Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKCO/0/3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa
File:                     3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa (raw, json)
Hash identifier:          G2OLOqYyK8DpocEbNmGZNRoqNscoouK3uCmhiiODaHA=
Subject key identifier:   FE:69:40:E3:10:80:DF:50:79:C2:5B:1A:EF:DF:16:51:B6:54:6A:43
Certificate issuer:       /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694
Certificate serial:       120C5553AC468674CAC4666408B132ACB97BE6CC
Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKCO/0/3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa
Signing time:             Mon 11 May 2026 17:40:31 +0000
ROA not before:           Mon 11 May 2026 17:35:31 +0000
ROA not after:            Mon 10 May 2027 17:40:31 +0000
asID:                     131645
IP address blocks:        202.148.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl
                          rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0c:55:53:ac:46:86:74:ca:c4:66:64:08:b1:32:ac:b9:7b:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694
        Validity
            Not Before: May 11 17:35:31 2026 GMT
            Not After : May 10 17:40:31 2027 GMT
        Subject: CN=FE6940E31080DF5079C25B1AEFDF1651B6546A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:e6:d2:e9:ed:3d:ef:3f:2c:6a:6a:07:90:
                    46:9e:21:99:04:ee:f0:a7:b7:44:c8:ae:3e:ff:3f:
                    68:2d:38:e1:2c:43:9e:b7:95:cb:2d:58:99:0e:e6:
                    9f:f4:4d:eb:e7:71:ea:b4:c8:6b:82:41:3a:0b:33:
                    48:bc:24:d4:6a:af:fc:e8:1a:06:f1:b9:ab:55:19:
                    c9:db:ff:bf:6b:12:b5:56:74:79:ae:1e:72:bc:15:
                    1f:2f:ec:16:21:e5:a9:30:85:78:dd:04:ca:c4:b4:
                    60:f4:c4:1e:e0:30:fc:38:ca:45:1f:69:05:f0:3f:
                    86:d4:d9:79:c9:e5:ef:05:5d:c4:43:33:79:1f:1b:
                    13:3a:93:19:02:9a:39:91:ef:b7:47:2d:8f:7c:3c:
                    64:36:f7:4f:c5:b5:28:3c:e5:f6:e2:06:81:17:7a:
                    c5:e2:33:99:55:e0:b5:46:51:73:e2:08:e7:66:bb:
                    4b:86:ec:f7:1d:2f:cd:cf:cd:53:42:72:2f:6c:92:
                    e4:f6:35:5c:1b:f5:a8:06:91:96:a1:f4:9d:28:30:
                    88:d7:83:91:b6:55:50:12:ed:71:47:21:0a:17:43:
                    c7:79:b3:57:81:c9:39:19:f0:46:ae:0a:02:f1:94:
                    fe:8f:14:7d:00:8a:f0:b4:db:12:67:ed:3c:e0:d1:
                    36:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:69:40:E3:10:80:DF:50:79:C2:5B:1A:EF:DF:16:51:B6:54:6A:43
            X509v3 Authority Key Identifier:
                keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/3230322e3134382e3230382e302f32332d3234203d3e20313331363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:39:98:00:6b:c5:70:13:0e:62:d1:07:0f:ef:cf:ca:4c:92:
         1a:e6:1f:b8:54:25:27:7b:7a:ad:55:9e:66:2a:68:74:40:cc:
         da:1e:77:14:60:4c:dc:22:54:a4:c4:e8:f2:53:cc:66:23:3b:
         41:be:8d:17:39:d2:be:bb:30:7f:79:5c:b6:90:99:bd:24:d8:
         8a:a0:5b:e0:89:fb:ec:11:e9:f1:2f:f7:7b:fe:91:0e:ab:8a:
         2c:b1:fd:b9:85:bd:cb:9b:97:5a:99:ea:78:aa:d8:97:91:7b:
         13:6f:64:73:a2:9d:54:ff:5f:11:6e:f7:d4:39:e4:d2:18:da:
         66:1e:21:5e:7d:3c:76:98:4a:d7:3b:d8:f7:93:4a:cd:3b:f9:
         9c:e5:80:72:60:2e:f9:3b:87:fc:10:a8:9f:7f:af:a7:fc:28:
         18:06:84:ca:42:a3:ee:94:b2:6f:1b:0b:c7:8d:e5:9d:6c:dd:
         6a:92:dc:c3:8a:0b:a6:05:4b:3d:3f:68:c3:2c:9f:0f:52:6d:
         05:9d:f4:25:3e:ea:c2:1e:30:e5:99:40:ba:a2:28:07:84:57:
         43:8e:ba:4f:21:90:d1:59:36:11:94:91:0f:97:20:3a:8a:2f:
         94:ef:8f:24:21:06:23:be:c8:32:e9:7f:a2:21:ec:93:3a:56:
         58:40:85:86
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUEgxVU6xGhnTKxGZkCLEyrLl75swwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERCRUY3
NEFCOTY5NDAeFw0yNjA1MTExNzM1MzFaFw0yNzA1MTAxNzQwMzFaMDMxMTAvBgNV
BAMTKEZFNjk0MEUzMTA4MERGNTA3OUMyNUIxQUVGREYxNjUxQjY1NDZBNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnF+bS6e097z8samoHkEaeIZkE
7vCnt0TIrj7/P2gtOOEsQ563lcstWJkO5p/0Tevnceq0yGuCQToLM0i8JNRqr/zo
GgbxuatVGcnb/79rErVWdHmuHnK8FR8v7BYh5akwhXjdBMrEtGD0xB7gMPw4ykUf
aQXwP4bU2XnJ5e8FXcRDM3kfGxM6kxkCmjmR77dHLY98PGQ290/FtSg85fbiBoEX
esXiM5lV4LVGUXPiCOdmu0uG7PcdL83PzVNCci9skuT2NVwb9agGkZah9J0oMIjX
g5G2VVAS7XFHIQoXQ8d5s1eByTkZ8EauCgLxlP6PFH0AivC02xJn7Tzg0Tb3AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQU/mlA4xCA31B5wlsa798WUbZUakMwHwYDVR0j
BBgwFoAUG/QZdz0eFe79bKK7TlDb73SrlpQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tDTy8w
LzFCRjQxOTc3M0QxRTE1RUVGRDZDQTJCQjRFNTBEQkVGNzRBQjk2OTQuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERC
RUY3NEFCOTY5NC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLQ08vMC8zMjMwMzIyZTMxMzQzODJl
MzIzMDM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzMxMzYzNDM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBypTQMA0GCSqGSIb3DQEBCwUAA4IBAQCSOZgAa8VwEw5i0QcP78/KTJIa
5h+4VCUne3qtVZ5mKmh0QMzaHncUYEzcIlSkxOjyU8xmIztBvo0XOdK+uzB/eVy2
kJm9JNiKoFvgifvsEenxL/d7/pEOq4ossf25hb3Lm5damep4qtiXkXsTb2Rzop1U
/18RbvfUOeTSGNpmHiFefTx2mErXO9j3k0rNO/mc5YByYC75O4f8EKiff6+n/CgY
BoTKQqPulLJvGwvHjeWdbN1qktzDigumBUs9P2jDLJ8PUm0FnfQlPurCHjDlmUC6
oigHhFdDjrpPIZDRWTYRlJEPlyA6ii+U748kIQYjvsgy6X+iIeyTOlZYQIWG
-----END CERTIFICATE-----
Generated at Wed May 13 11:35:37 2026 by rpki-client