Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36342e302f32302d3230203d3e2039323434.roa
File:                     36312e35362e36342e302f32302d3230203d3e2039323434.roa (raw, json)
Hash identifier:          ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=
Subject key identifier:   22:91:15:5F:CF:BF:22:85:7C:E5:49:D2:6A:D5:94:B4:4E:8C:0B:B5
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       61884621CF0B6605CE2C22C5383BCD8987E2AD8B
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36342e302f32302d3230203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:32 +0000
ROA not before:           Mon 11 May 2026 16:49:32 +0000
ROA not after:            Mon 10 May 2027 16:54:32 +0000
asID:                     9244
IP address blocks:        61.56.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:88:46:21:cf:0b:66:05:ce:2c:22:c5:38:3b:cd:89:87:e2:ad:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:32 2026 GMT
            Not After : May 10 16:54:32 2027 GMT
        Subject: CN=2291155FCFBF22857CE549D26AD594B44E8C0BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:96:55:de:1b:5c:c9:71:a6:76:fe:4c:f0:d7:
                    02:9e:58:3e:d0:0d:bc:27:df:61:6a:3a:a4:5a:2c:
                    47:0e:12:51:4d:b2:a4:85:fc:c5:05:7f:81:3f:66:
                    00:a9:bc:e5:4e:86:f1:e4:03:61:eb:8a:a4:37:e6:
                    13:3b:f6:09:55:0a:ce:d2:5b:a8:ca:1d:9a:40:23:
                    20:f6:95:d8:3f:60:3e:e1:d3:13:f8:7f:c6:b0:a1:
                    c4:f4:a9:5f:46:06:1c:16:f8:ee:48:9a:6f:03:3d:
                    1d:8d:eb:e3:42:66:6d:c1:83:e3:10:a5:bd:09:12:
                    56:4e:e1:82:0f:ee:1c:7f:42:66:e6:c4:23:35:ed:
                    0b:91:3a:ea:ed:62:50:0c:31:9e:72:c2:86:61:2b:
                    69:5e:fe:0f:36:e1:e0:9a:ca:00:96:73:19:fb:49:
                    5c:88:f5:f7:92:74:72:d6:58:d0:ca:d3:7a:26:33:
                    f7:f5:9b:8c:bf:9a:ef:8f:5c:1b:16:76:cf:76:00:
                    a5:e9:28:a9:49:48:04:bb:c5:e8:6c:cc:b4:7e:ef:
                    e1:fd:b0:98:03:0a:9f:14:7a:1a:9f:1a:a7:76:bb:
                    29:22:36:19:df:fe:d4:03:6f:1b:2b:44:9c:4e:d3:
                    69:4b:ee:bd:54:d5:0a:58:02:58:7b:63:ab:00:c6:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:91:15:5F:CF:BF:22:85:7C:E5:49:D2:6A:D5:94:B4:4E:8C:0B:B5
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36342e302f32302d3230203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:11:d3:dc:6a:83:9d:98:3e:d6:d3:7b:6d:4d:0b:ea:47:02:
         89:15:86:f3:25:31:85:9f:71:15:89:80:8a:35:7c:47:20:5b:
         a6:5f:d6:5b:e8:a2:d1:bf:b3:a2:de:b7:81:9b:e5:3f:41:27:
         89:42:44:cd:f2:ce:0b:1b:ec:06:4e:a3:82:3e:2b:a1:f1:12:
         0d:65:0e:33:7e:9e:f5:cb:58:56:bd:c6:50:50:15:49:d4:f5:
         da:fb:5f:51:26:36:22:65:44:11:2b:c9:2c:62:44:8e:43:51:
         7a:21:63:81:81:51:8a:bd:77:ab:34:b4:94:4f:60:41:d7:c1:
         74:bf:96:9a:c8:30:02:29:cf:89:59:f2:e4:de:c7:26:fe:12:
         68:c3:b9:d3:c7:2e:66:12:e9:5c:35:00:4a:75:57:7c:21:c8:
         ab:c0:b1:52:1b:a9:49:06:52:3b:80:14:1e:90:44:a0:45:08:
         a8:08:23:10:ab:19:97:4e:7b:eb:41:c6:1a:f1:c8:58:14:4d:
         38:4e:a5:3e:0c:22:96:80:be:87:09:d6:7a:ac:b8:1f:0e:5c:
         b2:37:14:21:f3:31:0a:3f:7a:26:e6:78:95:e4:45:a4:fc:4f:
         c5:69:a0:cf:fe:cc:cf:85:6b:10:ee:ed:e1:20:f8:e6:49:2c:
         da:9c:81:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:55 2026 by rpki-client