Route Origin Authorization

$ rpki-client -vvf rpki.august.tw/repo/HYSP/0/323630323a666332333a3136303a3a2f34342d3438203d3e20323033383939.roa
File:                     323630323a666332333a3136303a3a2f34342d3438203d3e20323033383939.roa (raw, json)
Hash identifier:          CyKP/WU1jBudZMmSJBSx7V0F7KMiJN+d/2qXm6B3b+U=
Subject key identifier:   26:A2:F1:39:34:7A:7A:AA:D1:49:EE:A5:1E:D1:EB:A8:31:77:4E:AF
Certificate issuer:       /CN=6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de
Certificate serial:       12AFD416AA07EB8D993759EB27A92489099C7E3D
Authority key identifier: 18:DA:FE:16:77:1B:DA:7D:2E:6B:D2:8A:A7:0B:9A:40:CE:71:D5:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de.cer
Subject info access:      rsync://rpki.august.tw/repo/HYSP/0/323630323a666332333a3136303a3a2f34342d3438203d3e20323033383939.roa
Signing time:             Tue 10 Jan 2023 17:48:01 +0000
ROA not before:           Tue 10 Jan 2023 17:43:01 +0000
ROA not after:            Tue 09 Jan 2024 17:48:01 +0000
asID:                     203899
IP address blocks:        2602:fc23:160::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:af:d4:16:aa:07:eb:8d:99:37:59:eb:27:a9:24:89:09:9c:7e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de
        Validity
            Not Before: Jan 10 17:43:01 2023 GMT
            Not After : Jan  9 17:48:01 2024 GMT
        Subject: CN=26A2F139347A7AAAD149EEA51ED1EBA831774EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:d2:fe:4c:58:7d:89:da:30:b0:8f:f1:f4:
                    ff:c4:ed:b4:a5:9c:b2:e7:a7:66:82:54:ed:de:20:
                    82:a8:00:07:68:c6:fe:3b:d9:6a:f9:38:70:78:c1:
                    9b:b2:07:d7:b9:76:7b:7f:e7:65:03:f1:87:a4:dd:
                    d0:e1:a9:cc:3e:d0:93:d3:9d:70:28:f8:bd:d2:ba:
                    f8:40:52:69:a1:5b:06:62:62:ed:2b:ab:d8:29:2b:
                    98:a4:6e:ad:1d:12:a4:b2:42:ba:b0:9c:a6:0a:fe:
                    80:92:6a:f3:fe:74:91:a4:79:18:59:84:06:80:a5:
                    30:5a:ff:68:06:9a:fa:85:29:6e:45:f0:44:09:e6:
                    6b:36:7f:05:33:5d:dd:16:18:56:33:4f:0c:37:8f:
                    22:13:38:02:50:03:bd:e0:92:31:e2:b1:4f:ac:c1:
                    58:c4:34:29:78:a4:bc:70:fa:c9:13:f2:1b:92:34:
                    e8:d4:62:57:80:ae:76:aa:40:d7:6e:27:5e:20:7f:
                    a4:ba:a4:d5:a5:25:b8:a6:4f:2f:9b:eb:0b:37:07:
                    3b:5b:cb:d3:c9:3b:e8:15:33:39:9d:e8:ad:ed:dc:
                    8c:2c:32:b4:03:90:70:3f:96:aa:e1:44:92:2c:5e:
                    a0:50:82:2c:c9:4d:f7:ea:a8:20:21:37:aa:69:4c:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A2:F1:39:34:7A:7A:AA:D1:49:EE:A5:1E:D1:EB:A8:31:77:4E:AF
            X509v3 Authority Key Identifier:
                keyid:18:DA:FE:16:77:1B:DA:7D:2E:6B:D2:8A:A7:0B:9A:40:CE:71:D5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.august.tw/repo/HYSP/0/18DAFE16771BDA7D2E6BD28AA70B9A40CE71D50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed00c6bd26c2aaa062a69b2946ea9ff517ae5bf34de.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.august.tw/repo/HYSP/0/323630323a666332333a3136303a3a2f34342d3438203d3e20323033383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:30:90:1b:09:d6:80:a0:23:3e:23:86:0c:47:33:08:bf:
         67:b1:bb:86:23:1c:27:a9:d1:15:07:ad:34:56:c4:a4:e1:c6:
         82:5c:fa:d8:47:0f:0e:90:4c:f2:e9:3e:bd:0a:19:d2:72:c8:
         fb:af:97:c3:21:9f:ec:15:07:ae:33:0d:fb:c4:d1:72:02:71:
         4b:e2:98:ac:f4:a2:ac:0f:d5:40:36:4c:08:fc:b6:43:f5:9a:
         96:64:05:e2:2b:8d:6b:78:c4:76:f4:19:70:3f:47:01:ec:20:
         f4:ed:0c:1c:a0:28:be:0e:fe:a4:fd:c7:87:55:4b:c3:c7:2c:
         ea:75:58:98:13:22:54:cc:c3:f4:d7:02:4c:35:3e:cd:4e:07:
         a1:4d:d5:b2:59:98:62:8a:a2:fd:1b:1d:29:b1:61:6e:5f:40:
         4c:c1:80:1e:9e:a5:e7:f3:44:5d:22:16:bf:ad:2c:fa:d3:9d:
         a7:f6:73:df:9b:58:b4:2d:48:89:b2:a0:ec:13:f5:b8:cf:e8:
         80:2d:79:84:9f:d8:28:9c:2b:2a:88:c9:84:5c:41:e6:45:16:
         06:62:53:36:42:5d:b3:59:dd:07:a3:49:ed:58:27:88:ca:36:
         b0:4d:75:ed:2a:68:c6:35:bf:9c:93:2c:92:33:52:6e:5d:06:
         d9:8e:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:48:44 2025 by rpki-client