Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NHRI/0/3231312e37362e3136302e302f32302d3234203d3e203138313831.roa
File:                     3231312e37362e3136302e302f32302d3234203d3e203138313831.roa (raw, json)
Hash identifier:          oheQ00k9k8K4dOL4XJ1Ms44fWqqeWviEPNNnC6XGV1M=
Subject key identifier:   60:38:3D:5F:65:AD:20:F8:5B:9D:2F:8B:F6:36:D5:79:23:AE:9E:6D
Certificate issuer:       /CN=ECE230A523016A2711501CE158F766961D12E232
Certificate serial:       256D513BC73ED3D06E95BA7845BEF8F7FB6492C6
Authority key identifier: EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NHRI/0/3231312e37362e3136302e302f32302d3234203d3e203138313831.roa
Signing time:             Mon 11 May 2026 17:57:08 +0000
ROA not before:           Mon 11 May 2026 17:52:08 +0000
ROA not after:            Mon 10 May 2027 17:57:08 +0000
asID:                     18181
IP address blocks:        211.76.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6d:51:3b:c7:3e:d3:d0:6e:95:ba:78:45:be:f8:f7:fb:64:92:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECE230A523016A2711501CE158F766961D12E232
        Validity
            Not Before: May 11 17:52:08 2026 GMT
            Not After : May 10 17:57:08 2027 GMT
        Subject: CN=60383D5F65AD20F85B9D2F8BF636D57923AE9E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b4:a1:ca:ee:b8:a8:11:03:e2:52:ae:bb:ef:
                    9c:de:dc:5b:d6:03:ce:62:40:97:b0:f4:d8:d1:c0:
                    af:dc:53:b1:99:c4:be:cc:55:2e:d9:9d:bf:15:7c:
                    d5:ab:f7:fb:4e:b4:5f:46:af:9d:8e:c1:08:87:c8:
                    64:0c:7b:b3:cf:d5:25:17:1c:cc:7b:4b:c9:df:34:
                    f3:59:a7:2b:4d:fb:13:0b:3a:9c:99:2b:01:eb:04:
                    f3:6e:8a:51:84:84:a0:ed:43:ba:fa:c1:26:1d:11:
                    ac:f2:7e:d4:b5:21:a7:c3:9b:53:7a:8e:6d:01:94:
                    e8:5f:ec:03:28:f1:29:0d:f3:8c:bd:27:dc:d9:8b:
                    83:e9:02:e8:f1:c9:c9:31:a2:46:b3:a1:e6:9d:07:
                    f4:f1:9f:4e:6e:18:63:9f:42:96:3e:fe:3d:ed:7c:
                    da:8d:2c:a1:b4:a7:6f:aa:50:91:04:3e:ed:20:bc:
                    67:65:d2:b6:8a:0e:d6:af:eb:6b:4e:27:f4:dc:a3:
                    03:93:8a:bb:43:0a:61:b4:b8:5c:2f:9a:7b:8d:f6:
                    0e:5c:b8:c7:dd:46:8d:b2:b8:58:7c:ee:6b:76:1c:
                    ac:61:c6:43:c5:ca:8f:c5:a0:7c:e7:45:b4:6f:35:
                    4e:27:4c:43:ea:98:4d:35:7c:cf:31:b6:c5:12:e7:
                    9a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:3D:5F:65:AD:20:F8:5B:9D:2F:8B:F6:36:D5:79:23:AE:9E:6D
            X509v3 Authority Key Identifier:
                keyid:EC:E2:30:A5:23:01:6A:27:11:50:1C:E1:58:F7:66:96:1D:12:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/ECE230A523016A2711501CE158F766961D12E232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECE230A523016A2711501CE158F766961D12E232.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NHRI/0/3231312e37362e3136302e302f32302d3234203d3e203138313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:b1:91:47:ed:d9:b3:16:54:30:14:37:2d:65:9a:e2:12:
         56:6a:cf:1e:95:e0:20:73:88:89:ff:42:4b:e0:11:eb:ec:c0:
         0a:1d:d5:d4:df:22:ea:57:25:87:fe:1e:7f:38:90:0a:ad:cf:
         fd:f0:1e:1d:51:c8:f2:93:45:32:32:4d:70:f1:e6:2c:ba:25:
         9f:f5:10:ce:83:c1:2a:1e:db:b9:ba:9a:1d:b1:d0:a4:9f:72:
         61:d4:ee:a0:6a:10:39:0d:67:f0:06:b9:1d:7f:81:87:31:56:
         57:02:8e:85:55:1d:66:bd:f4:a3:47:87:3d:d8:6a:60:4f:15:
         88:72:54:3f:dc:6d:79:d0:fb:c0:8a:76:86:e3:d3:19:ce:26:
         a6:64:82:d5:8a:6f:27:d5:11:21:04:e5:98:3a:02:9c:63:33:
         79:05:c8:aa:e5:2f:37:5b:8c:7a:5c:cc:83:2a:9b:8d:e9:00:
         98:ac:13:8f:20:54:5c:7f:f5:c0:af:22:c6:de:bf:cc:a5:a3:
         48:9a:24:e5:5c:e7:bd:fd:66:e1:64:7f:73:b5:e0:0e:87:54:
         73:e3:58:f6:cd:4e:6f:97:d8:34:97:27:66:22:ad:98:77:84:
         1b:04:1c:5e:c5:f3:a2:f1:a8:1e:dc:f1:be:23:9c:80:1c:97:
         3d:a2:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----