Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/EASPNET/0/34392e3132382e3131322e302f32302d3234203d3e203130313335.roa
File:                     34392e3132382e3131322e302f32302d3234203d3e203130313335.roa (raw, json)
Hash identifier:          Em6SJ0+vCS3uqV3bizPbcVfa+Cwp9dfmxtF8QsHfV7M=
Subject key identifier:   FD:5D:F2:5B:33:26:C6:71:F1:E8:1B:F5:0D:77:54:AF:0D:71:80:E9
Certificate issuer:       /CN=26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B
Certificate serial:       058F5A0C2E98CD42DC363B66E5BA2A00AD198818
Authority key identifier: 26:AF:7E:02:E7:E3:AA:97:EA:8F:02:F7:FA:0A:3B:DD:4C:9A:08:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EASPNET/0/34392e3132382e3131322e302f32302d3234203d3e203130313335.roa
Signing time:             Mon 11 May 2026 16:48:58 +0000
ROA not before:           Mon 11 May 2026 16:43:58 +0000
ROA not after:            Mon 10 May 2027 16:48:58 +0000
asID:                     10135
IP address blocks:        49.128.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.crl
                          rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8f:5a:0c:2e:98:cd:42:dc:36:3b:66:e5:ba:2a:00:ad:19:88:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B
        Validity
            Not Before: May 11 16:43:58 2026 GMT
            Not After : May 10 16:48:58 2027 GMT
        Subject: CN=FD5DF25B3326C671F1E81BF50D7754AF0D7180E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:35:46:22:d2:63:27:7e:c3:3d:66:74:57:
                    bb:c9:23:9f:42:5b:ee:2d:d1:56:36:0e:e2:27:f8:
                    69:85:eb:5a:00:fb:31:0c:c8:14:87:8b:53:27:96:
                    19:be:b9:10:fb:fb:0e:c9:29:1a:65:21:f9:db:e4:
                    e0:da:5d:4b:61:ba:c7:9b:7a:27:fd:4c:a8:52:31:
                    6b:f5:e8:23:20:e7:a2:b0:5e:f4:fc:f7:46:55:19:
                    03:ac:63:30:5a:51:a3:f1:77:db:d3:68:be:66:9a:
                    10:9a:70:a0:35:a2:ac:26:bf:1e:5a:df:87:8f:eb:
                    80:2b:3b:f5:03:44:67:1d:68:6e:f2:94:c9:42:33:
                    11:d3:46:df:48:1b:cf:32:48:e0:dc:8f:80:5d:3f:
                    bb:c5:8d:62:c3:f7:96:01:cb:2f:35:82:19:be:8f:
                    90:85:2f:57:87:ab:2b:4d:53:c9:83:62:52:c0:f1:
                    f9:bf:b7:56:fc:2a:1f:71:b8:50:84:ee:79:f7:f2:
                    ab:aa:20:a7:fb:20:bf:66:1d:d3:ef:e0:dd:67:8a:
                    41:fa:b5:ac:dc:98:1c:de:86:9f:d0:ab:ab:64:37:
                    71:18:7f:9b:7e:ff:7c:75:1c:6a:23:bc:7b:f4:e0:
                    91:ef:c7:a3:f0:2c:27:6d:71:c3:40:2a:1e:80:f9:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5D:F2:5B:33:26:C6:71:F1:E8:1B:F5:0D:77:54:AF:0D:71:80:E9
            X509v3 Authority Key Identifier:
                keyid:26:AF:7E:02:E7:E3:AA:97:EA:8F:02:F7:FA:0A:3B:DD:4C:9A:08:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EASPNET/0/34392e3132382e3131322e302f32302d3234203d3e203130313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:37:17:4c:4d:35:77:d9:62:f6:ad:23:78:5f:f5:22:d3:dd:
         0d:d7:63:2f:0f:f2:f3:e9:3f:2a:d4:2a:a0:b2:7f:0c:29:ee:
         aa:12:63:23:7f:de:8f:38:c1:1a:c7:47:40:6a:20:d1:db:6d:
         b1:79:3c:49:9d:cf:d1:c1:29:76:93:2c:b6:61:be:15:62:81:
         ee:4e:8b:25:2f:84:3f:86:8e:2a:94:1d:fb:94:19:d0:87:f3:
         fa:be:99:e7:9f:9c:de:31:55:68:14:b3:76:d3:d6:94:31:50:
         b6:aa:74:0e:0b:40:77:fc:c7:3f:b5:be:95:bf:ad:0f:b9:43:
         61:85:ba:05:da:96:ec:3b:51:35:c1:f8:d9:82:6d:df:8b:0c:
         41:2f:12:7a:d2:a0:8b:40:f7:9e:d4:5b:dd:af:f8:19:64:ad:
         ec:e9:7d:51:b3:d2:24:23:a4:51:f9:53:1d:ae:d8:60:64:09:
         54:bb:bf:17:f1:81:bb:61:b8:e2:ca:c9:3e:a5:be:ee:c9:7b:
         10:39:a5:ab:d7:90:f8:33:d3:ee:4e:2e:16:48:5c:06:33:02:
         9e:4a:f5:52:2f:5b:ec:3a:a9:14:6e:78:3d:30:9a:5c:5a:83:
         09:03:53:4d:f5:e7:b8:6a:1d:ce:31:c4:3b:d3:72:70:22:42:
         fe:69:3d:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:20:41 2026 by rpki-client