Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/2/323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa
File:                     323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa (raw, json)
Hash identifier:          kPG07upBltBMpeU3lVOAGDxJPAnyCOXOCAXQZ9d58mQ=
Subject key identifier:   B2:F0:9E:4D:9B:7C:98:0A:66:F1:66:22:08:CB:D3:28:64:D7:1D:5E
Certificate issuer:       /CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
Certificate serial:       15EC884D54D8AF52F914F874D916BDCF6B9A47A3
Authority key identifier: 71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/2/323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa
Signing time:             Mon 11 May 2026 16:30:42 +0000
ROA not before:           Mon 11 May 2026 16:25:42 +0000
ROA not after:            Mon 10 May 2027 16:30:42 +0000
asID:                     7481
IP address blocks:        2001:7fa:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:88:4d:54:d8:af:52:f9:14:f8:74:d9:16:bd:cf:6b:9a:47:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E534018547D77B65EBCD0FC4941DC8113FAEE3
        Validity
            Not Before: May 11 16:25:42 2026 GMT
            Not After : May 10 16:30:42 2027 GMT
        Subject: CN=B2F09E4D9B7C980A66F1662208CBD32864D71D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:55:6f:f6:63:5f:ed:fb:3f:11:8d:a0:50:ec:
                    a3:86:84:8c:39:6e:47:84:a4:33:5a:f7:42:6d:24:
                    91:f1:bf:69:e0:a7:ed:51:bc:49:b9:24:16:bc:0f:
                    e4:c6:05:ff:0c:82:18:e3:7a:df:3f:22:da:8c:7a:
                    80:16:87:92:d0:49:c4:1e:00:d8:6c:0e:e5:41:32:
                    0e:1c:03:49:d7:b9:78:eb:21:42:e1:ae:f1:0b:b3:
                    9a:9d:fa:53:52:7b:5c:b8:5b:31:d8:c3:12:78:fd:
                    90:1c:f4:93:af:7e:85:27:b2:6e:0c:78:c7:0d:80:
                    a1:47:61:8b:a0:a4:5e:1f:40:f3:c0:ba:ea:02:db:
                    fd:d8:0e:66:92:89:15:67:9e:86:c2:fa:42:18:f4:
                    61:34:5b:ff:1b:ac:0c:64:cb:05:41:58:9d:92:4f:
                    24:b6:6b:5c:e6:f8:d7:3c:cf:cc:23:91:4f:e8:8e:
                    e5:c5:49:a5:1a:81:ce:53:73:2e:73:a8:a1:be:73:
                    45:14:0f:2b:74:f3:6f:58:61:22:ca:95:17:c3:ca:
                    fd:af:14:59:2e:75:71:2e:90:80:90:0d:5f:ad:0e:
                    37:9b:08:00:80:67:f6:87:43:49:65:7e:26:83:7a:
                    94:78:9c:4c:e4:90:81:81:12:d4:f6:a0:96:26:51:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:9E:4D:9B:7C:98:0A:66:F1:66:22:08:CB:D3:28:64:D7:1D:5E
            X509v3 Authority Key Identifier:
