Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDNODE/0/3232332e32362e31302e302f32332d3234203d3e2037353338.roa
File:                     3232332e32362e31302e302f32332d3234203d3e2037353338.roa (raw, json)
Hash identifier:          WltkBuqhKCJsRwS/4iiBwpBsyVQ3CFzN130wVvwvOIg=
Subject key identifier:   CD:4B:18:6C:DD:C7:BB:EB:7E:4E:81:14:53:BA:18:FF:72:D3:7A:61
Certificate issuer:       /CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
Certificate serial:       6310D0FDB4B554CCDB5E9745FD5ABF4A87247254
Authority key identifier: E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/3232332e32362e31302e302f32332d3234203d3e2037353338.roa
Signing time:             Tue 07 Jul 2026 09:23:48 +0000
ROA not before:           Tue 07 Jul 2026 09:18:48 +0000
ROA not after:            Tue 06 Jul 2027 09:23:48 +0000
asID:                     7538
IP address blocks:        223.26.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:10:d0:fd:b4:b5:54:cc:db:5e:97:45:fd:5a:bf:4a:87:24:72:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB
        Validity
            Not Before: Jul  7 09:18:48 2026 GMT
            Not After : Jul  6 09:23:48 2027 GMT
        Subject: CN=CD4B186CDDC7BBEB7E4E811453BA18FF72D37A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:b4:10:e0:be:cb:26:93:e7:30:01:9c:7d:
                    ba:3e:b8:b6:b6:d0:c4:03:30:af:27:9a:b8:5b:30:
                    b2:5c:51:59:0b:76:f4:67:83:8e:d9:3c:66:01:f0:
                    6c:46:07:14:94:07:60:d3:8a:16:2b:35:1f:c5:b4:
                    f0:4a:f4:3c:c1:4f:e1:26:f9:79:fe:c4:d5:bd:33:
                    73:90:ca:5c:11:ec:1e:96:ab:14:89:bf:33:d2:f3:
                    7d:79:39:02:76:ab:7c:fc:e3:a3:f9:b9:ec:bb:fa:
                    93:cd:1d:30:99:e5:d7:80:87:bb:a7:f2:d1:a1:77:
                    74:9e:c3:cc:7d:db:81:b9:91:3f:3b:2d:43:3f:4f:
                    a9:49:8d:bf:d6:02:5a:6b:b4:ba:db:28:f0:13:ec:
                    77:1f:ac:22:3b:05:c6:f6:0d:97:57:8c:cd:53:7b:
                    02:5c:78:b6:d6:ba:7c:1b:18:31:fd:93:65:b6:27:
                    1a:5f:a4:10:36:9f:94:c9:cf:1e:18:4a:0c:67:62:
                    f8:a8:9e:fd:d2:f1:ba:be:18:52:1e:cb:91:86:7f:
                    86:69:2a:44:62:10:c7:ff:01:5c:25:88:e1:b5:69:
                    43:27:ad:42:10:7a:1c:30:0e:08:19:79:53:d7:a8:
                    28:fc:dd:84:c0:02:fb:e6:d4:90:d0:bc:cb:71:17:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4B:18:6C:DD:C7:BB:EB:7E:4E:81:14:53:BA:18:FF:72:D3:7A:61
            X509v3 Authority Key Identifier:
                keyid:E3:82:3D:FE:A2:1F:EF:04:E3:26:9E:B9:AC:C3:BD:AC:1E:38:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E3823DFEA21FEF04E3269EB9ACC3BDAC1E387ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDNODE/0/3232332e32362e31302e302f32332d3234203d3e2037353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.26.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:99:26:eb:6d:dc:86:c0:88:d0:2c:2e:bc:30:fa:cb:77:
         e3:e7:f6:41:e0:81:38:19:9c:61:19:a1:d3:96:c9:3c:31:07:
         a3:fc:81:8b:af:36:a7:dc:3f:dd:47:66:6a:eb:d9:68:ed:f3:
         36:2b:51:70:dd:33:ef:1a:f3:5f:9b:73:e5:e8:0c:b1:e6:35:
         b9:bc:9c:62:00:cc:6e:da:f4:db:85:b2:c0:c1:19:86:5a:b5:
         25:60:5f:71:5e:da:ae:25:21:7f:ca:8e:b5:b3:08:a4:b1:27:
         f5:94:7a:40:e3:60:d3:68:e7:bb:ee:ac:57:e0:3e:e6:5a:c1:
         7b:6e:44:35:fd:b5:ac:bd:bf:dd:eb:c1:65:65:22:47:90:0d:
         0e:0b:de:bf:59:26:a3:2d:c6:3b:fd:da:61:49:49:33:16:97:
         ca:2c:07:87:a9:f7:bd:a3:a3:d6:c4:ad:45:68:8a:4c:ad:22:
         6b:ec:0e:6d:2c:5f:06:ea:0c:af:61:4b:a8:f9:47:7e:70:f2:
         fa:df:e9:b9:56:ea:f0:21:0d:70:c4:08:85:90:a3:45:46:6c:
         40:c7:37:6c:e8:07:a0:c7:de:c4:2d:ec:9d:c0:ad:a8:ff:9e:
         33:0b:8b:ac:2c:59:ea:d4:0b:21:b7:f2:fc:fc:d0:a3:69:e4:
         77:3f:39:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:10:44 2026 by rpki-client