Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136302e302f32312d3231203d3e2039323434.roa
File:                     36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (raw, json)
Hash identifier:          nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=
Subject key identifier:   B9:17:A4:82:76:CD:4C:DB:AB:0F:DF:64:06:50:CB:8A:5D:6F:64:9B
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       5CD4B1AB31C656DB532C22F6CCB6FD7D81E3507C
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136302e302f32312d3231203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:38 +0000
ROA not before:           Mon 11 May 2026 16:49:38 +0000
ROA not after:            Mon 10 May 2027 16:54:38 +0000
asID:                     9244
IP address blocks:        61.247.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d4:b1:ab:31:c6:56:db:53:2c:22:f6:cc:b6:fd:7d:81:e3:50:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:38 2026 GMT
            Not After : May 10 16:54:38 2027 GMT
        Subject: CN=B917A48276CD4CDBAB0FDF640650CB8A5D6F649B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:c0:90:fa:2a:b9:cf:0a:d2:ce:9a:f3:86:
                    4c:df:b7:d6:0d:c1:d7:70:aa:78:ae:be:0b:fe:33:
                    fa:7c:e2:03:6e:ac:22:ba:b3:d6:b1:08:f1:9a:2a:
                    f8:3c:33:c6:89:02:6d:2a:ec:8c:f8:ed:10:b3:88:
                    84:ff:04:c1:50:52:c8:b9:f3:c1:2a:ff:25:eb:ca:
                    13:e4:62:6a:d4:58:c1:82:4b:e4:cd:5f:03:e3:2f:
                    10:25:5f:26:e2:6b:08:f9:93:68:72:44:01:46:4b:
                    ab:02:a2:d2:17:bc:93:b4:94:02:e7:f2:38:25:76:
                    07:0a:50:9e:ab:75:6f:04:7b:75:6f:26:e1:69:6d:
                    a5:4c:dd:97:e6:fe:c8:d6:6d:1f:be:bb:23:81:f2:
                    00:1a:2f:56:36:b8:0c:c0:26:82:ee:75:b2:94:63:
                    50:62:dc:9b:d1:bd:0d:84:ac:c3:3d:6d:50:51:43:
                    4f:2d:f7:b1:e5:4e:63:96:0c:45:b1:85:1a:09:93:
                    04:6a:62:38:23:7d:36:cc:0d:57:6c:0a:91:29:dd:
                    11:fb:6e:4c:a1:de:52:cc:af:d2:60:83:70:d6:0d:
                    f7:05:da:b3:17:11:03:57:83:1b:d2:70:00:82:c2:
                    5f:8e:ce:8d:63:ea:8e:04:48:e2:31:69:fb:54:7d:
                    13:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:17:A4:82:76:CD:4C:DB:AB:0F:DF:64:06:50:CB:8A:5D:6F:64:9B
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e3234372e3136302e302f32312d3231203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:59:5e:43:86:de:18:8e:7c:98:3f:fb:a8:98:15:60:26:
         b8:24:8e:ab:1f:f3:f4:6e:f2:d6:a2:04:43:d2:51:40:05:8d:
         1b:41:a9:3c:4e:7d:d0:90:c1:4a:e2:3e:ae:5b:29:53:3e:23:
         2b:dd:3c:71:d3:1f:d3:2b:5d:d2:b2:ec:42:a7:d1:33:4c:35:
         3c:06:1f:f2:7d:a5:e2:67:0e:c4:d0:09:9b:e5:ac:cb:6b:89:
         ba:c5:32:fa:b9:4d:35:e4:fc:b8:aa:9a:43:31:e0:ab:06:eb:
         a1:89:be:5b:d6:39:db:2c:59:b7:59:a2:b0:4e:fa:93:82:cd:
         ea:84:94:2d:f1:b8:e9:4c:75:50:38:80:8c:5c:cd:13:50:1d:
         b7:11:a9:4e:f9:8e:6f:fe:f4:96:b7:a8:7b:56:63:29:d1:f4:
         9b:5c:49:30:86:94:35:48:bb:48:ba:28:40:2e:a8:20:7f:9b:
         80:b2:3e:a0:a6:e6:47:3e:c8:f2:c1:cb:3a:36:3f:01:a7:1c:
         b2:9a:7a:0a:2c:e5:09:bb:55:fb:33:06:44:8a:81:c9:62:1e:
         0d:61:f2:a4:5f:59:57:1b:22:2d:a3:32:4e:65:80:dd:93:6d:
         f9:02:c5:8c:ad:6a:4f:af:8e:24:cd:0f:4e:13:94:a9:a9:d3:
         4c:6d:44:52
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUXNSxqzHGVttTLCL2zLb9fYHjUHwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA1MTExNjQ5MzhaFw0yNzA1MTAxNjU0MzhaMDMxMTAvBgNV
BAMTKEI5MTdBNDgyNzZDRDRDREJBQjBGREY2NDA2NTBDQjhBNUQ2RjY0OUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRtcCQ+iq5zwrSzprzhkzft9YN
wddwqniuvgv+M/p84gNurCK6s9axCPGaKvg8M8aJAm0q7Iz47RCziIT/BMFQUsi5
88Eq/yXryhPkYmrUWMGCS+TNXwPjLxAlXybiawj5k2hyRAFGS6sCotIXvJO0lALn
8jgldgcKUJ6rdW8Ee3VvJuFpbaVM3Zfm/sjWbR++uyOB8gAaL1Y2uAzAJoLudbKU
Y1Bi3JvRvQ2ErMM9bVBRQ08t97HlTmOWDEWxhRoJkwRqYjgjfTbMDVdsCpEp3RH7
bkyh3lLMr9Jgg3DWDfcF2rMXEQNXgxvScACCwl+Ozo1j6o4ESOIxaftUfRMXAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUuRekgnbNTNurD99kBlDLil1vZJswHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMzYzMTJlMzIzNDM3
MmUzMTM2MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzOTMyMzQzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAz33oDANBgkqhkiG9w0BAQsFAAOCAQEAi9hZXkOG3hiOfJg/+6iYFWAmuCSO
qx/z9G7y1qIEQ9JRQAWNG0GpPE590JDBSuI+rlspUz4jK908cdMf0ytd0rLsQqfR
M0w1PAYf8n2l4mcOxNAJm+Wsy2uJusUy+rlNNeT8uKqaQzHgqwbroYm+W9Y52yxZ
t1misE76k4LN6oSULfG46Ux1UDiAjFzNE1AdtxGpTvmOb/70lreoe1ZjKdH0m1xJ
MIaUNUi7SLooQC6oIH+bgLI+oKbmRz7I8sHLOjY/Aaccspp6CizlCbtV+zMGRIqB
yWIeDWHypF9ZVxsiLaMyTmWA3ZNt+QLFjK1qT6+OJM0PThOUqanTTG1EUg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:49 2026 by rpki-client