Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38342e302f32342d3234203d3e2039323434.roa
File:                     36312e35362e38342e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier:          GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=
Subject key identifier:   D8:7D:79:A6:54:F0:7A:A8:44:3C:00:C1:F2:73:37:F5:EA:59:70:AE
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       67E00CC211BE4153A7215F69F96A78BEBF651DF1
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38342e302f32342d3234203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:36 +0000
ROA not before:           Mon 11 May 2026 16:49:36 +0000
ROA not after:            Mon 10 May 2027 16:54:36 +0000
asID:                     9244
IP address blocks:        61.56.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e0:0c:c2:11:be:41:53:a7:21:5f:69:f9:6a:78:be:bf:65:1d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:36 2026 GMT
            Not After : May 10 16:54:36 2027 GMT
        Subject: CN=D87D79A654F07AA8443C00C1F27337F5EA5970AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:ba:dc:41:6b:fb:2f:ab:67:01:a9:ea:03:
                    55:ad:7b:14:fa:15:8e:52:a1:57:26:86:38:b3:fd:
                    92:f5:3e:4f:d7:09:a8:a3:96:45:13:8d:24:63:34:
                    f0:fc:a8:a5:e6:08:e9:71:99:38:1f:d7:f6:6d:6f:
                    0b:80:b9:bd:44:68:f1:6b:a4:bc:df:59:8d:70:93:
                    3e:a9:5c:2b:ee:1a:6b:3a:3d:bd:92:15:bd:09:c0:
                    9b:ed:0b:62:a0:12:a2:c6:7f:89:45:1e:88:78:6e:
                    5a:8f:2e:40:95:ee:f9:fc:bf:f1:a4:81:e0:f0:12:
                    d6:ed:cc:69:af:4f:4e:d4:9c:10:86:99:31:9d:f0:
                    1a:81:d8:c1:90:ed:9c:ee:af:c9:97:18:86:eb:47:
                    9a:05:48:73:0e:f5:b1:03:52:43:11:63:83:94:9c:
                    de:d7:4f:0e:4b:16:5c:c6:e3:75:1b:bb:89:ae:78:
                    86:db:84:a1:24:7e:18:a2:28:0a:cf:ef:7d:cb:19:
                    94:01:51:a0:0e:79:2e:6f:74:47:e1:b4:11:2c:3f:
                    4d:c6:b9:80:fb:66:7d:c1:fb:bc:6a:7c:66:15:d1:
                    87:41:4f:41:25:d0:f7:79:3b:d6:c2:ee:d6:d4:b2:
                    30:37:99:bf:13:86:66:1f:8a:11:86:bc:a0:38:3d:
                    82:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7D:79:A6:54:F0:7A:A8:44:3C:00:C1:F2:73:37:F5:EA:59:70:AE
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38342e302f32342d3234203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:ca:fa:05:e7:d4:76:b2:3a:3f:a6:64:ee:8b:84:55:0c:
         0e:c9:bf:58:b8:7b:58:7b:15:48:4e:d3:83:e2:d8:89:d1:15:
         27:32:f7:a0:85:44:08:1f:93:9b:8c:e8:1c:b2:54:3c:dc:1e:
         a5:47:74:a1:56:93:af:cb:2e:44:76:f4:23:10:68:13:52:55:
         83:25:af:aa:4f:28:56:34:77:e4:e9:b2:25:87:a9:fc:57:0f:
         e3:5f:9d:57:f0:57:5f:b6:ec:b8:fb:7d:e8:6e:5b:23:57:73:
         e4:4f:61:3d:1d:91:1a:06:c8:09:12:38:8e:6a:b0:e0:92:93:
         90:92:72:d1:df:1c:df:76:49:49:4f:47:65:e8:62:89:e9:27:
         1d:49:d6:81:a6:1d:37:98:92:db:05:28:8c:be:db:ed:af:c6:
         fd:7d:ae:36:60:19:e0:4f:58:79:d8:53:97:3e:0e:a8:87:b1:
         04:e2:d1:ad:a6:72:ae:a8:7c:04:90:2b:ec:fe:91:23:d1:c2:
         27:7c:27:81:8b:94:b5:34:36:f3:4d:23:24:52:ad:6f:5b:5e:
         08:eb:a7:27:f6:44:80:ec:9a:4e:ab:41:4e:81:25:d1:a1:eb:
         f4:f8:85:de:2f:90:83:8c:6c:79:75:fd:5e:35:3d:72:d4:60:
         bd:e5:01:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:52 2026 by rpki-client