Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LONGDETECH/1/3133382e3235322e35342e302f32332d3332203d3e20313331363537.roa
File:                     3133382e3235322e35342e302f32332d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          5LItgaayJxHkj/deDp3GnRuJMJnma+MAEQQemfZQ6e4=
Subject key identifier:   37:D6:FA:0F:78:18:34:F1:3C:CC:55:68:D4:26:D1:2A:3B:A6:C7:9C
Certificate issuer:       /CN=65802AFA3A589A07637F32B017F67FDE17419D66
Certificate serial:       73A037C0860D3AF75BBA891FFA0C32C6C93D3623
Authority key identifier: 65:80:2A:FA:3A:58:9A:07:63:7F:32:B0:17:F6:7F:DE:17:41:9D:66
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/3133382e3235322e35342e302f32332d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:55:52 +0000
ROA not before:           Mon 11 May 2026 17:50:52 +0000
ROA not after:            Mon 10 May 2027 17:55:52 +0000
asID:                     131657
IP address blocks:        138.252.54.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.crl
                          rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:37:c0:86:0d:3a:f7:5b:ba:89:1f:fa:0c:32:c6:c9:3d:36:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65802AFA3A589A07637F32B017F67FDE17419D66
        Validity
            Not Before: May 11 17:50:52 2026 GMT
            Not After : May 10 17:55:52 2027 GMT
        Subject: CN=37D6FA0F781834F13CCC5568D426D12A3BA6C79C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:e9:b3:93:33:fb:61:86:4d:1d:26:e1:88:
                    a3:17:37:cf:d5:a9:dd:bb:a2:2c:a6:60:53:89:4f:
                    de:01:01:f1:ae:0a:a8:7c:5c:b9:4e:ed:ec:c6:a1:
                    3a:c9:ca:39:78:81:5e:0f:0b:14:58:6d:32:8f:01:
                    8d:98:03:6d:b3:b3:97:cf:8e:14:13:6a:1d:bf:e7:
                    ba:79:b0:1b:79:ac:40:3f:bf:ea:5a:d6:0f:10:43:
                    12:f6:ae:4e:a9:37:d7:7e:bc:f1:26:75:bc:87:ac:
                    d6:9d:29:43:f7:eb:a8:08:70:bd:b4:6e:aa:a4:34:
                    3f:5d:fc:21:cb:8f:85:90:7c:33:1c:40:cf:25:57:
                    17:dc:e8:ad:fc:2b:76:a3:3b:03:20:89:39:ba:d0:
                    28:aa:45:44:44:62:c1:49:ee:29:a0:1c:22:94:ff:
                    c5:9a:5b:38:b7:61:1b:59:c4:29:be:de:00:73:b9:
                    f3:15:ae:28:68:cf:8e:32:39:12:83:4c:a9:c2:9f:
                    1c:de:98:d0:09:e8:f5:f1:9e:8a:f9:ea:07:46:55:
                    f1:be:87:7c:a4:93:2c:bf:13:e5:a6:f2:48:35:09:
                    d2:75:d2:f6:81:38:dc:85:32:0c:50:12:16:93:70:
                    2d:92:d3:ac:69:0a:3c:13:23:b1:68:38:54:0c:8d:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D6:FA:0F:78:18:34:F1:3C:CC:55:68:D4:26:D1:2A:3B:A6:C7:9C
            X509v3 Authority Key Identifier:
                keyid:65:80:2A:FA:3A:58:9A:07:63:7F:32:B0:17:F6:7F:DE:17:41:9D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/3133382e3235322e35342e302f32332d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:1b:b3:28:f1:2f:89:7f:70:79:89:c0:aa:3a:6a:f2:0d:a5:
         47:a4:88:e3:4b:96:cd:c7:b6:81:e7:58:07:2a:59:c7:b1:b7:
         2b:1c:ef:03:9a:fa:71:1c:00:27:70:ec:37:bd:1d:0f:fe:fe:
         ce:41:e9:2b:3f:53:94:a4:d6:99:4c:00:3e:6f:5b:aa:5d:4d:
         e9:26:aa:c6:76:f4:24:62:e9:6a:4f:14:dc:c1:c1:97:a0:80:
         a4:5d:99:e5:97:76:82:d8:01:14:d3:f3:19:fd:c2:1b:c4:26:
         df:6c:23:cd:72:f7:4b:ab:7e:9f:27:0b:1d:98:da:df:f9:a8:
         d0:fc:8e:6b:b4:3b:93:0a:5c:0a:ff:ce:f7:3d:95:d8:5e:f0:
         22:73:ea:03:25:38:b1:15:9c:4a:45:5a:a2:f1:94:29:67:e4:
         a7:0f:90:27:7e:a9:ed:da:da:ce:80:d5:66:94:71:bd:45:84:
         90:ed:5c:83:52:ee:a1:a3:30:10:54:01:ad:59:2c:fa:38:ac:
         a1:f9:ea:ca:a0:da:0e:b5:12:6d:75:39:21:be:09:4b:dd:84:
         a5:63:10:b5:fd:3a:36:eb:96:0e:04:a1:5b:ac:27:51:df:db:
         8f:0d:a0:7a:07:fc:89:81:2c:14:06:9a:bf:4f:89:77:99:a7:
         27:dc:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:56 2026 by rpki-client