Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS9678.roa
File:                     AS9678.roa (raw, json)
Hash identifier:          HNJcoSOYfMTsvd68jE2DnDPviUo0e1GZbEsZ9LQbPiM=
Subject key identifier:   C7:F0:5E:A3:93:10:DE:03:CC:6A:9A:1E:2A:E9:CF:63:1C:F5:1A:03
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       511E249248DD8F115FE8624D86F60EFB006DBC1A
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS9678.roa
Signing time:             Mon 11 May 2026 17:04:54 +0000
ROA not before:           Mon 11 May 2026 16:59:54 +0000
ROA not after:            Mon 10 May 2027 17:04:54 +0000
asID:                     9678
IP address blocks:        203.66.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1e:24:92:48:dd:8f:11:5f:e8:62:4d:86:f6:0e:fb:00:6d:bc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 11 16:59:54 2026 GMT
            Not After : May 10 17:04:54 2027 GMT
        Subject: CN=C7F05EA39310DE03CC6A9A1E2AE9CF631CF51A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:8f:de:71:b3:38:27:c3:ed:05:56:b3:3f:
                    81:cd:42:6c:db:31:57:32:4f:23:00:f6:36:e8:18:
                    54:48:ae:90:ac:d1:dd:87:a4:05:75:ae:90:83:2e:
                    62:17:16:6d:4d:42:45:a7:cc:e1:06:0f:79:47:2f:
                    18:8f:b5:08:e0:65:fe:a2:40:48:7d:d6:c7:53:22:
                    16:1e:84:36:4d:4b:49:af:45:64:48:d5:db:c5:54:
                    60:90:b2:f3:a5:38:90:12:9b:92:aa:94:b3:fb:e4:
                    ec:6d:44:cc:b8:0f:2b:a3:74:8f:08:d2:0a:3f:05:
                    53:0c:66:11:36:26:45:ba:b8:e1:a3:8a:29:e3:c3:
                    6f:a3:90:90:f8:21:c5:07:69:66:74:5c:4e:f4:40:
                    df:5d:be:03:0d:d3:5d:66:c1:82:04:f5:8a:99:68:
                    6c:32:79:d9:83:24:25:c8:2b:dd:b2:f5:65:42:d6:
                    64:00:68:f1:85:ef:55:06:57:90:2e:19:86:fa:0d:
                    4e:b1:a5:4f:73:a8:7f:5d:2d:01:72:6f:f4:66:9a:
                    ed:30:ef:1c:cc:1b:1c:71:0f:12:69:7f:cc:ca:da:
                    28:34:7c:c9:d5:a9:11:f8:75:c6:c8:bf:ad:64:88:
                    22:dc:ba:0c:ea:4e:c5:82:95:3f:85:9f:74:98:0f:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:5E:A3:93:10:DE:03:CC:6A:9A:1E:2A:E9:CF:63:1C:F5:1A:03
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS9678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.66.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:f5:45:41:24:29:1c:c2:7a:8a:7e:9e:c9:40:4c:a8:b0:
         6f:0b:58:a4:6a:80:3c:24:2a:fd:ac:a9:1e:96:dc:83:f1:f8:
         5b:51:44:2f:de:b4:82:7a:1b:b7:85:87:26:9d:1c:01:87:f0:
         7e:17:08:12:f5:80:cb:91:34:a2:34:c6:88:36:32:a9:f4:83:
         b6:74:02:81:29:90:96:c1:7b:2c:c2:53:26:f4:0e:e5:ce:26:
         51:e6:2b:95:e6:29:25:20:11:ef:b2:d3:7f:b0:e4:33:19:45:
         31:60:33:7e:0f:47:8c:b1:cd:a4:48:a2:6c:02:7f:d7:64:2e:
         5d:fc:cd:b3:26:3b:b4:ce:38:bd:cf:eb:50:07:01:74:a2:09:
         70:21:56:5d:58:30:f1:5b:5b:95:02:90:fe:87:59:7c:08:71:
         02:7a:d4:30:c1:1b:b3:66:a3:86:80:5d:8d:e8:4e:c2:d7:1c:
         f2:9c:4c:90:c7:1e:d5:99:da:32:6b:4b:89:5e:48:2a:6c:4a:
         a5:7a:a2:a0:03:9e:46:f3:c1:7d:6e:a3:0b:84:fd:03:c7:83:
         c9:03:3b:5d:08:f8:80:5a:6b:32:aa:79:8b:eb:16:10:fc:8f:
         4e:3f:d7:41:78:60:29:a1:cd:cb:f6:4f:f8:9e:92:89:27:c4:
         50:55:91:45
-----BEGIN CERTIFICATE-----
MIIEpzCCA4+gAwIBAgIUUR4kkkjdjxFf6GJNhvYO+wBtvBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI3NkFGNUFFRkIyMTY1MzRENzY4MDNBNDVENjdDQURD
MjM0NDdCRDAeFw0yNjA1MTExNjU5NTRaFw0yNzA1MTAxNzA0NTRaMDMxMTAvBgNV
BAMTKEM3RjA1RUEzOTMxMERFMDNDQzZBOUExRTJBRTlDRjYzMUNGNTFBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7Y/ecbM4J8PtBVazP4HNQmzb
MVcyTyMA9jboGFRIrpCs0d2HpAV1rpCDLmIXFm1NQkWnzOEGD3lHLxiPtQjgZf6i
QEh91sdTIhYehDZNS0mvRWRI1dvFVGCQsvOlOJASm5KqlLP75OxtRMy4DyujdI8I
0go/BVMMZhE2JkW6uOGjiinjw2+jkJD4IcUHaWZ0XE70QN9dvgMN011mwYIE9YqZ
aGwyedmDJCXIK92y9WVC1mQAaPGF71UGV5AuGYb6DU6xpU9zqH9dLQFyb/Rmmu0w
7xzMGxxxDxJpf8zK2ig0fMnVqRH4dcbIv61kiCLcugzqTsWClT+Fn3SYD0qpAgMB
AAGjggGxMIIBrTAdBgNVHQ4EFgQUx/Beo5MQ3gPMapoeKunPYxz1GgMwHwYDVR0j
BBgwFoAUYnavWu+yFlNNdoA6RdZ8rcI0R70wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv
MC82Mjc2QUY1QUVGQjIxNjUzNEQ3NjgwM0E0NUQ2N0NBREMyMzQ0N0JELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzYyNzZBRjVBRUZCMjE2NTM0RDc2ODAzQTQ1RDY3
Q0FEQzIzNDQ3QkQuY2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8wL0FTOTY3OC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMtClzANBgkqhkiG9w0BAQsFAAOCAQEACWv1RUEkKRzCeop+nslATKiwbwtY
pGqAPCQq/aypHpbcg/H4W1FEL960gnobt4WHJp0cAYfwfhcIEvWAy5E0ojTGiDYy
qfSDtnQCgSmQlsF7LMJTJvQO5c4mUeYrleYpJSAR77LTf7DkMxlFMWAzfg9HjLHN
pEiibAJ/12QuXfzNsyY7tM44vc/rUAcBdKIJcCFWXVgw8VtblQKQ/odZfAhxAnrU
MMEbs2ajhoBdjehOwtcc8pxMkMce1ZnaMmtLiV5IKmxKpXqioAOeRvPBfW6jC4T9
A8eDyQM7XQj4gFprMqp5i+sWEPyPTj/XQXhgKaHNy/ZP+J6SiSfEUFWRRQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:52:29 2026 by rpki-client