Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3231312e37362e3137392e302f32342d3234203d3e2039363738.roa
File:                     3231312e37362e3137392e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          /Zn6oV7/+JqyT/+9kwju4uQs6rJPmG9bibhYt4x/eW8=
Subject key identifier:   25:29:95:F6:99:BC:66:DD:8C:63:48:75:A6:A7:D7:2B:6C:26:A8:DE
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       515496C5E13269CAC2211397DAECE8948F7C5874
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3231312e37362e3137392e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:40:28 +0000
ROA not before:           Mon 11 May 2026 17:35:28 +0000
ROA not after:            Mon 10 May 2027 17:40:28 +0000
asID:                     9678
IP address blocks:        211.76.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:54:96:c5:e1:32:69:ca:c2:21:13:97:da:ec:e8:94:8f:7c:58:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:35:28 2026 GMT
            Not After : May 10 17:40:28 2027 GMT
        Subject: CN=252995F699BC66DD8C634875A6A7D72B6C26A8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:53:f6:04:4b:ad:f5:7b:8a:12:0f:22:b3:
                    a3:2a:a0:ab:90:9b:2c:19:4f:32:0d:02:66:86:0e:
                    fc:7f:dc:9e:58:87:67:83:b7:17:e6:60:b1:b7:84:
                    ff:cc:ac:dc:b8:3c:84:0a:63:5d:9b:fa:5a:d9:f8:
                    2e:87:e8:be:44:b0:c5:be:fe:78:0b:ce:14:a5:00:
                    5a:89:ee:e5:8d:e4:0f:d4:4a:ac:d0:60:0e:ba:95:
                    4f:45:25:4a:40:c2:24:c5:a1:68:af:f5:8e:36:08:
                    1f:19:90:55:3e:71:c3:9d:c2:8a:79:bc:1e:dd:d3:
                    c6:ec:cc:11:43:51:da:b3:32:08:a2:3e:fb:df:b2:
                    80:8b:2d:0e:cb:b1:b1:4f:60:89:ae:20:88:e9:59:
                    8d:60:cb:cb:9a:1b:f2:d0:b3:69:ee:86:ed:8d:6c:
                    a0:18:48:7a:86:84:8c:bf:8b:52:68:ff:be:19:80:
                    d2:91:30:b9:c0:b2:cb:dc:cf:f9:37:a1:53:12:4c:
                    11:67:dd:e9:18:a0:cc:90:a0:c0:f5:5e:1e:7f:2d:
                    89:df:7d:83:a5:80:17:79:ed:51:8b:b0:45:9d:c3:
                    ca:7b:aa:e6:bd:20:09:bb:bd:90:6b:e4:09:33:92:
                    d4:0b:a3:ff:bd:79:04:25:34:1e:ff:94:3f:92:df:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:29:95:F6:99:BC:66:DD:8C:63:48:75:A6:A7:D7:2B:6C:26:A8:DE
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3231312e37362e3137392e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:39:0d:c3:e4:fa:53:ac:79:31:01:9a:7b:4c:d3:ac:5c:ef:
         16:94:45:02:4c:56:84:6f:86:ea:fc:72:ff:7e:c4:aa:b8:4d:
         1f:55:7b:36:32:46:5e:5d:07:08:b8:ca:ba:d2:b2:34:5e:22:
         bd:7d:6c:3c:d5:9f:38:59:79:84:cc:09:6c:80:52:b1:97:e4:
         bb:2d:e4:de:f5:15:da:ae:09:67:d0:53:03:e7:2d:44:9a:98:
         2f:74:e8:ca:e7:15:67:d9:db:b4:bb:f9:44:03:a3:05:51:ee:
         23:ed:24:d9:07:7c:27:af:c0:59:2a:f6:4c:df:b5:d1:79:63:
         65:ca:6b:5d:15:5b:5e:63:43:81:97:c2:8d:73:95:0a:fd:a5:
         e9:74:12:22:4f:5d:90:66:b5:e0:36:98:94:d4:1d:9d:dc:83:
         d3:f3:36:de:49:84:8a:94:b7:b3:bf:95:34:df:e5:9d:0d:0c:
         af:90:4d:70:af:5e:d0:bb:44:96:22:2c:7a:6b:99:a5:f4:c8:
         87:ec:97:60:c2:47:bf:3f:0f:db:44:c8:bb:c3:be:5a:e3:ca:
         cf:6c:7b:e9:82:d5:c5:2c:24:7a:7d:c3:9a:aa:23:8e:84:7b:
         b6:e4:c6:23:20:4a:23:a8:58:cd:ef:a9:42:14:c3:18:8e:37:
         b4:b4:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:22 2026 by rpki-client