49:81:0b:c2:e0:72:2c:65:4a:
                    7b:e8:23:85:4f:2e:2b:a4:f1:97:c2:da:dd:e7:6f:
                    b6:a7:42:e6:ff:ee:ae:16:3c:bf:62:d5:a1:21:96:
                    11:2f:be:9e:2e:70:24:92:f0:d8:d9:51:47:29:dc:
                    7b:aa:ed:e0:b7:1f:5c:f6:c4:a2:bf:f0:c1:be:c2:
                    3b:ee:48:52:e2:4a:41:6c:7b:a0:2d:fc:51:e1:66:
                    81:97:ca:93:9a:00:9d:22:ce:3d:c9:65:b3:dd:09:
                    7c:65:ef:f2:1e:83:43:6c:8f:fe:87:9c:dd:a1:10:
                    74:ea:b2:29:06:ef:7c:34:ea:61:f0:b0:3c:e7:52:
                    22:b4:cf:9e:dd:e6:d9:98:81:00:01:8d:8b:66:d6:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:48:0E:DD:37:F9:43:C6:4D:DA:2A:F8:51:76:22:BB:B5:D0:F6
            X509v3 Authority Key Identifier:
                keyid:30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/323430303a353036303a3a2f33322d3634203d3e203633383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5060::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:ae:56:88:d9:d6:30:51:f1:13:89:3f:b2:89:44:9e:8f:
         28:3f:0c:dd:ea:0a:34:49:e4:20:f4:7f:9a:62:44:d3:be:ac:
         51:90:19:32:bf:30:93:6a:5a:30:9c:45:d0:3d:ed:10:20:f6:
         73:27:e9:4e:73:d4:24:3d:02:e9:74:36:87:f4:8f:3f:ca:ff:
         1d:fa:58:2f:b1:46:9f:54:71:af:98:e2:75:ef:46:dd:15:e2:
         dc:83:a5:ef:1d:d9:ee:d6:74:fe:50:d2:45:4e:e0:d8:35:2a:
         3e:d0:d3:7c:57:d4:cb:bf:e9:1d:e8:79:9a:74:2a:f0:ca:1c:
         ec:68:f9:5a:81:a3:50:f6:95:b3:63:d6:2c:b2:12:74:18:88:
         c7:e7:98:48:0e:48:cc:a6:2d:11:a0:7b:72:24:25:52:2f:da:
         ca:46:eb:5e:41:12:1c:dd:1a:88:51:0b:04:bf:6d:24:92:8d:
         16:32:0a:1a:00:1e:ed:06:19:c1:5f:7d:60:1f:31:86:70:e9:
         55:49:9e:07:4b:64:bb:93:20:ed:2d:94:23:18:bb:e3:cb:c2:
         8c:6c:6b:82:93:46:0c:c7:1f:c7:ce:d6:c3:6f:7f:7a:76:1e:
         38:d8:22:4f:42:82:70:29:0a:20:9d:b9:9b:5e:4b:c9:f2:f2:
         34:36:09:5a
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIULMRDYn0cebrCaSu9irpAIpnuUUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA4ODZBNUMyQkJEOTgwRENBRDE3MDY1QjQ4M0ZEQURF
MTU4ODExNTAeFw0yNjA1MTExNzEwNDlaFw0yNzA1MTAxNzE1NDlaMDMxMTAvBgNV
BAMTKEI3NzE0ODBFREQzN0Y5NDNDNjREREEyQUY4NTE3NjIyQkJCNUQwRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtQSUgSWz9EnSzRc+Fzq3sdQhj
WJN1jywOPPdDyiXKles8DdR1FfOtxPj15Vf90PdK58hluvRNITWg1luzfUrrMqF6
arqN1V496UWKZ7P9AttQ6MbRXzaQqSovImvpfThc8xYtSZSwxNCQu+dPEkmBC8Lg
cixlSnvoI4VPLiuk8ZfC2t3nb7anQub/7q4WPL9i1aEhlhEvvp4ucCSS8NjZUUcp
3Huq7eC3H1z2xKK/8MG+wjvuSFLiSkFse6At/FHhZoGXypOaAJ0izj3JZbPdCXxl
7/Ieg0Nsj/6HnN2hEHTqsikG73w06mHwsDznUiK0z57d5tmYgQABjYtm1sJpAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUt3FIDt03+UPGTdoq+FF2Iru10PYwHwYDVR0j
BBgwFoAUMIhqXCu9mA3K0XBltIP9reFYgRUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz
ODQ3MC8wLzMwODg2QTVDMkJCRDk4MERDQUQxNzA2NUI0ODNGREFERTE1ODgxMTUu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMzA4ODZBNUMyQkJEOTgwRENBRDE3MDY1
QjQ4M0ZEQURFMTU4ODExNS5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzAL
hmJyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0NzAvMC8zMjM0
MzAzMDNhMzUzMDM2MzAzYTNhMmYzMzMyMmQzNjM0MjAzZDNlMjAzNjMzMzgzOTMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAJABQYDANBgkqhkiG9w0BAQsFAAOCAQEAi66uVojZ1jBR8ROJ
P7KJRJ6PKD8M3eoKNEnkIPR/mmJE076sUZAZMr8wk2paMJxF0D3tECD2cyfpTnPU
JD0C6XQ2h/SPP8r/HfpYL7FGn1Rxr5jide9G3RXi3IOl7x3Z7tZ0/lDSRU7g2DUq
PtDTfFfUy7/pHeh5mnQq8Moc7Gj5WoGjUPaVs2PWLLISdBiIx+eYSA5IzKYtEaB7
ciQlUi/aykbrXkESHN0aiFELBL9tJJKNFjIKGgAe7QYZwV99YB8xhnDpVUmeB0tk
u5Mg7S2UIxi748vCjGxrgpNGDMcfx87Ww29/enYeONgiT0KCcCkKIJ25m15LyfLy
NDYJWg==
-----END CERTIFICATE-----