Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa
File:                     3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa (raw, json)
Hash identifier:          XPIZKI0b+STshE1jyzyv6vzwTCkp1FigGgVTYDae6lY=
Subject key identifier:   E6:D8:0A:2D:B0:1C:E5:D9:DB:EE:2E:33:84:76:75:FB:1F:A0:E4:80
Certificate issuer:       /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial:       29A355C32AB66A0BC83436DDFAC2A316E44611AD
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa
Signing time:             Mon 11 May 2026 17:06:27 +0000
ROA not before:           Mon 11 May 2026 17:01:27 +0000
ROA not after:            Mon 10 May 2027 17:06:27 +0000
asID:                     131618
IP address blocks:        103.104.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a3:55:c3:2a:b6:6a:0b:c8:34:36:dd:fa:c2:a3:16:e4:46:11:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Validity
            Not Before: May 11 17:01:27 2026 GMT
            Not After : May 10 17:06:27 2027 GMT
        Subject: CN=E6D80A2DB01CE5D9DBEE2E33847675FB1FA0E480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:91:7d:4d:c4:cb:a1:61:f8:3a:a6:71:22:
                    9e:97:ee:30:08:9c:b0:90:f1:ef:34:84:8d:e2:76:
                    38:f6:9e:a3:dc:f0:b5:e2:8f:18:1d:79:5c:b4:3f:
                    84:ef:e2:e7:4f:ca:72:2c:af:97:d4:43:b3:a9:27:
                    c9:a0:65:e5:e2:8d:0d:35:c3:33:c8:b8:ed:52:78:
                    b3:1f:39:59:9c:32:9f:3b:6f:7e:29:74:08:d4:44:
                    b6:93:ab:a9:ac:e8:b8:2d:80:ed:fc:d7:bc:0c:dc:
                    9c:89:57:53:a0:4a:6a:1b:91:1f:80:1d:8c:b0:16:
                    65:69:d6:c8:84:45:2c:bf:33:94:d9:e2:53:bf:f6:
                    a5:72:c7:c0:6d:51:9c:d9:32:93:87:79:e4:6e:fe:
                    b0:58:55:34:f3:89:cb:13:69:db:04:d5:67:aa:b9:
                    b9:69:87:5b:4d:87:4c:6f:6c:c1:0f:f1:bb:28:b2:
                    bb:3b:f4:84:3c:4e:ad:4a:65:f9:76:0e:30:45:88:
                    bd:00:a6:00:bb:9d:f4:ca:0a:41:90:4c:1a:94:ca:
                    1a:0d:1d:32:02:51:1f:4c:a7:9e:70:6b:1d:68:26:
                    9f:24:ab:69:09:a4:40:d8:30:f4:1b:26:c9:45:26:
                    f0:9c:0b:24:35:92:9d:88:02:87:f7:ee:e4:1d:ee:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D8:0A:2D:B0:1C:E5:D9:DB:EE:2E:33:84:76:75:FB:1F:A0:E4:80
            X509v3 Authority Key Identifier:
                keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135312e302f32342d3234203d3e20313331363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:31:20:2d:81:9f:e1:46:50:12:e6:9d:f7:42:62:6c:a8:
