Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa
File:                     3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier:          sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=
Subject key identifier:   F9:25:53:90:13:67:68:16:98:51:FD:AD:75:BF:E4:EF:35:1C:33:A6
Certificate issuer:       /CN=43A480538BE8801E606CB416A45E3AA47153C1FC
Certificate serial:       77AD4D84B9A203DD00FD0F71321727456AD86377
Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa
Signing time:             Mon 11 May 2026 17:52:41 +0000
ROA not before:           Mon 11 May 2026 17:47:41 +0000
ROA not after:            Mon 10 May 2027 17:52:41 +0000
asID:                     213607
IP address blocks:        165.101.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl
                          rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:29:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ad:4d:84:b9:a2:03:dd:00:fd:0f:71:32:17:27:45:6a:d8:63:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC
        Validity
            Not Before: May 11 17:47:41 2026 GMT
            Not After : May 10 17:52:41 2027 GMT
        Subject: CN=F9255390136768169851FDAD75BFE4EF351C33A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:f9:19:ac:5c:77:61:c6:8e:7f:ef:0f:de:
                    86:96:b9:89:30:a7:80:7b:7e:2b:1e:1e:28:a0:e8:
                    3b:76:29:4a:31:9f:69:ba:5c:56:fb:09:cf:c9:7e:
                    ee:ac:0c:4a:bd:90:8c:fd:4d:cd:3f:35:c0:fe:b0:
                    a1:b0:e2:e9:df:85:93:86:b5:d8:d6:44:fa:e3:38:
                    1d:8a:87:02:73:46:1a:7f:18:b2:6a:2c:3d:60:7b:
                    83:4a:f3:38:3e:ef:1b:b7:06:2e:e2:9f:76:6c:2d:
                    9c:b1:94:3b:99:64:16:d9:5d:b8:ce:d2:0c:d1:d6:
                    07:64:48:41:1d:58:d8:09:b8:9c:c3:7c:9e:59:99:
                    1b:a9:69:9c:25:c6:86:d3:c0:54:19:cc:4f:ae:a3:
                    f2:a7:2f:b5:92:e9:6a:2e:2b:5b:3e:f0:a7:7c:4e:
                    42:36:af:13:1b:77:66:21:af:47:11:e9:86:03:96:
                    11:24:4c:5c:78:7c:75:6f:d3:a2:f1:c0:22:31:aa:
                    1a:25:ac:25:71:31:90:b6:4b:4f:f4:59:96:9d:85:
                    e0:f5:22:89:68:73:f8:a2:01:51:8d:73:29:84:3f:
                    ff:db:48:ec:fe:b2:c5:32:3f:56:64:d8:07:bd:4a:
                    5b:6d:87:61:4c:fd:6a:1c:9a:ad:f5:53:59:c5:ad:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:53:90:13:67:68:16:98:51:FD:AD:75:BF:E4:EF:35:1C:33:A6
            X509v3 Authority Key Identifier:
                keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:6e:c0:d2:d4:e0:96:c5:37:08:9d:68:ad:48:04:c8:c7:
         42:a1:a1:71:36:7e:c0:aa:d8:ee:62:1d:63:fb:e0:92:2a:ce:
         77:16:6c:65:55:79:30:f2:da:e2:ed:01:6e:3a:a2:5e:b2:1c:
         9a:19:09:01:2b:02:4f:61:3d:44:5e:78:56:54:85:4b:a0:d7:
         de:bc:62:ef:58:cb:2c:ae:e0:82:60:97:85:43:f4:8f:c2:f2:
         59:56:30:9c:97:be:71:ca:59:54:79:48:09:00:be:26:ea:fa:
         51:9c:70:33:01:5d:38:bc:f5:28:a7:d6:19:4a:38:c4:51:6e:
         19:f9:b4:fc:63:b0:cc:67:6e:eb:38:ee:1e:71:cd:3e:da:b1:
         9e:0b:03:8f:3f:74:d6:f5:ab:23:18:cf:95:8f:37:dd:43:a1:
         04:55:a9:2f:69:cf:54:57:77:2b:71:17:58:29:c7:05:9f:80:
         bc:af:99:a0:16:7d:1d:53:cb:6e:30:aa:08:08:47:4f:7f:57:
         f0:8b:85:36:3e:ea:4a:e1:86:16:d6:06:54:40:09:10:d2:aa:
         29:07:f1:a0:8c:0d:07:af:3f:9c:cd:fb:b2:de:5a:94:97:94:
         f5:3e:5d:69:30:5c:b7:7e:33:2f:e1:a7:42:34:f0:06:04:54:
         4c:6d:f2:a9
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUd61NhLmiA90A/Q9xMhcnRWrYY3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3
MTUzQzFGQzAeFw0yNjA1MTExNzQ3NDFaFw0yNzA1MTAxNzUyNDFaMDMxMTAvBgNV
BAMTKEY5MjU1MzkwMTM2NzY4MTY5ODUxRkRBRDc1QkZFNEVGMzUxQzMzQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCySPkZrFx3YcaOf+8P3oaWuYkw
p4B7fiseHiig6Dt2KUoxn2m6XFb7Cc/Jfu6sDEq9kIz9Tc0/NcD+sKGw4unfhZOG
tdjWRPrjOB2KhwJzRhp/GLJqLD1ge4NK8zg+7xu3Bi7in3ZsLZyxlDuZZBbZXbjO
0gzR1gdkSEEdWNgJuJzDfJ5ZmRupaZwlxobTwFQZzE+uo/KnL7WS6WouK1s+8Kd8
TkI2rxMbd2Yhr0cR6YYDlhEkTFx4fHVv06LxwCIxqholrCVxMZC2S0/0WZadheD1
Ioloc/iiAVGNcymEP//bSOz+ssUyP1Zk2Ae9Sltth2FM/Wocmq31U1nFreV5AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU+SVTkBNnaBaYUf2tdb/k7zUcM6YwHwYDVR0j
BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT
T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0
NUUzQUE0NzE1M0MxRkMuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVTT04vMS8zMTM2MzUy
ZTMxMzAzMTJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMzMzYz
MDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQApWWYMA0GCSqGSIb3DQEBCwUAA4IBAQAZoG7A0tTglsU3
CJ1orUgEyMdCoaFxNn7AqtjuYh1j++CSKs53FmxlVXkw8tri7QFuOqJeshyaGQkB
KwJPYT1EXnhWVIVLoNfevGLvWMssruCCYJeFQ/SPwvJZVjCcl75xyllUeUgJAL4m
6vpRnHAzAV04vPUop9YZSjjEUW4Z+bT8Y7DMZ27rOO4ecc0+2rGeCwOPP3TW9asj
GM+VjzfdQ6EEVakvac9UV3crcRdYKccFn4C8r5mgFn0dU8tuMKoICEdPf1fwi4U2
PupK4YYW1gZUQAkQ0qopB/GgjA0Hrz+czfuy3lqUl5T1Pl1pMFy3fjMv4adCNPAG
BFRMbfKp
-----END CERTIFICATE-----
Generated at Wed May 13 05:37:48 2026 by rpki-client