Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKGAME/1/3133382e3235322e31302e302f32332d3332203d3e20313334383233.roa
File:                     3133382e3235322e31302e302f32332d3332203d3e20313334383233.roa (raw, json)
Hash identifier:          5cIOw3g/g20yz7r/SJ1iESfORTQzMExyZEDbDIUjIdA=
Subject key identifier:   F4:8E:D3:90:16:80:83:3C:F4:D3:CE:A4:C9:BA:4F:D4:5D:70:02:DF
Certificate issuer:       /CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
Certificate serial:       3B1C795E66A3EFFE578A9D5644CA624D1D54A6C2
Authority key identifier: C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKGAME/1/3133382e3235322e31302e302f32332d3332203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:55:39 +0000
ROA not before:           Mon 11 May 2026 17:50:39 +0000
ROA not after:            Mon 10 May 2027 17:55:39 +0000
asID:                     134823
IP address blocks:        138.252.10.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl
                          rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1c:79:5e:66:a3:ef:fe:57:8a:9d:56:44:ca:62:4d:1d:54:a6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7A0D98CE36B00D5E90FF67492BC464551A145CB
        Validity
            Not Before: May 11 17:50:39 2026 GMT
            Not After : May 10 17:55:39 2027 GMT
        Subject: CN=F48ED3901680833CF4D3CEA4C9BA4FD45D7002DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e6:b9:73:f0:63:9a:71:5a:a1:dd:c5:4d:cb:
                    74:5b:1d:c8:df:80:d9:f8:d8:c6:29:f2:28:2f:81:
                    43:d3:26:08:7b:3f:0c:61:68:7a:cf:cb:63:be:ff:
                    a6:d1:6f:be:a5:25:22:4d:0d:c7:9a:1b:8d:65:e8:
                    82:77:c5:8d:48:c3:04:39:2d:ff:b5:1d:6b:ff:4b:
                    60:cf:5b:87:88:62:75:bd:f7:c0:e4:96:cc:28:1c:
                    d1:fc:32:49:d0:dd:f4:29:2a:00:fe:f5:7b:93:aa:
                    3e:ab:1a:cb:72:d7:f5:c8:f5:5f:b1:d2:e6:10:50:
                    2c:f4:3a:91:12:52:f9:1d:2a:c3:0c:37:80:13:18:
                    60:82:ff:37:fa:97:00:0e:54:56:54:3b:2e:34:0c:
                    9d:f1:15:70:f0:d2:62:68:cc:e4:48:9f:39:4c:28:
                    75:e6:b9:c8:79:36:0c:bc:b5:d0:84:87:d3:a7:25:
                    3d:09:3a:6b:11:a4:27:c0:7e:2c:64:8f:21:15:ed:
                    ef:f2:38:2a:34:69:dd:d4:74:45:f3:16:be:77:ae:
                    0f:09:1e:12:da:ac:33:b6:da:9d:b2:21:7d:83:a2:
                    e8:66:d1:e6:d7:4c:0e:67:95:74:b0:85:ec:83:ad:
                    43:02:68:ab:2d:2a:95:ae:77:92:aa:cf:ee:28:45:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8E:D3:90:16:80:83:3C:F4:D3:CE:A4:C9:BA:4F:D4:5D:70:02:DF
            X509v3 Authority Key Identifier:
                keyid:C7:A0:D9:8C:E3:6B:00:D5:E9:0F:F6:74:92:BC:46:45:51:A1:45:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/C7A0D98CE36B00D5E90FF67492BC464551A145CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C7A0D98CE36B00D5E90FF67492BC464551A145CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/1/3133382e3235322e31302e302f32332d3332203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:00:31:9d:c5:e3:9f:9f:7f:52:b7:4e:37:19:80:dc:2c:4c:
         96:71:4e:21:c4:13:eb:37:08:34:50:ad:e9:2b:9c:73:a9:d4:
         87:57:4e:e6:19:b7:d4:9d:a9:1b:c4:a9:a9:bb:ba:9d:71:da:
         30:e8:0d:59:1e:35:b7:28:6f:0a:b7:91:97:94:5b:cb:e7:78:
         52:94:63:f9:66:36:9b:3e:b0:e8:53:ca:73:80:72:fc:b5:3c:
         5f:b5:d7:4a:a1:96:dc:80:76:c9:81:c7:a3:5b:13:28:70:ae:
         45:52:d8:9c:b5:4d:ea:df:04:19:3c:14:90:40:d8:74:df:3b:
         3b:7f:85:64:7c:7b:4c:9a:fa:d3:32:f1:78:7c:79:3c:e3:20:
         79:55:6a:d5:ee:3a:1b:c7:62:e8:d2:8f:1b:22:b4:0a:a0:44:
         75:68:b0:76:f5:df:dc:aa:c1:6f:a2:0a:79:0a:f2:a6:27:25:
         12:33:21:af:8d:13:c2:0c:fc:1a:4e:72:93:27:34:49:64:5a:
         da:0e:70:f8:bc:54:aa:1f:3b:fa:ec:b2:1d:3b:68:43:d9:0e:
         f4:24:21:60:4d:40:61:3b:d2:13:8f:2e:3a:c7:40:35:17:bd:
         e6:b7:ba:7d:15:31:73:1f:91:cb:30:d7:88:b4:c2:d3:e9:1b:
         1f:f6:b9:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:21 2026 by rpki-client