         3f:83:74:18:7e:39:2e:f4:c6:40:7f:d6:e1:0d:fd:e6:d1:b7:
         d0:39:c4:bb:93:66:38:60:7d:1d:fd:5d:19:bd:09:e3:66:36:
         20:b1:5b:00:28:c7:47:87:ba:d1:de:6c:cd:79:e8:fa:a1:31:
         50:2f:dc:28:f1:b3:d9:f8:91:ed:52:e3:e0:ff:cb:bf:64:dd:
         21:b1:46:53:31:46:6f:23:8f:a9:ea:35:31:88:44:2f:06:eb:
         a5:8a:ff:6a:47:20:53:f2:fa:cc:a4:9a:b8:db:2e:0a:ca:98:
         fe:e5:4e:a3:03:02:32:d3:6e:74:90:30:fb:bc:31:5d:34:71:
         dc:34:7e:57:68:8d:cc:2f:80:ca:26:d2:99:e5:e3:c9:8a:7d:
         a8:2e:1e:01:e7:6e:e3:06:93:cf:be:ac:d8:70:f1:1d:84:14:
         da:91:19:4f:eb:3a:ec:46:cd:f6:22:b2:55:e2:35:c8:94:fa:
         9a:12:1b:79:53:a5:86:b8:93:d3:55:4d:6c:85:2f:f8:af:36:
         ca:ee:33:e8:7b:29:bb:9d:18:15:93:4b:ff:44:ff:72:f9:3c:
         1b:af:68:76:40:8f:cf:1d:cf:60:6d:8b:77:58:88:bd:ee:fe:
         51:5e:28:53
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUKaNVwyq2agvINDbd+sKjFuRGEa0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI2NTc4Q0ZGQTI1NjQzNzBDOTQ3NjMzQjQyMjJCMzhG
QkUwNDc4NzAeFw0yNjA1MTExNzAxMjdaFw0yNzA1MTAxNzA2MjdaMDMxMTAvBgNV
BAMTKEU2RDgwQTJEQjAxQ0U1RDlEQkVFMkUzMzg0NzY3NUZCMUZBMEU0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj35F9TcTLoWH4OqZxIp6X7jAI
nLCQ8e80hI3idjj2nqPc8LXijxgdeVy0P4Tv4udPynIsr5fUQ7OpJ8mgZeXijQ01
wzPIuO1SeLMfOVmcMp87b34pdAjURLaTq6ms6LgtgO3817wM3JyJV1OgSmobkR+A
HYywFmVp1siERSy/M5TZ4lO/9qVyx8BtUZzZMpOHeeRu/rBYVTTzicsTadsE1Weq
ublph1tNh0xvbMEP8bsosrs79IQ8Tq1KZfl2DjBFiL0ApgC7nfTKCkGQTBqUyhoN
HTICUR9Mp55wax1oJp8kq2kJpEDYMPQbJslFJvCcCyQ1kp2IAof37uQd7thBAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU5tgKLbAc5dnb7i4zhHZ1+x+g5IAwHwYDVR0j
BBgwFoAUi2V4z/olZDcMlHYztCIrOPvgR4cwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJP
SUQvMC84QjY1NzhDRkZBMjU2NDM3MEM5NDc2MzNCNDIyMkIzOEZCRTA0Nzg3LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzhCNjU3OENGRkEyNTY0MzcwQzk0NzYzM0I0
MjIyQjM4RkJFMDQ3ODcuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0VOVFJPSUQvMC8zMTMwMzMy
ZTMxMzAzNDJlMzEzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMxMzYz
MTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ2iXMA0GCSqGSIb3DQEBCwUAA4IBAQAc1jEgLYGf4UZQ
Euad90JibKg/g3QYfjku9MZAf9bhDf3m0bfQOcS7k2Y4YH0d/V0ZvQnjZjYgsVsA
KMdHh7rR3mzNeej6oTFQL9wo8bPZ+JHtUuPg/8u/ZN0hsUZTMUZvI4+p6jUxiEQv
Buuliv9qRyBT8vrMpJq42y4Kypj+5U6jAwIy0250kDD7vDFdNHHcNH5XaI3ML4DK
JtKZ5ePJin2oLh4B527jBpPPvqzYcPEdhBTakRlP6zrsRs32IrJV4jXIlPqaEht5
U6WGuJPTVU1shS/4rzbK7jPoeym7nRgVk0v/RP9y+Twbr2h2QI/PHc9gbYt3WIi9
7v5RXihT
-----END CERTIFICATE-----
Generated at Wed May 13 03:15:59 2026 by rpki-client