Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/3231302e36372e39362e302f32302d3234203d3e2039323434.roa
File:                     3231302e36372e39362e302f32302d3234203d3e2039323434.roa (raw, json)
Hash identifier:          zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=
Subject key identifier:   7D:61:FC:F9:7F:61:56:9D:3B:DE:9B:F8:5B:AC:E6:10:2B:ED:38:64
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       622EA7F0395BDB97A7785B3FACC24BF0341F849E
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/3231302e36372e39362e302f32302d3234203d3e2039323434.roa
Signing time:             Mon 11 May 2026 17:32:36 +0000
ROA not before:           Mon 11 May 2026 17:27:36 +0000
ROA not after:            Mon 10 May 2027 17:32:36 +0000
asID:                     9244
IP address blocks:        210.67.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2e:a7:f0:39:5b:db:97:a7:78:5b:3f:ac:c2:4b:f0:34:1f:84:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 17:27:36 2026 GMT
            Not After : May 10 17:32:36 2027 GMT
        Subject: CN=7D61FCF97F61569D3BDE9BF85BACE6102BED3864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:c4:f3:03:5b:e5:c6:54:8c:83:5b:35:db:
                    c2:fd:f2:84:08:83:73:6f:11:cb:ba:71:6c:14:8a:
                    ef:42:c1:2e:26:d6:c7:69:bc:78:11:72:00:9f:b6:
                    08:2d:bc:e9:75:5e:94:30:22:64:27:2c:2e:ba:19:
                    71:75:19:7a:4b:0f:9c:5c:a4:ed:72:9b:9f:0f:dc:
                    e8:38:48:c5:3e:22:a0:6e:8e:25:aa:46:7a:fe:a0:
                    0c:51:19:91:25:cb:87:1c:0e:f3:c8:c0:13:ff:47:
                    e6:5d:cb:5c:e8:f9:af:e1:7f:22:9a:b6:55:27:8e:
                    e5:39:29:42:1b:95:9e:28:72:48:b0:4f:e4:d0:b2:
                    83:ea:99:a6:0b:af:44:96:20:e2:2e:19:d4:ae:25:
                    e9:b4:65:c0:e7:32:4d:6a:84:7e:53:1b:bd:9f:e1:
                    a6:cc:cb:9b:8e:0d:74:9d:a6:2d:00:d1:8a:f9:8e:
                    1a:dc:52:90:89:85:c8:ba:a7:f0:82:69:37:62:e4:
                    71:44:20:0a:47:f7:4a:f3:2c:18:c8:a4:67:e5:95:
                    5d:2d:26:c6:01:99:bf:b9:b8:0b:52:88:fd:bd:af:
                    89:6b:08:45:ce:a8:99:22:46:42:58:3b:b2:1a:ef:
                    24:ed:78:19:d8:7d:15:d5:86:43:11:40:f9:17:67:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:61:FC:F9:7F:61:56:9D:3B:DE:9B:F8:5B:AC:E6:10:2B:ED:38:64
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/3231302e36372e39362e302f32302d3234203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:5e:82:ce:33:60:dc:68:50:f2:6b:6e:98:e8:92:79:f5:
         e9:70:16:4a:cb:98:f7:1f:1e:39:5a:40:9b:5e:dc:03:26:8f:
         9e:b5:d3:07:08:0b:c4:d2:bd:fb:d6:62:d8:10:de:d0:c0:1f:
         77:e9:e0:12:b0:b2:02:db:03:eb:3a:b7:3a:b1:2c:f7:f3:2e:
         34:dd:3a:26:6f:a7:a1:e4:65:52:9b:65:6f:72:67:03:50:df:
         30:7d:3b:b6:b7:f9:77:73:55:88:00:ec:9b:53:bf:1f:e0:fa:
         4e:e6:de:81:bb:ae:38:31:b8:9b:5a:88:43:9b:7d:6d:b8:02:
         bf:39:2e:ae:d0:e2:72:25:1d:55:19:8b:84:c0:99:4b:c6:0f:
         48:15:d7:5d:2e:51:86:f9:5d:11:73:e8:97:cc:04:8f:93:3e:
         47:50:bf:88:7c:02:7e:d2:2a:62:a0:c7:a3:da:2e:04:40:31:
         d6:3e:5e:13:1a:11:3a:93:6c:64:40:f1:19:03:5a:14:a0:8c:
         14:ff:e9:6d:15:be:80:a1:db:00:21:bc:72:24:a9:72:57:fe:
         7e:2a:09:a7:2f:0d:e8:89:4b:61:48:ce:ae:d2:65:bb:af:f6:
         ea:44:5a:30:73:e0:d2:21:6f:d9:89:4a:15:03:54:f7:ca:3a:
         9a:b6:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:53 2026 by rpki-client