Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa
File:                     3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa (raw, json)
Hash identifier:          q9UjmvJwNAMJDhH+w0KMZQuvWn/uIydpcDzvsEdzi6I=
Subject key identifier:   E1:60:0B:23:12:91:E0:39:97:A5:23:46:11:4E:E4:68:4C:D4:88:25
Certificate issuer:       /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709
Certificate serial:       2F306E19D4396BA83E4C7B5DDE0400C8A31D3440
Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa
Signing time:             Mon 11 May 2026 17:45:01 +0000
ROA not before:           Mon 11 May 2026 17:40:01 +0000
ROA not after:            Mon 10 May 2027 17:45:01 +0000
asID:                     136169
IP address blocks:        165.99.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl
                          rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:30:6e:19:d4:39:6b:a8:3e:4c:7b:5d:de:04:00:c8:a3:1d:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709
        Validity
            Not Before: May 11 17:40:01 2026 GMT
            Not After : May 10 17:45:01 2027 GMT
        Subject: CN=E1600B231291E03997A52346114EE4684CD48825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:01:34:44:be:79:5e:3f:3f:00:59:3d:bd:
                    52:8f:fc:62:44:31:9e:45:f5:ed:28:10:bd:40:17:
                    60:af:89:0f:d2:87:a4:21:82:57:06:cc:92:51:ed:
                    11:07:86:52:c0:4d:c6:4c:0e:3e:29:97:c5:20:cf:
                    a7:a0:ed:5d:7d:f5:fd:bd:38:96:64:28:a9:8c:bf:
                    ee:98:34:c0:05:5e:5b:c8:62:a4:14:2f:6b:95:a5:
                    bf:80:55:c6:47:93:19:8b:cb:1f:f4:be:f1:f5:0f:
                    ff:3b:3d:4d:7e:d8:10:06:c9:f3:9b:f2:ee:f4:ac:
                    d8:5c:5a:0f:ad:29:73:bb:43:6e:f4:a9:45:5d:b3:
                    d5:9a:15:94:d8:d4:d2:b8:8b:96:1d:c2:72:1f:7f:
                    cd:46:7f:ed:da:68:57:f5:65:f6:13:8b:d0:c2:0f:
                    75:9e:f8:67:29:9c:e6:45:f2:c6:14:6a:e3:27:ef:
                    2d:ab:2c:32:2a:3b:62:5f:bb:b8:07:1e:16:0b:98:
                    63:39:1f:4f:05:4d:fc:b6:ae:f1:51:33:1e:2c:97:
                    f9:62:65:d6:09:21:d6:96:a4:98:f2:49:73:90:b1:
                    b4:00:70:f6:be:60:54:57:e8:ee:3f:8c:08:eb:16:
                    11:8a:73:71:1a:e9:26:e2:21:2e:8b:e9:08:83:2c:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:0B:23:12:91:E0:39:97:A5:23:46:11:4E:E4:68:4C:D4:88:25
            X509v3 Authority Key Identifier:
                keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/3136352e39392e3137312e302f32342d3234203d3e20313336313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:0d:c7:91:d3:f1:b9:4d:b8:0a:d7:28:25:62:d4:a0:cb:17:
         c8:78:db:4e:ab:e1:31:41:7c:c9:74:4e:c0:c7:56:68:53:60:
         ca:f9:3b:05:46:c6:9f:88:da:f6:d7:a3:68:33:b1:41:5b:07:
         21:f4:e0:14:21:19:33:50:87:5e:0c:a4:2c:2a:52:ef:e8:98:
         86:a6:51:fc:70:3b:59:c9:db:86:76:b9:6d:c1:42:28:53:70:
         0e:7e:de:8f:66:ad:b9:73:b6:60:2b:cc:92:01:75:dd:c4:80:
         dc:11:48:bf:dc:5b:17:3e:8f:94:ff:c1:e9:59:01:26:25:0e:
         da:da:7c:7d:97:e7:19:ff:d0:e6:ca:b2:78:65:40:5d:12:5d:
         7d:54:10:c1:02:6d:52:c3:c6:d6:39:71:14:d6:8a:20:00:57:
         1b:39:67:bc:13:25:cc:64:2a:64:3d:0b:02:37:1c:c6:20:1b:
         22:25:8c:57:69:29:a4:ed:a7:5d:5c:8b:d5:3f:dc:79:7b:d3:
         99:78:c4:4e:15:f6:d6:a8:00:af:c7:96:a0:8f:89:40:85:0b:
         69:a9:0c:8b:1d:57:7f:31:2c:83:3f:63:5e:3d:20:6d:61:14:
         a1:da:d6:42:99:4c:2e:f8:9e:7d:ae:0b:65:ef:1e:57:f5:6b:
         78:b2:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:08 2026 by rpki-client