Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa
File:                     3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa (raw, json)
Hash identifier:          mrGHrLU6IhLiSFGZj4xNfph3sl5DRFLwfN+J+P0jaGY=
Subject key identifier:   34:6E:43:13:A7:89:26:56:FD:7E:63:7B:24:1B:6F:4B:16:B4:57:37
Certificate issuer:       /CN=4F029ED27C82844F72C10999E3E77841D888E8A5
Certificate serial:       4D6B9E302D9C3248C0B31CF8129BD4712CA5B830
Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa
Signing time:             Mon 11 May 2026 17:58:30 +0000
ROA not before:           Mon 11 May 2026 17:53:30 +0000
ROA not after:            Mon 10 May 2027 17:58:30 +0000
asID:                     150766
IP address blocks:        157.66.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl
                          rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6b:9e:30:2d:9c:32:48:c0:b3:1c:f8:12:9b:d4:71:2c:a5:b8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5
        Validity
            Not Before: May 11 17:53:30 2026 GMT
            Not After : May 10 17:58:30 2027 GMT
        Subject: CN=346E4313A7892656FD7E637B241B6F4B16B45737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:1d:fc:5c:ad:1c:8b:59:5c:a2:dc:45:cf:
                    4c:85:0b:ce:0c:31:d9:08:6e:fa:34:a4:75:3c:09:
                    2f:a4:66:1b:f1:2c:50:a1:0f:86:98:6e:a9:52:ea:
                    27:65:ab:ef:fb:3a:6f:39:01:41:7a:c0:78:ce:48:
                    2d:4c:99:e7:42:15:54:60:f1:98:f3:43:5e:f2:c6:
                    89:99:7d:74:32:b0:53:eb:c6:ea:15:28:10:9b:a1:
                    b4:af:d5:9f:07:5a:5b:77:e8:73:09:e6:3b:ad:c6:
                    1f:6c:34:dc:1c:1b:95:d0:cf:10:62:d2:45:f1:ba:
                    04:59:b2:ca:68:9d:09:0b:5f:3f:30:cf:56:70:3d:
                    4c:43:5e:d4:a3:5d:ed:1e:a4:ed:69:c9:52:35:34:
                    87:d5:d5:04:09:83:db:1e:0f:42:c8:4a:a0:41:5e:
                    8b:8f:95:8f:6c:cb:fc:da:0b:22:4b:87:10:62:c2:
                    c6:5b:ea:1b:17:71:e9:cd:50:13:84:bc:10:e7:00:
                    17:b2:ff:e2:91:13:7e:d4:33:fc:28:63:db:f2:4e:
                    31:18:20:1e:70:5e:bf:8d:ef:54:29:fd:54:2b:11:
                    0f:52:ae:3b:29:6d:65:1d:e3:4e:74:f5:1a:47:7b:
                    64:d4:34:3f:d3:c2:e6:6e:26:a5:5d:d2:fd:df:0e:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6E:43:13:A7:89:26:56:FD:7E:63:7B:24:1B:6F:4B:16:B4:57:37
            X509v3 Authority Key Identifier:
                keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136362e302f32332d3234203d3e20313530373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:24:c2:6f:02:f4:bd:ce:29:49:3b:6d:7e:a2:72:32:9d:52:
         45:0b:71:f0:67:50:eb:53:b9:9f:38:aa:b3:87:a9:a0:0e:30:
         aa:00:12:af:2d:7f:03:88:19:de:ac:b4:3f:ef:be:b1:8e:51:
         ad:03:ef:6d:f4:85:60:95:22:81:8e:34:92:4e:40:ad:d6:4b:
         ab:67:38:6e:af:db:da:5c:0c:ce:25:8e:bc:3a:2a:44:15:fc:
         3d:c2:c8:3a:4e:36:7a:87:d4:6b:ca:bc:a0:e0:9a:60:40:1d:
         cb:4f:1b:9c:01:9a:01:bf:b2:cd:8c:a9:d0:ef:9e:70:84:94:
         6d:8c:8f:ba:5a:7d:bb:2b:08:d8:e3:18:5b:30:42:c4:d6:48:
         17:6a:8d:db:00:67:e2:5e:93:73:c4:a9:43:22:c6:eb:9e:4d:
         38:2f:4e:f4:41:d3:00:bb:a9:5e:b5:36:36:ae:f0:83:6c:8a:
         97:f8:3b:8d:86:fe:53:11:90:02:14:62:1a:dd:49:4f:e3:f2:
         74:f8:36:d4:5c:5e:d9:bc:18:fb:19:63:39:13:7e:62:ac:5e:
         51:4f:13:8c:35:75:e7:de:d7:dc:f0:0c:5d:22:74:ba:83:94:
         a8:75:b2:cd:2d:55:2d:a8:48:56:d8:42:bb:a5:86:e1:25:01:
         b3:b2:b0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:58 2026 by rpki-client