Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS9680.roa
File:                     AS9680.roa (raw, json)
Hash identifier:          t8AcN+qzlKdTMQRkrTlXkT1JRZQERUZau231q8DaY0g=
Subject key identifier:   5F:99:2C:D5:7F:3D:FC:0D:ED:90:41:B4:A3:D8:E2:D1:F3:B7:59:4F
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       67133CA927EDCE72735148E88C7C5A225FAB8756
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS9680.roa
Signing time:             Tue 12 May 2026 01:28:28 +0000
ROA not before:           Tue 12 May 2026 01:23:28 +0000
ROA not after:            Tue 11 May 2027 01:28:28 +0000
asID:                     9680
IP address blocks:        202.39.80.0/20 maxlen: 24
                          2001:b000:90::/48 maxlen: 64
                          2001:b000:91::/48 maxlen: 64
                          2001:b000:92::/48 maxlen: 64
                          2001:b000:591::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:13:3c:a9:27:ed:ce:72:73:51:48:e8:8c:7c:5a:22:5f:ab:87:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 12 01:23:28 2026 GMT
            Not After : May 11 01:28:28 2027 GMT
        Subject: CN=5F992CD57F3DFC0DED9041B4A3D8E2D1F3B7594F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:39:ba:03:0f:be:9c:d8:96:fb:fd:7d:bb:3b:
                    ad:e9:fa:9f:d0:65:41:26:a2:5d:9c:54:08:e0:e7:
                    0a:bb:a6:2d:d8:99:47:79:fb:8b:5d:eb:4f:9e:94:
                    de:ed:a5:25:4f:bf:5f:54:04:2b:26:46:a8:1f:58:
                    06:11:66:ed:38:28:a4:26:ae:83:c4:1d:11:e2:f8:
                    fa:fe:54:63:31:78:9a:99:59:9c:29:ba:d5:f0:f5:
                    57:45:91:bb:b6:b6:1e:ea:1c:15:e9:0b:e2:ad:d5:
                    87:79:ae:3b:ca:0e:5a:a1:73:e7:7f:ad:f6:af:20:
                    85:11:a0:59:59:1e:98:15:80:d4:d4:5e:d0:e9:3c:
                    18:bf:a4:13:37:0e:87:ea:f5:50:6e:3d:6f:07:0f:
                    7f:1e:34:bb:76:58:f0:62:28:a2:60:88:44:83:f0:
                    19:21:5a:3e:80:3b:77:c5:f3:7a:3d:26:14:8e:31:
                    70:d4:12:c3:4c:ac:76:b8:56:4c:9a:56:52:4e:78:
                    4c:60:0c:d7:12:b0:94:2f:bb:a6:5f:89:50:e0:35:
                    7e:22:cb:98:67:f1:70:2d:70:32:f9:e1:bc:4d:d0:
                    84:89:70:6e:36:a4:57:00:de:ba:b7:88:40:1d:f0:
                    ab:b3:6f:1a:e0:d5:b7:d5:bb:f9:57:09:8c:3f:4c:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:99:2C:D5:7F:3D:FC:0D:ED:90:41:B4:A3:D8:E2:D1:F3:B7:59:4F
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS9680.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.39.80.0/20
                IPv6:
                  2001:b000:90::-2001:b000:92:ffff:ffff:ffff:ffff:ffff
                  2001:b000:591::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:6a:16:d3:73:6f:55:bd:47:0f:56:2d:dc:6d:8c:97:2d:
         51:46:f1:3b:fe:8f:7c:61:96:d1:77:c6:4c:5e:3b:e9:4b:da:
         a4:6d:b8:eb:9f:4a:a5:3a:6c:22:0b:32:4d:4b:65:30:72:b8:
         d3:4c:e8:21:46:bb:33:84:f4:00:40:25:47:2d:30:7c:c1:b7:
         31:b1:b8:38:52:23:e1:44:1c:79:f8:fe:60:ac:80:a4:f7:5e:
         17:dc:b4:a8:38:04:1b:7f:28:f0:7e:78:61:8d:29:29:07:02:
         92:74:0d:69:59:a4:a9:69:3e:f7:9f:a8:19:9c:f4:22:95:9a:
         46:88:22:9b:28:81:01:c1:73:7e:8f:7a:38:cc:d8:0f:33:8c:
         bb:26:3c:36:2c:90:2a:8a:42:fa:a0:b0:37:1d:0c:cd:27:2a:
         dc:31:b3:e7:bd:f7:54:ed:6f:34:98:92:3d:1a:a8:e5:5b:54:
         c9:ef:78:f0:6e:ba:d8:33:4d:8a:9b:ef:e0:f8:38:26:df:86:
         d2:30:0b:4c:b4:9f:26:0a:ab:68:97:06:cf:61:ed:2b:50:84:
         14:2b:22:1a:ad:86:6c:2c:33:dc:62:eb:36:05:ef:6b:32:39:
         6a:11:4c:75:b6:b5:af:db:ad:30:dc:64:e5:13:4e:25:8e:8e:
         35:cc:0f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:30 2026 by rpki-client