Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e32342e302f32342d3234203d3e203138343131.roa
File:                     36312e35362e32342e302f32342d3234203d3e203138343131.roa (raw, json)
Hash identifier:          4W+qJBNLOJOWIRvtB6qDddjGArtbipAJUnwCauAbtiw=
Subject key identifier:   1E:97:52:70:7E:E8:54:0C:A5:23:C7:D5:C9:50:BC:B6:15:93:BF:EA
Certificate issuer:       /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial:       4E90AC0F941B588D2707E0D397259DF83A5073CA
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e32342e302f32342d3234203d3e203138343131.roa
Signing time:             Mon 11 May 2026 17:10:14 +0000
ROA not before:           Mon 11 May 2026 17:05:14 +0000
ROA not after:            Mon 10 May 2027 17:10:14 +0000
asID:                     18411
IP address blocks:        61.56.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
                          rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:90:ac:0f:94:1b:58:8d:27:07:e0:d3:97:25:9d:f8:3a:50:73:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
        Validity
            Not Before: May 11 17:05:14 2026 GMT
            Not After : May 10 17:10:14 2027 GMT
        Subject: CN=1E9752707EE8540CA523C7D5C950BCB61593BFEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:90:06:a0:27:a0:02:5c:59:4d:df:e9:8d:
                    7b:d4:6a:92:5c:22:17:e5:15:a7:3b:27:29:56:76:
                    aa:0e:63:e3:f7:28:45:3b:05:ef:df:27:c0:6b:34:
                    4a:23:01:00:df:73:f6:f2:e1:09:c7:1b:4d:08:1d:
                    9a:82:91:09:51:ed:0d:e3:65:7d:1b:a2:ab:3b:53:
                    00:fe:13:3f:30:2d:6f:4b:94:17:d9:e9:ef:5d:f8:
                    fc:c5:fa:7e:4d:df:91:38:c3:25:4d:2c:d4:96:86:
                    6b:03:b5:f5:29:48:26:88:e6:d4:e7:6f:2f:30:21:
                    41:9d:28:2d:0d:49:b6:46:5d:1a:d0:f2:ee:00:09:
                    a4:a0:65:c6:c2:23:44:d9:01:7f:53:21:e6:a4:8d:
                    7d:a1:0f:95:8c:00:72:a7:6f:a0:02:23:4c:86:d2:
                    10:a8:f5:ec:3a:d9:db:d9:fa:6c:ec:52:9e:15:f4:
                    9e:81:31:7b:d7:53:46:66:93:37:2c:47:95:28:ce:
                    e9:a3:0a:c9:39:14:1e:00:5d:1a:80:f9:e9:9e:fa:
                    d7:4d:81:77:aa:30:8a:4e:1d:88:5c:84:b9:5b:29:
                    c2:20:5e:73:f7:f1:99:6e:98:5d:f8:62:87:c6:d5:
                    06:da:16:6a:1b:1e:09:ea:a2:14:50:b0:18:c1:34:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:97:52:70:7E:E8:54:0C:A5:23:C7:D5:C9:50:BC:B6:15:93:BF:EA
            X509v3 Authority Key Identifier:
                keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e32342e302f32342d3234203d3e203138343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:2a:bb:bf:bb:05:8d:40:f5:a6:1d:1a:00:1e:d3:21:2d:
         8f:46:f6:4e:84:57:3f:3c:d2:52:07:47:7f:b5:12:af:be:fd:
         c1:6f:4d:87:92:62:b6:3d:f5:c7:70:7b:c5:bd:62:0e:02:99:
         fd:68:93:cf:6e:d7:ce:14:66:5b:9d:3c:0e:21:7a:18:de:e3:
         1c:f7:20:e2:fa:4a:48:d3:99:e6:35:3f:77:e1:89:f4:cf:49:
         fb:6f:cb:f4:c9:2f:53:43:7e:7d:e5:69:0e:1d:5c:6f:98:cf:
         68:cb:65:82:6d:d8:e1:3b:b3:e9:7f:2c:00:05:0a:55:cb:9b:
         8c:91:a7:05:87:e3:4b:45:6d:d4:e7:de:52:ad:a3:8f:8a:08:
         77:72:d0:20:8e:28:40:7a:7e:49:07:10:f7:ac:bc:bb:ac:e4:
         93:bd:49:7d:dd:e5:0d:ed:44:52:e1:f2:d4:00:65:cf:61:c2:
         87:e2:8f:b9:7f:d1:84:95:05:18:0e:33:b4:d4:79:be:e5:32:
         ae:79:13:05:10:01:c3:50:70:eb:66:ea:b2:31:5e:19:7a:88:
         71:7f:46:ff:3a:e6:f7:ab:bb:3e:35:6b:fe:00:b0:45:52:bc:
         98:c9:e8:5f:5e:cd:aa:92:e9:dc:3f:b1:89:74:0f:2e:57:cb:
         21:17:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:13 2026 by rpki-client