Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa
File:                     3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (raw, json)
Hash identifier:          H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=
Subject key identifier:   83:D2:03:11:15:3E:36:C5:66:89:AE:D9:65:5A:4C:DD:59:2D:FE:5B
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       09DBCACFA0B021F0F0435DBE19EB2B8E6FEA81E9
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa
Signing time:             Mon 11 May 2026 17:57:26 +0000
ROA not before:           Mon 11 May 2026 17:52:26 +0000
ROA not after:            Mon 10 May 2027 17:57:26 +0000
asID:                     131676
IP address blocks:        138.252.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:db:ca:cf:a0:b0:21:f0:f0:43:5d:be:19:eb:2b:8e:6f:ea:81:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: May 11 17:52:26 2026 GMT
            Not After : May 10 17:57:26 2027 GMT
        Subject: CN=83D20311153E36C56689AED9655A4CDD592DFE5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9e:47:cd:b5:d8:00:16:8b:47:57:2e:5c:38:
                    ce:08:76:98:1a:f3:2e:59:c9:01:72:43:21:fe:d7:
                    d9:d8:c1:b8:a8:4d:1b:29:7c:81:85:a6:28:9b:9e:
                    59:48:42:a8:ab:4b:88:00:96:89:6d:e1:85:05:4b:
                    c2:b8:e8:d1:1b:47:ab:85:d1:3c:c3:f5:f8:98:11:
                    7b:b7:bc:d1:6f:87:2c:90:5c:26:47:77:ff:da:b9:
                    4b:ac:e5:a7:64:ef:64:c0:66:ee:c5:61:96:bb:ea:
                    92:fa:03:64:ae:5c:b8:5d:3a:60:27:f5:d1:0c:84:
                    8d:a6:8f:76:67:4c:e1:13:ad:39:60:ac:00:e3:28:
                    3f:42:86:2c:90:dc:ec:28:2d:42:7c:e9:70:a9:01:
                    29:10:4d:b7:7e:44:22:a4:df:79:64:2c:90:f6:4e:
                    2f:77:5d:6a:7c:be:58:dc:72:26:d6:64:e3:e4:95:
                    9c:3d:dd:d7:1e:55:ee:ce:f3:1d:f0:16:ac:7a:b3:
                    83:23:66:cc:27:39:ae:d9:79:fd:b2:e9:ae:fe:83:
                    0d:6c:bb:da:de:19:ff:81:38:aa:53:6c:6c:cd:9e:
                    fd:0e:82:cc:a7:b2:5f:8f:7d:fa:64:63:ff:94:5c:
                    ef:a1:c1:3b:0d:9c:0b:1c:4e:57:a0:9b:eb:d8:cd:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D2:03:11:15:3E:36:C5:66:89:AE:D9:65:5A:4C:DD:59:2D:FE:5B
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:9b:8a:c8:4f:80:5e:79:b4:34:5a:d7:7a:f5:a7:f4:55:a5:
         ad:5a:d8:b2:a8:26:0b:01:2b:81:8b:82:d1:a7:bc:78:1e:d8:
         e7:8f:bd:b5:c8:59:bb:68:a5:24:6c:e0:45:d2:66:9a:b9:09:
         11:e9:70:31:12:6f:b9:30:6f:e4:e3:b1:97:8a:c1:81:5e:5e:
         16:cf:c1:9b:21:ef:5f:89:1d:dd:cb:34:6f:5f:80:01:7f:5c:
         4a:0a:d6:22:6f:cb:ae:5b:c6:45:75:03:e2:55:76:94:83:7a:
         49:c2:a3:3b:34:82:ec:23:25:22:b6:74:da:72:7a:53:fd:4a:
         f5:76:53:26:1d:f4:fb:d5:4a:b0:4b:51:ae:fe:6d:2d:06:7e:
         02:70:35:9a:22:b2:f4:41:c9:c7:53:fb:42:4d:63:cf:43:4b:
         71:1a:15:dd:7b:9f:f7:73:61:23:77:7e:ad:21:80:25:59:3d:
         39:47:61:4b:72:6e:43:ad:49:84:2b:99:26:6b:96:31:a8:19:
         76:4f:19:61:15:13:6e:a1:18:b0:ea:c8:67:f9:c6:ac:07:d7:
         b1:02:ca:7d:23:37:f1:87:d2:3b:22:ae:82:b0:27:99:ef:18:
         fc:1a:84:99:f5:96:4f:10:fc:df:44:3e:c5:66:03:84:60:38:
         e7:05:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:13 2026 by rpki-client