Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa
File:                     3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (raw, json)
Hash identifier:          /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=
Subject key identifier:   FD:61:88:CF:21:17:4B:D9:87:67:8A:93:D8:11:03:52:86:69:71:EF
Certificate issuer:       /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial:       50E933EA9758E38C928526483E9538F9AD37CE9A
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa
Signing time:             Mon 11 May 2026 17:40:38 +0000
ROA not before:           Mon 11 May 2026 17:35:38 +0000
ROA not after:            Mon 10 May 2027 17:40:38 +0000
asID:                     31972
IP address blocks:        202.148.212.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e9:33:ea:97:58:e3:8c:92:85:26:48:3e:95:38:f9:ad:37:ce:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
        Validity
            Not Before: May 11 17:35:38 2026 GMT
            Not After : May 10 17:40:38 2027 GMT
        Subject: CN=FD6188CF21174BD987678A93D8110352866971EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:53:61:9b:80:2f:24:07:4a:20:b1:a2:b3:77:
                    fb:85:db:85:1f:ee:c9:d5:9b:c3:ad:07:9c:bb:30:
                    30:6b:52:22:02:06:58:0a:80:e9:3b:5f:b3:bb:49:
                    02:81:5f:db:97:a5:f2:c4:34:05:73:62:c5:6b:6e:
                    9a:92:9d:9d:57:55:02:e2:78:a7:24:21:62:50:db:
                    eb:0c:ac:f9:66:de:5f:3c:05:a9:35:ff:d0:e1:ce:
                    4c:bb:05:7b:c5:0a:2c:bb:7c:ba:e5:39:ea:28:24:
                    e8:81:3a:d6:f1:3e:06:8f:9a:36:cd:db:9d:4a:e4:
                    73:66:b6:ec:b0:4d:8d:94:a7:08:cf:36:aa:64:6c:
                    57:46:9e:64:ca:23:6e:f2:8b:32:74:42:3a:c3:24:
                    5e:46:d5:b4:04:04:53:a1:51:c7:ae:18:bc:af:6a:
                    6b:92:ea:18:2b:0c:93:46:1a:59:65:15:c2:7f:f9:
                    04:e4:53:79:dd:8e:e8:29:87:17:ec:e8:5e:61:e8:
                    5f:02:05:11:96:b4:05:2e:ea:28:be:d0:bd:82:7e:
                    25:d2:07:8e:d8:58:1d:33:d8:9f:b6:22:39:b3:57:
                    72:0f:7d:ff:ad:2d:8b:5c:8f:f9:62:6a:c2:66:a8:
                    f0:08:b9:85:c0:6d:a1:c0:69:90:65:9c:ce:c3:1b:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:61:88:CF:21:17:4B:D9:87:67:8A:93:D8:11:03:52:86:69:71:EF
            X509v3 Authority Key Identifier:
                keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:85:51:49:5d:29:5b:a0:04:f8:ec:f5:ce:4f:c8:0e:a1:
         40:27:d4:ba:ba:77:ad:4d:00:40:f2:cf:7f:1c:8b:cd:5b:a2:
         1b:b3:39:6d:48:ae:45:ba:b0:5d:98:a0:b8:e9:c0:42:c9:96:
         e3:cf:f9:8e:26:a7:f1:ba:f1:fd:82:e3:12:0d:07:bc:8d:ac:
         ce:3c:44:54:50:00:19:86:6b:62:36:13:d2:75:3a:f5:5a:7d:
         f0:70:b9:c0:2c:9e:a9:3f:40:60:46:8b:8a:d3:c0:62:bd:3e:
         bf:37:8d:db:9e:56:68:21:79:6c:80:19:d6:42:31:af:91:51:
         c2:2b:db:64:40:6a:e6:f8:c5:ca:9b:45:8a:10:6d:83:d2:ae:
         86:3d:de:07:19:99:35:42:09:c3:f6:88:d5:21:f3:39:bb:53:
         62:d9:88:5e:df:81:6b:67:f5:ee:a4:46:1d:bf:a9:a3:df:31:
         66:a9:e1:01:46:08:90:02:5f:86:e4:4a:e9:fc:55:37:f3:e1:
         c6:a6:ad:60:6f:77:54:0c:4e:d6:88:c9:e2:fa:37:76:eb:b9:
         b8:c9:88:d6:ee:89:91:03:0a:ce:09:93:14:79:d8:71:a2:f5:
         c8:ae:63:81:cb:8e:24:86:b2:26:f2:68:5a:09:81:71:78:e1:
         ae:60:11:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:13 2026 by rpki-client