Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3130332e3135302e33372e302f32342d3234203d3e2039363738.roa
File:                     3130332e3135302e33372e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          MxntDIE2cC7tgxOjHnVFPeq1VqsxruW7k0jq8nNwz5o=
Subject key identifier:   D4:92:76:24:AC:E4:D5:10:20:CC:F7:9B:26:1B:56:B3:2B:B7:E5:7C
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       3457CEFBEA52C2CE240B77E9975DFEFF5C21FDF8
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e3135302e33372e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:56:36 +0000
ROA not before:           Mon 11 May 2026 17:51:36 +0000
ROA not after:            Mon 10 May 2027 17:56:36 +0000
asID:                     9678
IP address blocks:        103.150.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:ce:fb:ea:52:c2:ce:24:0b:77:e9:97:5d:fe:ff:5c:21:fd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:51:36 2026 GMT
            Not After : May 10 17:56:36 2027 GMT
        Subject: CN=D4927624ACE4D51020CCF79B261B56B32BB7E57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:3d:21:52:f5:87:06:11:e1:1a:0f:c9:b3:
                    bd:22:03:6d:69:e3:0d:ee:ea:ea:62:b8:63:81:09:
                    15:2f:6e:a0:e4:9e:8c:aa:a3:74:bc:1d:4a:2a:8e:
                    d1:78:58:49:e3:8f:06:78:c2:7f:a8:85:20:b3:96:
                    d2:a4:2c:13:7d:58:43:91:ea:fd:c7:77:38:f5:24:
                    70:cd:d2:c2:69:5d:8b:a5:da:46:d3:9b:58:45:d5:
                    a9:b7:a7:cb:58:e9:7a:18:3f:6a:f1:4d:bf:7f:cc:
                    11:58:a5:55:c0:60:ed:97:74:e5:b6:86:af:28:eb:
                    c7:fe:de:b1:22:bb:02:7a:73:2b:15:92:0a:a8:d9:
                    32:b4:a9:5d:9a:1d:1a:a4:b9:f9:ba:a6:c4:71:92:
                    fe:a9:47:bc:0e:24:17:23:1c:41:b2:94:19:e5:ad:
                    50:8f:58:9e:51:56:29:ea:63:8b:e9:01:83:52:b6:
                    bf:c8:65:cb:db:f0:ba:ac:38:c1:60:d9:7e:f7:8d:
                    e6:ce:e7:97:05:50:6a:c4:8e:90:25:60:e8:5d:38:
                    96:62:86:da:51:46:58:22:5d:da:d5:be:cb:5d:d8:
                    8a:aa:b6:80:f0:62:90:bd:cc:bc:b8:c5:83:b8:a3:
                    aa:f2:66:08:d3:41:ff:7a:14:f7:d1:1b:3a:11:bf:
                    f3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:92:76:24:AC:E4:D5:10:20:CC:F7:9B:26:1B:56:B3:2B:B7:E5:7C
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e3135302e33372e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:85:69:ec:25:3e:e6:86:8e:ba:d8:6f:7d:20:ad:f9:f8:f1:
         f9:a8:fd:7e:8c:64:d3:df:a4:29:9e:9f:bc:97:52:4c:5c:3b:
         00:6d:76:9a:b4:07:ef:73:53:2b:e4:05:9e:29:fd:24:d2:ab:
         74:ad:54:54:17:f1:a9:00:2d:de:1b:c7:85:83:ae:69:46:bd:
         a4:60:4a:d9:7b:28:71:22:3b:53:86:93:3d:d8:b2:dc:bc:99:
         97:7f:7d:e4:3f:3c:cf:d6:20:3c:c5:dd:90:3e:7c:76:40:76:
         a7:3d:39:2e:f4:0b:eb:81:ca:93:95:5b:5a:5b:c4:89:31:86:
         68:d1:df:9d:e8:a3:19:f9:83:e6:6c:4b:04:a0:d4:c7:4a:1b:
         56:5c:a2:9d:d0:a0:a3:91:6d:70:d5:19:5c:49:d8:8a:fc:0f:
         21:87:44:fe:94:66:37:f2:9c:86:84:01:54:de:e2:12:00:4b:
         7c:56:2f:de:27:c1:5b:83:14:20:c0:ac:3e:fe:2a:45:e6:8e:
         3b:99:8f:f7:9f:cd:8c:2e:01:93:fa:90:9f:30:66:64:4b:d0:
         ca:28:14:26:e6:8a:a0:90:8a:2e:ed:ae:58:7f:d4:11:42:88:
         04:f5:ab:a3:4b:71:20:d1:05:7e:e8:e8:50:2f:64:78:e0:57:
         12:8e:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:35 2026 by rpki-client