Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKGAME/1/3133382e3235322e31302e302f32332d3332203d3e20313331363537.roa
File:                     3133382e3235322e31302e302f32332d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          MEZepMjSWeC8G0zF/GV1Y6LcbJJpDd1poBASMpA+lY0=
Subject key identifier:   5B:8E:E0:23:00:1E:3F:8A:17:CA:F5:C7:9A:F3:DA:40:47:7A:C5:83
Certificate issuer:       /CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
Certificate serial:       0691255C9B0D19CDB79780BFBD5984883A6411C2
Authority key identifier: C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKGAME/1/3133382e3235322e31302e302f32332d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:55:38 +0000
ROA not before:           Mon 11 May 2026 17:50:38 +0000
ROA not after:            Mon 10 May 2027 17:55:38 +0000
asID:                     131657
IP address blocks:        138.252.10.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl
                          rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:91:25:5c:9b:0d:19:cd:b7:97:80:bf:bd:59:84:88:3a:64:11:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
        Validity
            Not Before: May 11 17:50:38 2026 GMT
            Not After : May 10 17:55:38 2027 GMT
        Subject: CN=5B8EE023001E3F8A17CAF5C79AF3DA40477AC583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:21:9f:0d:e0:7a:7e:d2:5c:93:38:0c:e4:
                    cb:a1:0f:b1:6e:58:ac:79:4e:aa:8f:8b:37:a2:82:
                    84:65:d7:ce:0c:e0:1c:a3:d4:0b:01:10:22:c3:5d:
                    e3:1f:02:a8:b9:09:18:c2:e0:df:1c:6c:d6:d0:05:
                    15:ab:2a:be:fb:22:1d:5f:8b:b8:ee:9f:ef:67:8d:
                    51:c0:6f:60:2d:68:0b:03:a4:ac:d8:d7:79:ba:c6:
                    58:94:53:62:e9:f6:fd:38:be:eb:75:cc:9c:1e:24:
                    4a:91:89:fe:ac:d7:bf:19:5b:a1:e6:3a:36:84:ae:
                    b3:81:ba:4a:32:25:fd:02:a7:4c:f5:89:81:63:37:
                    0b:71:f0:54:f9:fb:b9:5a:7b:fa:94:18:e0:e2:d0:
                    06:e1:95:92:f4:87:02:2f:1b:20:3f:a8:41:df:59:
                    6a:3e:7f:0a:9d:60:d8:f2:2b:db:60:84:7f:25:ef:
                    4c:d8:84:43:d1:91:6a:c6:08:e7:21:d4:6c:ef:eb:
                    95:0f:5d:23:14:46:99:07:eb:cd:7f:4d:2f:4e:a4:
                    39:96:e5:09:ca:98:b4:ec:49:34:f9:ac:c6:c0:37:
                    37:53:02:8e:08:25:72:f1:fa:b4:b1:14:70:87:62:
                    e4:b1:e8:84:b5:1a:cd:13:4f:21:8b:0d:eb:86:7a:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:E0:23:00:1E:3F:8A:17:CA:F5:C7:9A:F3:DA:40:47:7A:C5:83
            X509v3 Authority Key Identifier:
                keyid:C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/3133382e3235322e31302e302f32332d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:6f:eb:ea:41:a8:de:00:63:b8:11:4b:04:d7:2a:01:a3:
         11:6c:71:21:21:9f:36:07:68:42:22:71:20:8f:56:fd:2a:11:
         58:df:d1:f1:a3:41:59:3b:86:57:a6:4b:bd:c1:16:6d:1b:36:
         70:b3:4e:90:e1:a7:4c:7c:49:2c:1a:77:5c:3a:be:88:c6:6b:
         72:99:4b:a0:8d:19:79:3d:de:5e:eb:30:25:e2:d5:18:36:8c:
         55:5a:70:aa:8f:ac:1b:5e:47:0d:09:36:b2:c1:c1:6f:46:36:
         ee:4a:55:26:47:c9:54:da:97:a9:02:9d:24:0d:f8:30:00:ba:
         80:b5:98:08:f9:04:9a:c6:8a:43:f6:72:8b:e9:3d:4f:40:d7:
         94:dc:66:1e:d8:45:b3:a3:06:bc:0b:82:6f:4d:3f:89:99:7f:
         3a:67:c0:66:8c:74:3f:9f:c7:ee:13:fe:92:f9:16:2a:cb:57:
         09:5d:26:24:b8:46:c8:c3:ac:97:81:a8:24:e7:73:37:82:cc:
         20:08:2a:be:4c:8f:87:b7:06:bc:fd:f9:54:b3:0a:99:63:90:
         83:8f:1b:b7:59:c3:7b:ce:0f:6c:3c:eb:a6:b8:a5:d3:f5:c7:
         3e:91:ff:12:0f:22:0b:fc:63:bd:a6:c5:f3:83:50:6b:0b:5c:
         96:cd:17:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 13:58:11 2026 by rpki-client