Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa
File:                     3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=
Subject key identifier:   8B:58:E5:CC:A4:D9:7E:F9:0B:E2:E3:8C:18:8D:2A:51:94:A0:F1:B8
Certificate issuer:       /CN=43A480538BE8801E606CB416A45E3AA47153C1FC
Certificate serial:       75356D9D41BC849C7FE1737366D35400A5E364DE
Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:52:40 +0000
ROA not before:           Mon 11 May 2026 17:47:40 +0000
ROA not after:            Mon 10 May 2027 17:52:40 +0000
asID:                     134823
IP address blocks:        165.101.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl
                          rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:35:6d:9d:41:bc:84:9c:7f:e1:73:73:66:d3:54:00:a5:e3:64:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC
        Validity
            Not Before: May 11 17:47:40 2026 GMT
            Not After : May 10 17:52:40 2027 GMT
        Subject: CN=8B58E5CCA4D97EF90BE2E38C188D2A5194A0F1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:e2:cc:1a:8d:5a:e3:6b:85:88:7d:3c:bb:
                    53:22:93:cb:45:5c:73:4c:75:28:2d:42:ae:70:21:
                    14:9b:5a:bb:2d:45:2a:81:d4:20:b1:34:74:04:33:
                    31:5a:21:85:4c:a0:dc:ea:59:9f:bc:1e:e7:67:aa:
                    18:a4:1e:94:11:e7:a9:af:b7:a1:22:17:9d:a3:fa:
                    f9:4c:40:a5:b6:ec:a0:52:03:d2:d4:8c:4b:bf:a7:
                    ab:2f:da:d6:79:ca:fe:6a:84:2c:81:5d:86:68:8e:
                    cf:88:74:da:a9:23:1e:08:36:24:93:2a:f0:33:db:
                    03:0d:0f:ac:29:3a:0c:97:ac:69:0f:b4:7c:34:70:
                    b7:ce:4b:aa:e6:ab:58:22:37:57:2a:af:69:c2:a8:
                    77:86:d9:af:b9:25:19:6b:38:78:77:4d:b4:65:ca:
                    66:2d:1e:8c:17:34:b8:af:c7:ee:57:2e:b3:b4:6e:
                    ee:be:1d:ab:73:e2:28:63:94:55:cc:10:99:af:6a:
                    d9:30:c4:1d:99:1e:b9:77:79:37:c1:e9:c8:50:a8:
                    88:36:c0:e6:2d:8c:4f:8e:77:bf:3f:8e:e2:84:f3:
                    bc:4b:ae:3a:1d:b8:b3:ba:46:28:89:e6:36:d4:34:
                    96:85:f1:b5:17:ce:93:f1:e5:3b:41:8d:17:3c:76:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:E5:CC:A4:D9:7E:F9:0B:E2:E3:8C:18:8D:2A:51:94:A0:F1:B8
            X509v3 Authority Key Identifier:
                keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:c6:a9:47:87:9f:81:0d:5d:b3:ac:bf:e0:e0:af:40:10:19:
         74:3e:9e:ad:ca:e6:6a:e8:e0:a5:0f:e7:4b:37:de:f4:e2:42:
         c2:89:52:1f:76:fb:af:2a:ab:48:67:0b:33:34:79:48:74:8d:
         cc:70:b6:fa:3a:5b:86:28:ff:ef:48:2b:1f:cc:01:3a:f4:42:
         e3:80:03:50:fd:6e:9f:56:f3:b7:93:7c:c7:64:07:bf:ae:d4:
         24:a0:6f:1d:07:1f:7a:87:71:3c:1d:9d:7c:de:8d:4a:aa:f6:
         01:10:7c:a8:8d:fa:9a:85:22:c4:c0:c2:76:dc:3f:47:30:6a:
         fd:10:37:6c:d8:e4:14:05:f9:3c:e1:45:33:c9:74:ce:3c:6d:
         00:db:e4:58:8d:a5:b3:81:f7:69:da:94:e0:1a:c4:7e:3e:a9:
         df:6d:18:15:41:3f:25:2d:55:78:68:d9:7e:19:a6:f9:af:61:
         36:8d:c0:08:fe:44:59:11:9b:e2:1f:b4:6c:f1:b4:11:b7:97:
         7d:93:6a:f8:d5:dd:9b:99:b8:84:dc:18:e7:3a:0c:b5:36:00:
         b2:ef:68:44:f7:09:c9:01:dc:14:06:82:bd:fa:3e:4b:75:a8:
         13:f2:5f:19:e5:fb:10:76:36:fc:c5:72:80:0e:43:11:e6:e2:
         d6:6d:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:41 2026 by rpki-client