Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa
File:                     3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa (raw, json)
Hash identifier:          h1zDSRZ3TRJlhR+U4wVbJzjHTzTePNMp3oBDSC21x4k=
Subject key identifier:   4E:71:FB:D7:AB:B8:EE:8D:3F:DF:8E:F3:33:F8:B5:26:C7:62:2A:EB
Certificate issuer:       /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial:       3CF7813AA259B8BDBE36D40F603EFC9F875432D8
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa
Signing time:             Mon 11 May 2026 17:06:26 +0000
ROA not before:           Mon 11 May 2026 17:01:26 +0000
ROA not after:            Mon 10 May 2027 17:06:26 +0000
asID:                     135293
IP address blocks:        103.104.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:81:3a:a2:59:b8:bd:be:36:d4:0f:60:3e:fc:9f:87:54:32:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Validity
            Not Before: May 11 17:01:26 2026 GMT
            Not After : May 10 17:06:26 2027 GMT
        Subject: CN=4E71FBD7ABB8EE8D3FDF8EF333F8B526C7622AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:1e:11:65:c1:7e:c4:58:ee:6c:f1:75:76:
                    cc:c2:0c:2b:e7:62:d3:14:f7:1a:d1:00:5e:54:e6:
                    32:0c:9f:c2:e6:ae:b7:f7:39:0f:a3:b4:23:4f:fe:
                    b7:78:63:17:8b:be:d4:e3:76:8e:54:65:5c:cd:be:
                    27:0e:d7:28:4a:57:c1:52:30:94:97:af:ac:6a:2d:
                    13:5a:70:90:69:88:5b:d1:9b:1e:9c:21:cb:13:10:
                    45:ad:1f:b1:f7:6e:fb:85:45:53:66:64:fe:bf:8f:
                    e3:c9:ca:7b:92:bf:f0:fa:85:1e:68:5c:07:6b:35:
                    09:e7:d2:27:6a:e8:7f:d3:79:43:07:16:8c:ac:23:
                    3c:4b:f0:01:89:10:99:69:15:85:78:98:bc:9c:96:
                    f9:80:5c:7c:5b:44:c7:89:62:ed:74:22:70:11:15:
                    4f:9e:93:fb:23:c1:08:d8:4f:c1:1c:74:a5:22:31:
                    98:ac:18:93:6c:dd:91:4b:b0:a2:80:13:a0:7b:fe:
                    12:b5:bc:9c:fd:a2:f6:e1:c7:83:4b:ef:13:9f:cd:
                    1a:49:75:f2:1d:18:16:b2:53:25:4c:20:46:99:ff:
                    f1:eb:de:7a:f6:36:29:c0:92:b9:c6:db:c8:50:94:
                    d9:f6:ee:b7:ec:95:b6:91:3b:89:95:a2:79:68:f7:
                    e8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:71:FB:D7:AB:B8:EE:8D:3F:DF:8E:F3:33:F8:B5:26:C7:62:2A:EB
            X509v3 Authority Key Identifier:
                keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135302e302f32342d3234203d3e20313335323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fd:d5:be:af:da:bd:c2:96:cd:f7:6a:0b:a9:2b:11:f2:f8:
         7f:23:11:9f:39:19:fa:97:c5:3f:7d:47:09:d6:71:28:6c:12:
         4e:f7:2c:6c:92:5a:e7:5d:84:18:4f:dd:f9:e3:f8:6a:c3:d5:
         25:af:f4:bc:bb:52:08:15:8e:e2:99:ca:05:79:9a:98:7f:9b:
         e3:5b:cb:c9:26:40:22:a8:2c:81:a1:38:a6:cd:e8:bf:2d:3b:
         69:31:40:40:41:8c:fb:86:17:3a:26:b1:ab:1e:fb:2b:13:9a:
         cd:a0:48:97:60:b3:4b:1e:f6:21:56:9f:f6:0a:a5:4c:2d:f9:
         bb:24:a6:b3:2c:6a:31:1d:77:b2:b0:f9:72:e7:33:30:9e:4a:
         7a:16:f7:c0:e1:2e:cd:2f:d7:9b:e8:f8:cc:29:a2:d4:37:81:
         a5:c0:76:07:69:6b:ea:54:bb:90:cb:f0:41:61:6f:0b:f0:72:
         fe:f2:19:7d:33:e4:e1:fd:2b:42:15:cf:34:39:af:4e:04:db:
         12:7f:30:4d:95:6e:be:76:77:c1:33:63:b1:dd:f5:e7:95:de:
         f3:f2:1f:86:ed:70:77:b1:4c:53:11:7a:1e:86:5d:30:79:20:
         54:e6:a2:53:0d:30:88:2e:ef:e4:e7:76:82:e2:25:d3:8c:db:
         8f:e5:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:54 2026 by rpki-client