Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NUNLINE/0/3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa
File:                     3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (raw, json)
Hash identifier:          YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=
Subject key identifier:   48:F1:98:34:96:F8:30:99:F1:D5:B5:F8:8D:C1:02:03:E7:CE:7A:F4
Certificate issuer:       /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial:       5B765A5B2D9B40BF846D4FE106F108B00D600F63
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NUNLINE/0/3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa
Signing time:             Mon 11 May 2026 17:32:39 +0000
ROA not before:           Mon 11 May 2026 17:27:39 +0000
ROA not after:            Mon 10 May 2027 17:32:39 +0000
asID:                     150755
IP address blocks:        203.175.104.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:76:5a:5b:2d:9b:40:bf:84:6d:4f:e1:06:f1:08:b0:0d:60:0f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
        Validity
            Not Before: May 11 17:27:39 2026 GMT
            Not After : May 10 17:32:39 2027 GMT
        Subject: CN=48F1983496F83099F1D5B5F88DC10203E7CE7AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:aa:e5:c3:ca:c4:1c:57:5f:57:94:65:6f:
                    0b:87:bb:5f:54:02:e0:76:03:cb:40:72:a5:48:b5:
                    4e:ef:d8:f3:e4:94:d8:33:d4:9c:ea:85:76:15:26:
                    a9:93:6e:7e:f1:3a:50:4a:06:39:5e:9d:e1:65:43:
                    80:9b:1a:3e:7d:04:6b:a7:2f:09:61:68:d9:02:6b:
                    fd:7b:58:47:47:bd:f2:f3:4d:f0:93:0b:20:5f:15:
                    5c:03:a2:4b:d9:21:25:ea:6b:c1:b0:ee:c6:82:88:
                    fb:66:f0:fb:04:c0:1c:9b:f2:86:37:f6:0e:73:26:
                    71:f3:bc:52:bb:2f:9c:5b:93:35:37:90:d2:c7:a2:
                    c9:6c:ad:05:03:36:52:db:6c:9a:5c:bd:af:23:b0:
                    09:a4:75:fa:58:4f:97:9c:89:d6:ab:d0:b7:ab:61:
                    45:70:1c:57:2c:08:68:e8:21:70:25:11:16:86:12:
                    a1:94:85:94:7a:18:3e:5a:e1:82:7a:32:ca:91:ea:
                    44:ef:c2:6d:99:b1:60:91:08:6d:3b:58:e5:0b:cf:
                    a7:91:e3:3f:dc:79:b3:84:a2:2b:53:79:3b:ee:e6:
                    1a:9b:02:cd:9d:e4:9b:0b:7e:ac:1a:8e:80:30:63:
                    30:30:17:dd:fc:0b:0c:2e:47:b3:b9:69:35:49:ed:
                    17:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F1:98:34:96:F8:30:99:F1:D5:B5:F8:8D:C1:02:03:E7:CE:7A:F4
            X509v3 Authority Key Identifier:
                keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ae:fa:e9:ca:80:b3:d5:27:42:07:5b:61:e8:6e:23:d0:5d:
         9e:06:53:32:92:91:bd:94:25:97:e4:64:b0:85:9e:cf:75:37:
         28:82:4f:91:41:47:bd:92:8c:38:86:f6:7b:42:b7:eb:d0:f1:
         4a:43:85:d6:42:1c:19:d8:5f:95:c7:37:bc:03:a9:48:01:c5:
         89:32:46:f0:e0:b8:e4:c2:22:8a:55:10:78:8a:1d:f6:ba:d2:
         b6:06:d8:22:ca:68:25:07:f2:82:c3:26:07:97:0f:53:aa:37:
         d3:1f:72:c9:c8:03:d8:b6:10:f5:4b:96:bc:03:5b:1e:07:dd:
         6d:3a:83:d7:83:2b:e3:fb:1e:bd:3e:53:d7:5e:87:0e:4f:fb:
         50:dc:57:2b:7e:02:ea:9d:c1:e0:1f:1e:3d:06:0b:dd:f2:dc:
         4a:44:8c:20:08:89:7e:a9:24:a0:53:fc:f7:78:8a:f4:06:14:
         1e:5c:8a:53:32:48:58:fd:1c:a3:91:0e:ca:21:13:af:1c:30:
         9d:cb:0c:84:a3:2f:b0:f1:00:ce:f0:3d:33:ec:f5:c8:be:2c:
         de:5b:9a:cc:e1:d7:95:f8:6d:6b:15:ac:a3:46:5b:1d:14:01:
         74:cb:fa:64:ab:10:cc:d0:13:aa:11:0e:78:dd:fb:58:65:c4:
         80:70:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:38 2026 by rpki-client