Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS142005.roa
File:                     AS142005.roa (raw, json)
Hash identifier:          n6A/F3tzIQMsXljCaM3ugHS3kpio/l0Ccfoi3XVAHOY=
Subject key identifier:   69:51:38:11:A8:02:F6:02:BE:96:B3:65:44:BF:12:21:97:EB:5D:51
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       125380B2D2774D539C8775019ED0002F6F9A617A
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS142005.roa
Signing time:             Mon 11 May 2026 17:31:49 +0000
ROA not before:           Mon 11 May 2026 17:26:49 +0000
ROA not after:            Mon 10 May 2027 17:31:49 +0000
asID:                     142005
IP address blocks:        210.61.3.0/24 maxlen: 24
                          210.61.107.0/24 maxlen: 24
                          210.61.114.0/24 maxlen: 24
                          210.242.83.0/24 maxlen: 24
                          210.242.118.0/24 maxlen: 24
                          210.242.123.0/24 maxlen: 24
                          210.242.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:53:80:b2:d2:77:4d:53:9c:87:75:01:9e:d0:00:2f:6f:9a:61:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 11 17:26:49 2026 GMT
            Not After : May 10 17:31:49 2027 GMT
        Subject: CN=69513811A802F602BE96B36544BF122197EB5D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:26:6a:22:d8:7b:ae:85:85:ae:ce:13:42:
                    bd:6e:b0:83:f1:24:60:85:0a:b3:b3:ab:b9:60:e7:
                    6d:3b:cd:5e:42:a0:ed:ee:1b:a1:7c:f0:6a:e8:7c:
                    be:51:6d:f0:ca:b3:d6:49:1b:1c:dd:7b:69:3e:49:
                    91:59:f0:30:8e:55:37:85:b4:d2:df:f1:2d:90:ed:
                    21:80:85:27:31:15:49:ed:ba:49:a9:ec:04:fa:b6:
                    a1:88:a2:40:c5:06:40:08:4e:3f:19:31:8f:31:c5:
                    7a:50:63:31:1e:7b:56:c3:58:f7:78:85:ab:c6:d0:
                    80:60:62:f3:48:e8:61:0c:14:76:84:17:2f:0e:fe:
                    a5:ea:6c:cc:da:d1:b5:8c:34:00:68:4a:99:86:97:
                    09:03:ad:db:8d:f2:58:e7:cd:49:df:78:89:d3:8e:
                    ef:4b:a5:28:d0:99:e9:24:10:cb:e2:7f:41:26:de:
                    c6:61:45:f0:93:26:69:ae:4e:91:97:b9:a4:2d:e0:
                    f7:13:6a:10:53:73:bc:17:d7:a2:bd:36:b5:7c:2a:
                    7a:3d:4e:8b:41:ad:d5:37:3e:bd:c1:35:3a:ce:e0:
                    f5:5a:55:dc:d1:e7:0e:2d:07:7d:38:eb:18:ea:89:
                    f6:a4:27:b2:7d:5d:cb:54:a0:cb:32:4f:3b:8c:98:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:38:11:A8:02:F6:02:BE:96:B3:65:44:BF:12:21:97:EB:5D:51
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS142005.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.61.3.0/24
                  210.61.107.0/24
                  210.61.114.0/24
                  210.242.83.0/24
                  210.242.118.0/24
                  210.242.123.0/24
                  210.242.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:e7:03:4a:b2:24:0c:6a:f8:ce:80:47:55:d9:4a:bc:12:66:
         83:65:8b:00:94:fd:cf:3b:d8:ce:b2:49:5e:55:49:2c:39:ed:
         86:fe:10:e5:6f:c0:76:76:83:ce:45:c6:85:42:ce:30:d2:56:
         ba:17:9d:ea:3c:ce:9c:48:71:5e:47:05:6d:e7:cc:82:6d:71:
         92:e8:b5:3e:28:c2:98:bb:a7:b0:e1:43:6b:10:5b:57:76:78:
         58:b4:a4:76:49:24:3d:6b:15:3c:57:82:ab:d8:e5:e5:f7:ba:
         45:32:9e:38:56:b2:c9:e1:c4:39:ee:32:c5:0e:52:d2:52:06:
         7a:24:90:0c:8a:b3:bf:01:51:25:56:79:81:61:e7:c4:c2:bb:
         94:1a:b8:28:3f:a6:70:fa:8e:2b:6e:20:c8:eb:7b:fe:ed:d0:
         82:a7:6a:25:4d:91:10:1c:0a:cb:b6:41:a6:61:57:48:9e:b7:
         59:56:3a:18:1c:54:24:a7:c5:26:92:02:dc:f5:99:89:57:21:
         3e:a4:4f:33:e9:65:f9:0d:28:6c:35:4b:ac:62:a6:72:7b:47:
         c6:03:7e:73:af:ad:fd:ff:ed:13:56:37:4a:99:1b:9a:89:47:
         6f:52:e0:ab:1c:fb:cd:77:ba:4d:c2:6d:18:6a:44:4c:b2:2a:
         4a:dd:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:29 2026 by rpki-client