Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36352e302f32342d3234203d3e2039323434.roa
File:                     36312e35362e36352e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier:          58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=
Subject key identifier:   03:F2:64:75:A2:87:A2:CA:15:39:D5:D9:13:9F:32:02:97:06:D5:AB
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       35C68F1B69D91F008F02687B7662939583DC1264
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36352e302f32342d3234203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:34 +0000
ROA not before:           Mon 11 May 2026 16:49:34 +0000
ROA not after:            Mon 10 May 2027 16:54:34 +0000
asID:                     9244
IP address blocks:        61.56.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c6:8f:1b:69:d9:1f:00:8f:02:68:7b:76:62:93:95:83:dc:12:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:34 2026 GMT
            Not After : May 10 16:54:34 2027 GMT
        Subject: CN=03F26475A287A2CA1539D5D9139F32029706D5AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:fd:3e:05:98:b3:da:e0:0d:c8:66:85:53:
                    40:36:5e:07:9f:12:92:2e:fb:cc:18:b5:e2:23:6b:
                    73:9a:32:43:34:24:ac:19:39:32:17:ce:79:f0:36:
                    4f:9c:28:fe:5c:56:ae:c1:f5:59:e8:0c:1e:02:44:
                    ef:08:f6:37:65:ec:5d:94:77:9c:33:b5:2c:ff:17:
                    2b:23:f6:93:f5:13:59:8c:fc:cb:7c:a9:32:b0:0c:
                    1d:c5:7c:b3:da:2a:21:6c:29:f5:cc:3a:b4:7e:a5:
                    dd:03:3f:43:81:69:12:58:57:05:40:a2:ca:39:93:
                    03:ac:5d:85:be:21:93:7b:a7:10:44:4f:9d:0b:0a:
                    a7:b1:f1:99:94:b8:89:3b:e5:1f:7a:75:2c:50:48:
                    db:7a:7b:2e:ae:a3:51:3e:6a:b8:9f:65:cc:9b:1b:
                    2a:d8:87:62:3d:ba:9b:bd:fd:0e:53:63:5c:3e:cf:
                    69:50:4d:7a:f9:34:aa:f8:17:ac:98:7e:94:1d:29:
                    4f:04:e2:96:9b:77:d7:3e:f5:1e:1b:23:d4:dc:94:
                    e0:db:85:70:b4:fc:6c:85:08:fa:f7:ba:4b:d1:c3:
                    89:cc:53:d2:f0:1f:fa:bf:66:e6:7b:b0:8e:9d:1c:
                    6e:df:7b:55:cf:0d:6e:cc:b4:d4:05:79:8e:f5:44:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F2:64:75:A2:87:A2:CA:15:39:D5:D9:13:9F:32:02:97:06:D5:AB
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36352e302f32342d3234203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:40:41:14:1b:82:da:b0:b5:40:5c:9f:d4:99:d5:fc:6b:65:
         37:f9:f5:4f:ec:2c:6f:ed:56:f2:ae:cd:33:62:33:cc:8a:5c:
         06:24:ef:f0:4a:8b:7b:c0:4e:00:2a:0e:15:85:0d:ba:4d:8f:
         f3:fd:55:dc:eb:dc:72:a2:85:68:86:b2:cf:4b:7c:2d:6d:2f:
         7f:bd:81:94:db:e6:fb:09:a3:1e:02:8a:e0:cc:8d:6e:c4:2c:
         c9:eb:dc:56:eb:2b:97:82:6c:bb:03:23:44:72:95:c7:55:37:
         b5:94:44:b7:23:fb:c7:49:0c:87:be:00:70:93:26:1d:8e:3a:
         22:3d:c9:36:aa:eb:20:d2:4d:5d:e9:09:f4:85:21:30:23:18:
         24:41:71:d5:ff:74:e8:94:a3:e3:65:2e:c5:28:6a:cd:2a:66:
         0b:92:86:84:9f:ea:48:9a:4d:07:4d:5a:48:a2:b5:8b:50:a5:
         90:41:41:2f:1e:df:08:f2:28:65:a3:0a:45:ff:6a:d2:d4:81:
         40:6a:c2:fb:d1:70:30:c3:4d:d9:57:89:f8:e8:da:f9:f1:0b:
         6f:28:e5:ca:b0:ba:6c:c5:80:76:24:ac:27:ac:e4:cc:51:30:
         0a:70:4e:f9:39:7b:86:93:33:4a:e9:05:70:be:d4:47:15:ac:
         b1:fe:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:53 2026 by rpki-client