Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS10126.roa
File:                     AS10126.roa (raw, json)
Hash identifier:          bP/t3+nQhCUerSSr2OTx6tNc9u+q7YyVB9Tt2xSSv68=
Subject key identifier:   04:92:43:F4:1D:68:45:50:D8:F9:16:01:15:16:1B:BF:CD:90:F7:22
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       2B0898BAC184CEF1AE2F1E12B79F6D2848FEA8A4
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS10126.roa
Signing time:             Mon 11 May 2026 16:34:06 +0000
ROA not before:           Mon 11 May 2026 16:29:06 +0000
ROA not after:            Mon 10 May 2027 16:34:06 +0000
asID:                     10126
IP address blocks:        114.30.32.0/20 maxlen: 24
                          175.111.192.0/18 maxlen: 24
                          203.160.240.0/20 maxlen: 24
                          220.128.56.0/21 maxlen: 24
                          220.128.64.0/20 maxlen: 24
                          220.128.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:08:98:ba:c1:84:ce:f1:ae:2f:1e:12:b7:9f:6d:28:48:fe:a8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 11 16:29:06 2026 GMT
            Not After : May 10 16:34:06 2027 GMT
        Subject: CN=049243F41D684550D8F9160115161BBFCD90F722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:9d:d5:1a:79:54:52:a9:98:9b:e3:d2:21:
                    59:cf:aa:76:c8:99:80:30:66:1c:2b:fd:09:a7:4b:
                    5d:ec:dd:96:eb:61:f1:5f:e5:63:86:4e:4e:bc:2c:
                    08:4f:05:29:a8:29:cb:5c:fd:f7:3d:b2:c0:2a:b1:
                    bd:5f:70:8c:0c:3f:34:2e:83:f8:8d:2e:74:7e:14:
                    72:ff:0a:b4:9b:11:70:ae:e0:8b:c9:3c:90:7a:7a:
                    86:c4:9c:00:17:61:88:df:8e:1a:eb:d8:9b:8d:45:
                    60:98:8e:cb:92:f2:5e:61:b4:29:f8:dd:90:10:4b:
                    ec:82:44:f8:57:7a:b8:11:bb:62:c4:58:1c:3c:0e:
                    4d:38:e0:84:b0:c7:49:fb:45:b6:9c:31:f9:89:6c:
                    66:86:aa:97:01:0a:1d:01:6f:70:d8:99:06:ac:91:
                    ad:f8:01:30:7d:39:a1:e8:df:8c:5d:d0:03:2d:b9:
                    1c:90:85:28:f7:54:8b:b7:92:0b:c9:f2:04:a5:ab:
                    e0:88:46:59:ed:41:82:51:79:42:ba:b6:df:bb:75:
                    e3:83:b9:df:10:7c:bd:ff:01:71:12:fe:d1:3b:e8:
                    91:49:65:a6:d3:04:ca:8e:b4:ab:3c:9a:33:03:c5:
                    f5:45:4e:cf:12:2b:4a:49:ed:50:7f:43:84:75:dc:
                    82:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:92:43:F4:1D:68:45:50:D8:F9:16:01:15:16:1B:BF:CD:90:F7:22
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS10126.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.30.32.0/20
                  175.111.192.0/18
                  203.160.240.0/20
                  220.128.56.0-220.128.95.255

    Signature Algorithm: sha256WithRSAEncryption
         be:07:87:7f:7c:01:35:10:2d:ce:5f:31:c5:6a:ac:b2:90:ec:
         5a:78:e4:44:20:bb:63:c4:f3:6a:92:66:e2:ad:2a:64:e7:5e:
         18:1c:c6:69:b9:8f:18:61:ad:70:20:ed:6f:15:fe:07:e5:ef:
         b8:a2:99:0f:0b:05:a4:dc:dc:7c:2e:dd:15:b8:07:9c:10:fd:
         16:49:e9:ae:eb:82:e4:dd:65:e5:5f:25:80:f5:4a:83:81:f5:
         7b:4c:49:db:3f:53:e3:f6:ac:93:d7:ba:b6:0b:a2:fa:98:78:
         eb:8c:8a:f1:5e:65:8a:9e:ac:f1:d3:91:65:56:02:88:51:63:
         cd:dc:b8:8d:4b:4c:8e:b6:db:e3:5f:4d:cc:d1:0d:62:be:68:
         db:54:11:ed:0e:a6:39:0e:17:c6:21:1c:0a:2d:e9:1f:2b:e1:
         99:cc:f5:1a:c8:f3:39:f6:0c:53:cc:fc:a5:8a:69:fb:d6:56:
         46:fa:c5:b4:32:26:a2:18:a4:33:e9:8d:18:f3:4e:87:83:c3:
         57:04:5d:d1:32:11:dc:20:9e:7f:4c:51:37:d8:1f:07:75:58:
         f2:54:b8:c1:71:ba:12:09:34:f0:ce:87:9e:ac:40:e1:93:44:
         95:35:87:98:68:02:8e:c1:17:86:63:93:58:02:71:f7:1b:4e:
         e6:ae:6d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:29 2026 by rpki-client