Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38302e302f32302d3230203d3e2039323434.roa
File:                     36312e35362e38302e302f32302d3230203d3e2039323434.roa (raw, json)
Hash identifier:          fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=
Subject key identifier:   BC:42:63:AA:D4:93:00:BE:28:53:F5:B6:AA:A7:FC:60:CF:15:A5:4A
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       5EABDCEEE9A853B5A280F6752756F141EB4AE695
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38302e302f32302d3230203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:33 +0000
ROA not before:           Mon 11 May 2026 16:49:33 +0000
ROA not after:            Mon 10 May 2027 16:54:33 +0000
asID:                     9244
IP address blocks:        61.56.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ab:dc:ee:e9:a8:53:b5:a2:80:f6:75:27:56:f1:41:eb:4a:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:33 2026 GMT
            Not After : May 10 16:54:33 2027 GMT
        Subject: CN=BC4263AAD49300BE2853F5B6AAA7FC60CF15A54A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:66:08:c1:1c:e5:80:bc:4b:ee:90:ad:32:7d:
                    7d:dd:f3:db:57:62:46:f7:68:64:26:ed:bd:58:9f:
                    50:28:6e:6b:ad:9a:17:d4:ac:39:8e:e3:e7:d1:0e:
                    bf:33:48:b3:15:20:e4:88:30:3f:93:3e:40:cc:bb:
                    0d:d9:89:96:87:43:b2:ad:65:7e:c1:39:57:17:57:
                    80:ce:13:8a:28:68:96:12:b5:86:27:67:ce:3f:4b:
                    01:50:93:eb:fe:67:5c:90:12:68:c1:15:b1:dc:ae:
                    03:8f:6d:9e:80:ac:ab:1f:93:ff:ce:ea:b8:7f:45:
                    63:3e:5e:98:cd:61:a1:52:61:67:e6:7b:4d:db:e9:
                    7f:f5:a9:f3:3f:71:e1:45:e5:f9:c6:23:95:00:a2:
                    ab:81:3e:11:5d:6f:e5:2f:6b:fb:39:65:8a:03:ee:
                    d5:6f:00:2b:09:12:3f:60:b2:e8:cd:0b:cc:ca:74:
                    97:21:8e:80:ec:6e:21:2f:94:ee:e2:8f:da:ca:44:
                    c0:a7:e9:92:17:88:bd:78:d4:59:c4:76:2d:3e:7e:
                    b2:e3:ea:7a:0b:8e:7c:a7:d0:4a:fe:6f:4d:e1:4f:
                    6f:dc:60:b2:dc:7e:da:d6:71:70:04:8a:2d:4b:19:
                    49:f0:88:2d:1c:c4:12:60:90:7c:06:01:21:ae:30:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:42:63:AA:D4:93:00:BE:28:53:F5:B6:AA:A7:FC:60:CF:15:A5:4A
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38302e302f32302d3230203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:75:91:ad:30:3f:9b:4c:af:c5:31:3e:4c:47:ce:44:cb:cc:
         af:04:5c:40:a1:51:48:5c:b8:7e:69:80:da:7f:d4:df:f3:c2:
         54:31:55:b1:c7:ea:5a:d8:72:9b:53:9f:1b:1a:52:b9:09:c4:
         0f:c8:e4:0e:b0:2a:82:17:f4:1b:fe:4a:1c:bc:72:5b:1f:34:
         92:ed:a5:e1:1c:4b:b5:b5:f1:c3:05:da:3d:53:26:cc:c6:fc:
         f1:98:93:04:a4:87:02:57:b2:93:3c:31:9c:a5:f6:5a:c3:0e:
         cf:5f:0d:62:ab:0a:11:81:59:21:c1:96:67:06:e5:75:6c:6b:
         bc:56:12:3e:65:f2:17:91:d7:6c:6a:30:de:0b:38:42:be:90:
         e9:78:6b:e1:53:7f:ff:f1:82:48:9d:3a:83:89:3b:c7:b5:3c:
         b9:8c:b4:b4:5e:e8:b1:00:c0:60:64:20:a4:c8:6a:65:ff:91:
         e4:8d:d7:ff:d1:a4:a7:43:30:b6:6f:8b:48:58:3a:65:81:d5:
         12:44:ba:75:9f:5f:9d:fe:77:ef:30:3b:41:55:32:95:ca:17:
         a0:1d:d0:2f:1b:ec:c6:a5:68:1e:1e:d0:cb:4f:d2:df:75:01:
         72:57:11:fc:59:0b:23:15:2d:66:72:68:b3:03:e8:ef:23:6e:
         00:bb:53:ff
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUXqvc7umoU7WigPZ1J1bxQetK5pUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA1MTExNjQ5MzNaFw0yNzA1MTAxNjU0MzNaMDMxMTAvBgNV
BAMTKEJDNDI2M0FBRDQ5MzAwQkUyODUzRjVCNkFBQTdGQzYwQ0YxNUE1NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZgjBHOWAvEvukK0yfX3d89tX
Ykb3aGQm7b1Yn1AobmutmhfUrDmO4+fRDr8zSLMVIOSIMD+TPkDMuw3ZiZaHQ7Kt
ZX7BOVcXV4DOE4ooaJYStYYnZ84/SwFQk+v+Z1yQEmjBFbHcrgOPbZ6ArKsfk//O
6rh/RWM+XpjNYaFSYWfme03b6X/1qfM/ceFF5fnGI5UAoquBPhFdb+Uva/s5ZYoD
7tVvACsJEj9gsujNC8zKdJchjoDsbiEvlO7ij9rKRMCn6ZIXiL141FnEdi0+frLj
6noLjnyn0Er+b03hT2/cYLLcftrWcXAEii1LGUnwiC0cxBJgkHwGASGuMG4BAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUvEJjqtSTAL4oU/W2qqf8YM8VpUowHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMzYzMTJlMzUzNjJl
MzgzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDM5MzIzNDM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE
PThQMA0GCSqGSIb3DQEBCwUAA4IBAQAHdZGtMD+bTK/FMT5MR85Ey8yvBFxAoVFI
XLh+aYDaf9Tf88JUMVWxx+pa2HKbU58bGlK5CcQPyOQOsCqCF/Qb/kocvHJbHzSS
7aXhHEu1tfHDBdo9UybMxvzxmJMEpIcCV7KTPDGcpfZaww7PXw1iqwoRgVkhwZZn
BuV1bGu8VhI+ZfIXkddsajDeCzhCvpDpeGvhU3//8YJInTqDiTvHtTy5jLS0Xuix
AMBgZCCkyGpl/5Hkjdf/0aSnQzC2b4tIWDplgdUSRLp1n1+d/nfvMDtBVTKVyheg
HdAvG+zGpWgeHtDLT9LfdQFyVxH8WQsjFS1mcmizA+jvI24Au1P/
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:54 2026 by rpki-client