Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LINEPAYTW/1/3136312e3234382e3133342e302f32332d3234203d3e20313532363230.roa
File:                     3136312e3234382e3133342e302f32332d3234203d3e20313532363230.roa (raw, json)
Hash identifier:          1spXeB3a/aNkWrERah6qx59PsFsx1+YHf0IMtPSVz8M=
Subject key identifier:   18:94:6E:85:EF:A8:28:36:2B:EF:00:7C:AD:60:8A:57:5A:40:EF:0F
Certificate issuer:       /CN=E13D51469A6EA778368F15AA33D6FA8A8E19ABE0
Certificate serial:       6EDF149C834E5D1E47DD891E61D1B7AA86223F20
Authority key identifier: E1:3D:51:46:9A:6E:A7:78:36:8F:15:AA:33:D6:FA:8A:8E:19:AB:E0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/E13D51469A6EA778368F15AA33D6FA8A8E19ABE0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LINEPAYTW/1/3136312e3234382e3133342e302f32332d3234203d3e20313532363230.roa
Signing time:             Mon 11 May 2026 17:39:34 +0000
ROA not before:           Mon 11 May 2026 17:34:34 +0000
ROA not after:            Mon 10 May 2027 17:39:34 +0000
asID:                     152620
IP address blocks:        161.248.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LINEPAYTW/1/E13D51469A6EA778368F15AA33D6FA8A8E19ABE0.crl
                          rsync://rpkica.twnic.tw/rpki/LINEPAYTW/1/E13D51469A6EA778368F15AA33D6FA8A8E19ABE0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/E13D51469A6EA778368F15AA33D6FA8A8E19ABE0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:df:14:9c:83:4e:5d:1e:47:dd:89:1e:61:d1:b7:aa:86:22:3f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E13D51469A6EA778368F15AA33D6FA8A8E19ABE0
        Validity
            Not Before: May 11 17:34:34 2026 GMT
            Not After : May 10 17:39:34 2027 GMT
        Subject: CN=18946E85EFA828362BEF007CAD608A575A40EF0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:fb:b9:5b:c4:b7:0c:92:00:ce:a2:cb:16:
                    b1:43:b6:88:f2:6c:42:5a:45:aa:a2:4c:ec:3f:c1:
                    de:99:8d:97:ef:34:ff:02:4a:77:e5:4c:ca:a2:73:
                    a6:4a:c4:a8:bf:5b:50:e0:dc:98:0f:6c:fe:bb:dc:
                    c6:2c:ae:b5:d7:44:6e:ba:64:bb:fe:ad:84:78:e8:
                    76:4e:b0:1e:e7:cc:94:ba:8b:a0:c1:f1:fa:ef:a9:
                    cb:05:39:ae:64:3d:c3:83:b6:15:d1:30:e0:53:88:
                    8b:37:d0:d7:36:5e:47:86:3e:fc:1d:18:c1:b8:c0:
                    bc:b2:72:e2:8d:3c:17:f4:36:63:a1:90:eb:9a:cb:
                    ed:85:24:9e:68:37:18:13:35:6e:aa:b7:17:cd:35:
                    7c:6b:d2:35:09:6e:14:08:1b:22:cb:0c:4d:dd:0a:
                    a2:7e:00:84:b8:af:eb:01:70:80:36:69:60:15:7b:
                    99:74:0c:c4:2a:dd:7b:7d:74:7b:3c:cf:3f:d5:20:
                    d6:40:e2:1f:a9:9b:fe:62:a1:5e:0b:a7:28:ff:e7:
                    3d:fa:4b:17:bc:a2:d8:f9:12:c4:c8:68:60:71:24:
                    91:34:b6:71:20:2d:93:a3:1b:f1:7d:e0:52:93:7a:
                    f1:0d:6f:94:f8:4a:a6:72:4b:b1:9c:94:2a:5e:c5:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:94:6E:85:EF:A8:28:36:2B:EF:00:7C:AD:60:8A:57:5A:40:EF:0F
            X509v3 Authority Key Identifier:
                keyid:E1:3D:51:46:9A:6E:A7:78:36:8F:15:AA:33:D6:FA:8A:8E:19:AB:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LINEPAYTW/1/E13D51469A6EA778368F15AA33D6FA8A8E19ABE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/E13D51469A6EA778368F15AA33D6FA8A8E19ABE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LINEPAYTW/1/3136312e3234382e3133342e302f32332d3234203d3e20313532363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:8a:6c:74:36:06:09:e3:1a:ff:d8:cf:c4:f1:7f:b9:1f:9b:
         da:ec:0e:38:6d:12:91:ff:be:5d:88:d3:1f:9a:9c:ef:a0:66:
         62:2f:81:27:f6:d8:e7:d3:76:62:16:a1:59:e3:b8:83:79:5a:
         fe:04:ad:f3:66:9c:9f:36:ac:21:70:fb:ef:42:ca:c7:74:dc:
         e9:42:fc:3f:6b:53:08:0c:27:2c:8d:0a:dd:d5:5a:a4:5d:5b:
         01:b8:07:63:a2:a9:91:78:98:86:81:2d:30:ea:3e:ac:c7:12:
         de:61:ce:e6:b2:b5:2f:82:bf:08:80:3a:04:33:43:df:25:54:
         e0:55:92:b2:43:64:ed:ba:12:70:a5:c5:e5:ab:f9:0f:da:a8:
         ed:bb:15:0e:45:e5:e1:c8:b5:72:01:5b:d9:8b:3a:24:cf:16:
         f6:54:7d:43:41:5a:81:96:89:41:2a:e2:90:31:58:12:02:e7:
         47:04:06:71:6d:b0:be:62:0b:6a:73:12:1c:f0:01:a0:bb:ed:
         22:cc:b9:0b:98:0f:12:5d:c5:ea:3d:39:18:b7:a5:05:03:57:
         21:37:ec:21:ea:5d:4d:29:9e:e4:1f:08:b6:f3:90:3c:9b:da:
         d3:d1:7d:66:1b:4d:4f:95:47:f7:4a:21:9e:3c:0f:ba:f5:dc:
         4b:0f:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:18 2026 by rpki-client