Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS7500.roa
File:                     AS7500.roa (raw, json)
Hash identifier:          DP0t4RLMSEErxG2yBbTSYS9dK3HaftfndKK96UTyye8=
Subject key identifier:   F8:8F:2D:23:B6:7A:5D:1A:3A:6A:C0:64:BF:C6:BF:5E:6A:BD:2F:72
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       0BAD8F044C7FF4E68ACF6864F451B37CF9A96745
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS7500.roa
Signing time:             Mon 11 May 2026 17:27:24 +0000
ROA not before:           Mon 11 May 2026 17:22:24 +0000
ROA not after:            Mon 10 May 2027 17:27:24 +0000
asID:                     7500
IP address blocks:        202.39.32.0/28 maxlen: 28
                          2001:b000:19e::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ad:8f:04:4c:7f:f4:e6:8a:cf:68:64:f4:51:b3:7c:f9:a9:67:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 11 17:22:24 2026 GMT
            Not After : May 10 17:27:24 2027 GMT
        Subject: CN=F88F2D23B67A5D1A3A6AC064BFC6BF5E6ABD2F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:6e:c6:6c:6f:a6:05:46:0f:64:72:84:85:
                    fd:80:db:f0:c0:4e:2c:15:78:e2:b0:86:03:5a:cd:
                    b6:5a:74:d8:4f:65:3f:b3:54:34:55:4a:47:0b:f6:
                    7e:5e:8d:ea:38:ae:14:0b:6f:f5:51:93:b0:de:eb:
                    99:c4:83:36:70:01:35:61:77:9d:7d:1f:1d:d5:f3:
                    88:6c:2a:81:bc:10:98:70:be:48:db:4a:62:eb:88:
                    47:e5:2c:9b:97:0c:77:96:67:1a:13:83:29:fe:cb:
                    18:a7:40:8e:20:09:ad:ed:65:a1:38:ed:32:59:9a:
                    9b:06:04:ed:35:f8:7d:7e:4d:b2:e2:4f:a1:1a:6a:
                    dd:22:8d:c1:95:98:0c:f9:38:87:d6:3a:f9:21:80:
                    ad:cc:30:11:a2:1c:d9:98:57:27:eb:85:a1:44:83:
                    01:8b:a1:5c:39:22:cb:cd:d4:39:2a:03:53:d9:09:
                    05:69:73:77:59:e5:a6:4a:ea:3b:6e:bb:bf:e6:14:
                    bf:64:b3:30:62:4a:ab:d7:ac:66:0a:e7:b3:9e:f8:
                    9e:0a:c0:f3:54:ec:48:0a:ce:44:f0:f9:e2:ed:18:
                    09:9c:f4:51:6c:4a:29:19:3e:a6:a3:57:a2:d9:5e:
                    9a:94:8b:c1:eb:a1:0e:94:a0:00:a8:3d:a6:3b:e0:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8F:2D:23:B6:7A:5D:1A:3A:6A:C0:64:BF:C6:BF:5E:6A:BD:2F:72
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS7500.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.32.0/28
                IPv6:
                  2001:b000:19e::/64

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:09:0c:dc:05:8d:02:ec:1b:ed:c2:60:dd:0e:19:ac:44:
         02:3a:ce:7c:6a:37:f8:ea:f1:a5:27:77:a6:49:f1:87:19:12:
         0f:db:7f:6e:0a:4b:4f:df:25:18:a7:59:cc:80:d2:7c:1c:83:
         06:e4:04:d1:f5:3e:db:bc:5f:09:b4:df:eb:e2:6d:64:9f:37:
         1a:85:fa:cf:94:eb:6b:67:4d:b6:8c:11:70:31:13:2a:26:5d:
         43:2b:58:15:73:d4:f5:80:9e:f1:16:3c:8b:79:2e:f7:a2:71:
         0f:8b:c2:5b:12:15:ae:35:7c:b4:a9:28:1e:f9:e6:f2:e3:0f:
         dc:c7:0a:9a:ab:a3:ea:21:a2:f9:2e:59:fe:f0:88:8b:76:f3:
         48:19:2a:76:bb:c9:70:56:59:6d:cd:68:d9:c1:e9:a5:71:43:
         b0:27:d7:ce:75:19:76:6a:4c:81:6f:a6:eb:34:47:01:90:8a:
         d3:71:51:90:06:49:34:2e:8d:1d:b3:0b:67:32:da:0e:67:9b:
         12:7a:85:80:b0:5f:8c:91:c0:93:7c:11:0e:4b:b6:06:ec:a7:
         a0:d9:81:eb:af:17:ac:05:d5:b1:5a:81:56:dc:3b:be:16:18:
         81:35:08:89:70:8f:52:b4:01:fd:05:1c:12:86:91:67:5d:35:
         b5:dc:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:28 2026 by rpki-client