Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3139312e302f32342d3234203d3e20313334383233.roa
File:                     3130332e3132322e3139312e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          +oMp2cQbPSDopvpXq8lm7jgil+eOsfsav5OqJpbVWj4=
Subject key identifier:   F7:B6:38:57:25:22:B6:22:70:6D:F3:7E:B6:31:A2:C7:89:AA:0A:C8
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       3BC593DBA6A12804A8F300ECAB03A2EC6DDC3720
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3139312e302f32342d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:32:26 +0000
ROA not before:           Mon 11 May 2026 17:27:26 +0000
ROA not after:            Mon 10 May 2027 17:32:26 +0000
asID:                     134823
IP address blocks:        103.122.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c5:93:db:a6:a1:28:04:a8:f3:00:ec:ab:03:a2:ec:6d:dc:37:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:27:26 2026 GMT
            Not After : May 10 17:32:26 2027 GMT
        Subject: CN=F7B638572522B622706DF37EB631A2C789AA0AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:7f:a6:9f:e7:8b:11:73:8a:2c:f1:b6:1e:
                    56:71:d1:73:31:e3:97:b0:09:c0:f8:b1:49:15:a7:
                    a5:9a:d4:7e:26:08:4d:51:b2:5f:5c:84:41:3e:54:
                    b9:19:e7:b8:d7:7f:54:35:f4:ec:2f:42:fc:2e:12:
                    cf:f2:60:c8:b6:91:50:c3:f6:d6:3a:28:3b:a1:94:
                    e8:dd:52:2e:e4:61:29:1d:bd:3f:36:7e:cd:dc:cc:
                    30:af:de:e0:1c:3d:d4:f6:f0:21:6b:38:d1:97:be:
                    7c:d6:03:5b:5b:6e:14:6f:04:f9:a2:ea:cf:a0:7b:
                    c4:a0:83:73:aa:10:bf:ce:75:e5:61:b8:b7:8a:47:
                    12:bb:5d:38:d2:74:9a:39:88:6c:eb:f5:be:3e:bc:
                    cf:4a:f1:92:73:88:a2:0b:2d:89:9a:d2:ac:22:1e:
                    1b:66:e6:55:a0:60:7b:c5:4b:f5:87:57:f6:92:b2:
                    31:37:3a:7e:51:18:3e:f5:c9:35:44:0f:93:3c:be:
                    90:b3:ee:b7:d9:e7:c2:d7:bc:54:81:be:a2:ad:7e:
                    89:82:a8:08:00:40:f6:d8:41:fe:64:d7:1d:95:bf:
                    e7:94:51:18:46:47:22:dc:25:65:6e:29:d9:3d:a1:
                    fd:bc:29:ac:33:3b:a1:83:fe:30:5b:e8:2c:f0:a9:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B6:38:57:25:22:B6:22:70:6D:F3:7E:B6:31:A2:C7:89:AA:0A:C8
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/3130332e3132322e3139312e302f32342d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:9d:6b:80:c6:89:68:2b:ac:aa:7f:0a:fc:e9:af:34:fa:
         56:8c:82:4c:72:2c:2b:d8:8d:09:d0:06:d0:7f:00:8d:27:db:
         15:28:1c:23:08:e2:a6:69:6f:bb:ec:0d:0f:3c:6d:1b:29:03:
         81:d5:f2:3a:f3:32:b5:18:37:77:da:16:3b:5f:6b:ca:4d:ee:
         b9:5e:3e:ed:a5:ee:07:59:c9:35:9b:74:24:ef:e5:f8:c9:b3:
         eb:0a:e8:38:dd:6b:77:f5:08:b2:ef:53:9a:f2:6b:58:e4:13:
         fd:24:bc:32:3b:31:48:31:87:29:45:51:68:56:d4:13:f2:5c:
         10:29:98:15:9b:da:ba:eb:f6:6f:25:08:7f:01:ef:b9:a7:8a:
         07:25:2a:8c:90:2f:3e:9b:43:8c:7a:45:53:53:94:be:12:3a:
         9e:eb:ab:96:be:29:fe:f0:5a:9b:26:39:5c:00:89:06:b9:3e:
         46:9b:4d:e8:cc:2f:df:a6:5d:dd:d6:3c:1b:a7:8e:21:43:f5:
         48:f4:1f:1e:31:a2:cb:e2:67:1b:27:e2:3e:12:a1:15:a6:ac:
         ea:03:6e:84:88:3d:8d:c9:e5:ae:d2:4c:da:db:3f:93:34:3e:
         73:a0:eb:c9:34:03:ac:f2:5b:9f:af:a1:29:f9:88:1d:fd:c6:
         84:38:53:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:12 2026 by rpki-client