Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS36040.roa
File:                     AS36040.roa (raw, json)
Hash identifier:          HFvh2bx0lCT7/nO4QfNv6T9NlC6lwPeUOH26KuDse8s=
Subject key identifier:   E7:D0:99:66:E1:7B:2E:93:88:E3:18:6C:23:F4:39:FC:01:0E:43:A3
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       6A793E3FAFD71EF25A11887870003B35D2616B14
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS36040.roa
Signing time:             Tue 12 May 2026 01:28:17 +0000
ROA not before:           Tue 12 May 2026 01:23:17 +0000
ROA not after:            Tue 11 May 2027 01:28:17 +0000
asID:                     36040
IP address blocks:        202.39.67.128/27 maxlen: 27
                          202.39.67.192/27 maxlen: 27
                          2001:b032:c0ff:1::/64 maxlen: 64
                          2001:b032:c0ff:2::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:79:3e:3f:af:d7:1e:f2:5a:11:88:78:70:00:3b:35:d2:61:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 12 01:23:17 2026 GMT
            Not After : May 11 01:28:17 2027 GMT
        Subject: CN=E7D09966E17B2E9388E3186C23F439FC010E43A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e7:dd:df:b5:43:fb:f5:5f:dc:3e:dc:18:40:
                    6b:4b:14:aa:79:8f:a2:b5:be:a7:1a:e7:57:44:85:
                    65:12:17:7a:83:a8:b8:e1:70:47:72:32:25:b6:4a:
                    32:73:4f:f4:2a:db:f9:d4:a3:66:19:fc:00:48:23:
                    5a:c0:5c:97:db:45:3e:4c:fb:a1:71:27:c3:49:f0:
                    23:53:aa:b1:d9:eb:5b:be:97:95:b3:4e:0b:97:63:
                    6d:d0:29:da:e2:82:5b:03:36:c8:14:f5:4a:d9:71:
                    6a:e2:7b:3d:f3:0e:1d:f2:7c:e8:bd:da:49:b5:8b:
                    e8:81:8d:a6:d6:37:b2:e1:7a:10:df:95:90:1e:c1:
                    da:9c:26:c0:e9:bf:0b:d6:1a:f5:ab:49:e9:87:66:
                    33:62:12:e8:72:45:c6:15:f9:3a:7c:60:66:88:24:
                    ef:79:0c:1b:c0:10:4b:fd:8c:f1:61:7f:8e:bb:71:
                    3b:70:44:58:0c:1a:c0:16:8d:23:a8:f5:2c:bb:b3:
                    59:0c:68:d0:d9:88:3c:50:51:d9:2d:bd:e0:e8:15:
                    d6:fd:ce:ea:e5:03:e6:7a:08:7c:9a:ab:f0:ef:25:
                    cc:33:74:90:20:b4:09:05:0d:86:45:c1:59:db:75:
                    0c:61:19:48:51:1c:98:a9:ff:2d:c1:62:ba:04:39:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:99:66:E1:7B:2E:93:88:E3:18:6C:23:F4:39:FC:01:0E:43:A3
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS36040.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.67.128/27
                  202.39.67.192/27
                IPv6:
                  2001:b032:c0ff:1::-2001:b032:c0ff:2:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         46:47:17:31:61:4c:66:e4:61:68:02:e5:32:02:94:a7:38:0d:
         57:5e:d9:2d:ef:23:b5:80:e2:62:ba:e0:be:38:c4:90:86:ec:
         e9:07:f6:35:44:82:6e:d8:45:32:77:28:3c:7a:d7:a7:74:e9:
         a5:b9:3e:c9:88:3b:b8:90:cd:43:37:e8:ad:4d:e3:c4:2e:96:
         34:f2:dc:2c:4b:e7:01:2e:4c:25:d9:71:16:0f:e0:44:0f:40:
         25:e1:9d:07:f7:4b:84:28:48:d3:d1:09:43:91:4f:8f:97:85:
         bf:10:4b:02:32:93:4b:87:1b:fa:d6:b1:21:1d:3f:d9:1f:57:
         e6:8e:0d:d6:51:27:d8:b7:15:2f:04:e2:06:e3:b9:d3:d2:51:
         62:da:c8:2d:bf:bd:35:aa:c5:99:83:0e:a4:15:b7:dc:e3:6e:
         af:72:35:55:0d:2a:93:ba:00:cd:78:0a:2e:97:04:27:3c:b8:
         b1:3e:74:a1:d5:cb:ea:0e:10:df:68:52:31:41:a6:46:f0:b7:
         37:aa:9a:01:55:58:13:22:8d:25:14:07:30:c1:e0:90:34:c1:
         10:f9:5a:18:a4:2b:66:84:dc:8a:9d:2d:8d:4e:3a:85:f3:d4:
         fb:24:8b:b6:f2:3d:54:96:82:25:4b:39:94:55:43:03:5c:b2:
         18:0b:29:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:29 2026 by rpki-client