                keyid:71:E5:34:01:85:47:D7:7B:65:EB:CD:0F:C4:94:1D:C8:11:3F:AE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/2/71E534018547D77B65EBCD0FC4941DC8113FAEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/71E534018547D77B65EBCD0FC4941DC8113FAEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/2/323030313a3766613a313a3a2f34382d3438203d3e2037343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:0c:62:a3:e9:09:22:4a:bf:d9:31:19:e3:c0:f3:d1:d4:
         ce:1b:f4:30:c2:3b:28:39:7d:a3:11:02:8b:0a:1b:f0:fd:53:
         7d:45:c7:ef:28:9c:b4:38:50:99:08:0b:ec:cd:88:e7:25:0c:
         d8:31:1b:f9:8c:68:a6:92:a0:f2:3c:ac:ec:f6:2e:5c:09:c3:
         98:56:2e:88:82:b5:09:22:d0:8d:4a:29:3e:5b:a5:c5:7d:3a:
         83:3c:49:2c:a2:aa:93:20:94:01:7f:30:bc:f9:33:c6:42:88:
         80:83:f4:9c:dd:7a:88:87:46:dc:c2:86:d9:7e:11:6e:95:72:
         18:c7:a4:58:71:78:49:17:2c:c6:68:17:0e:e3:28:fa:0f:c7:
         e3:5d:72:ff:04:77:b9:42:1e:b0:2f:0d:8e:7a:6a:5e:29:8f:
         32:aa:4d:a9:c9:83:31:9b:50:53:54:65:be:0e:3a:44:b7:d0:
         00:fb:64:58:e6:ec:80:53:7e:b2:be:01:21:62:01:11:9d:13:
         de:01:bb:e2:44:6e:6d:c2:d3:2f:ea:54:7d:5b:44:41:1f:c3:
         7c:7c:72:08:30:93:be:a4:ea:2f:a9:64:0b:5d:95:d9:6b:f2:
         28:50:73:64:8c:e0:cf:31:a9:60:5a:4a:90:d3:28:cc:b9:ea:
         21:a1:d7:0e
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgIUFeyITVTYr1L5FPh02Ra9z2uaR6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFFNTM0MDE4NTQ3RDc3QjY1RUJDRDBGQzQ5NDFEQzgx
MTNGQUVFMzAeFw0yNjA1MTExNjI1NDJaFw0yNzA1MTAxNjMwNDJaMDMxMTAvBgNV
BAMTKEIyRjA5RTREOUI3Qzk4MEE2NkYxNjYyMjA4Q0JEMzI4NjRENzFENUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VW/2Y1/t+z8RjaBQ7KOGhIw5
bkeEpDNa90JtJJHxv2ngp+1RvEm5JBa8D+TGBf8Mghjjet8/ItqMeoAWh5LQScQe
ANhsDuVBMg4cA0nXuXjrIULhrvELs5qd+lNSe1y4WzHYwxJ4/ZAc9JOvfoUnsm4M
eMcNgKFHYYugpF4fQPPAuuoC2/3YDmaSiRVnnobC+kIY9GE0W/8brAxkywVBWJ2S
TyS2a1zm+Nc8z8wjkU/ojuXFSaUagc5Tcy5zqKG+c0UUDyt0829YYSLKlRfDyv2v
FFkudXEukICQDV+tDjebCACAZ/aHQ0llfiaDepR4nEzkkIGBEtT2oJYmUWpdAgMB
AAGjggHiMIIB3jAdBgNVHQ4EFgQUsvCeTZt8mApm8WYiCMvTKGTXHV4wHwYDVR0j
BBgwFoAUceU0AYVH13tl680PxJQdyBE/ruMwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv
Mi83MUU1MzQwMTg1NDdENzdCNjVFQkNEMEZDNDk0MURDODExM0ZBRUUzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8zLzcxRTUzNDAxODU0N0Q3N0I2NUVCQ0QwRkM0OTQx
REM4MTEzRkFFRTMuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8yLzMyMzAzMDMxM2EzNzY2
NjEzYTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzczNDM4MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD
BwAgAQf6AAEwDQYJKoZIhvcNAQELBQADggEBAMbFDGKj6QkiSr/ZMRnjwPPR1M4b
9DDCOyg5faMRAosKG/D9U31Fx+8onLQ4UJkIC+zNiOclDNgxG/mMaKaSoPI8rOz2
LlwJw5hWLoiCtQki0I1KKT5bpcV9OoM8SSyiqpMglAF/MLz5M8ZCiICD9JzdeoiH
RtzChtl+EW6VchjHpFhxeEkXLMZoFw7jKPoPx+Ndcv8Ed7lCHrAvDY56al4pjzKq
TanJgzGbUFNUZb4OOkS30AD7ZFjm7IBTfrK+ASFiARGdE94Bu+JEbm3C0y/qVH1b
REEfw3x8cggwk76k6i+pZAtdldlr8ihQc2SM4M8xqWBaSpDTKMy56iGh1w4=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:07 2026 by rpki-client