Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GTBC/0/36312e36352e3139322e302f32302d3234203d3e203138343133.roa
File:                     36312e36352e3139322e302f32302d3234203d3e203138343133.roa (raw, json)
Hash identifier:          2ch2o9TLeb/MBH9YdAv7ipxLIfbYN2VZNtKXRqBGHLk=
Subject key identifier:   4E:B9:C7:9E:D3:EA:54:A5:0C:B4:31:0B:73:C7:C9:08:13:DD:DC:D6
Certificate issuer:       /CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D
Certificate serial:       088EC027C8231EEC7C2D3B4B130D3F98EC41E766
Authority key identifier: 9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GTBC/0/36312e36352e3139322e302f32302d3234203d3e203138343133.roa
Signing time:             Mon 11 May 2026 17:44:56 +0000
ROA not before:           Mon 11 May 2026 17:39:56 +0000
ROA not after:            Mon 10 May 2027 17:44:56 +0000
asID:                     18413
IP address blocks:        61.65.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl
                          rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8e:c0:27:c8:23:1e:ec:7c:2d:3b:4b:13:0d:3f:98:ec:41:e7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D
        Validity
            Not Before: May 11 17:39:56 2026 GMT
            Not After : May 10 17:44:56 2027 GMT
        Subject: CN=4EB9C79ED3EA54A50CB4310B73C7C90813DDDCD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:23:8c:99:9f:9b:f1:db:77:89:61:4a:f3:
                    ac:3f:86:06:9b:e1:cf:1e:d2:f7:e7:32:de:41:32:
                    df:b1:e6:da:4a:18:34:73:00:96:68:e6:d8:37:8a:
                    2c:60:f6:bb:72:1c:91:9f:4a:61:2a:f6:4d:71:4a:
                    d0:1d:f7:a5:0a:2b:cc:51:38:33:6b:7c:b3:d8:3e:
                    a1:22:43:80:ba:48:4d:06:5b:99:b3:03:74:62:ce:
                    c2:87:b9:e2:cb:65:c4:fa:b1:e1:b5:93:23:fc:20:
                    41:06:aa:ca:d3:64:c7:90:df:93:8f:d7:84:d3:af:
                    40:28:da:f5:ab:ee:4a:ed:d0:68:f6:0b:36:64:0b:
                    5c:d4:46:eb:78:70:4f:c6:84:1d:6e:f6:3f:66:27:
                    4b:9d:38:bb:3f:c4:03:8b:52:02:e6:80:05:58:10:
                    fe:0c:0d:04:73:45:e8:cf:b7:cf:87:87:fd:24:fe:
                    f6:59:62:b8:48:ac:06:cc:2c:03:f5:42:7b:b8:67:
                    ff:6d:08:f2:ce:04:0b:d6:65:a5:7c:35:2b:62:39:
                    76:21:47:52:ea:1a:ec:97:73:08:74:b4:df:37:a3:
                    08:b1:a1:f3:59:de:fb:f4:78:28:27:48:36:af:77:
                    38:d7:b6:59:7c:af:fe:dc:2b:33:dd:44:9d:ed:7d:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B9:C7:9E:D3:EA:54:A5:0C:B4:31:0B:73:C7:C9:08:13:DD:DC:D6
            X509v3 Authority Key Identifier:
                keyid:9F:C9:9B:1F:48:12:CC:A2:E8:D1:D5:6A:06:9F:9D:18:DE:7D:11:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9FC99B1F4812CCA2E8D1D56A069F9D18DE7D118D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GTBC/0/36312e36352e3139322e302f32302d3234203d3e203138343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.65.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:23:89:a8:d1:0b:4e:65:61:2c:46:c5:19:a7:89:26:dd:
         ab:d1:9e:7e:cc:26:ee:3f:17:7d:2b:3a:28:1b:f4:aa:bd:5b:
         46:55:27:86:72:07:9e:82:b7:7b:ca:4c:d4:1e:e3:5b:33:b6:
         ca:b1:2e:75:be:95:90:a6:c5:ca:26:46:0a:00:75:a8:82:90:
         62:9c:86:95:f1:20:f8:c7:30:9e:6f:fe:52:b5:4b:86:85:5a:
         01:e1:a2:4f:42:99:e3:a2:89:b5:b4:4b:a6:50:8a:dc:d4:d8:
         02:ed:ac:ba:5a:50:19:13:23:99:54:4d:84:ed:f6:de:bb:ab:
         cb:9e:03:3f:06:47:d3:62:09:df:85:8f:82:33:50:2d:f8:c8:
         db:0f:64:a4:10:c8:a2:db:26:57:33:92:75:bd:23:e5:57:ac:
         0b:46:8f:c1:7e:e9:c5:f0:4e:c4:4a:4f:42:97:1e:0f:a5:24:
         b5:d4:44:7d:de:bb:c1:df:13:8f:d6:e3:45:19:c7:2a:b1:80:
         1c:e6:89:fb:31:60:64:fe:16:8f:80:66:3f:7a:8e:ba:1d:d6:
         50:cb:63:10:6f:57:32:3f:fb:b4:92:dd:e4:5e:64:79:b3:4a:
         ce:53:95:bf:f4:1f:62:29:86:dc:a2:5f:40:27:f3:69:6a:8b:
         f6:f9:7f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:55 2026 by rpki-client