Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LONGDETECH/1/3133382e3235322e35352e302f32342d3332203d3e20313331363537.roa
File:                     3133382e3235322e35352e302f32342d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          L2w0pUblX61DcXZqdgTa+sJe3XhYbMwhiRPol602u9I=
Subject key identifier:   95:5E:49:DF:D8:97:C5:1E:00:EE:70:28:40:4F:97:1D:8E:E0:07:8B
Certificate issuer:       /CN=65802AFA3A589A07637F32B017F67FDE17419D66
Certificate serial:       69362F1B49C265CDC2308214B2B89D7DEFFB6625
Authority key identifier: 65:80:2A:FA:3A:58:9A:07:63:7F:32:B0:17:F6:7F:DE:17:41:9D:66
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/3133382e3235322e35352e302f32342d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:55:54 +0000
ROA not before:           Mon 11 May 2026 17:50:54 +0000
ROA not after:            Mon 10 May 2027 17:55:54 +0000
asID:                     131657
IP address blocks:        138.252.55.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.crl
                          rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:36:2f:1b:49:c2:65:cd:c2:30:82:14:b2:b8:9d:7d:ef:fb:66:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65802AFA3A589A07637F32B017F67FDE17419D66
        Validity
            Not Before: May 11 17:50:54 2026 GMT
            Not After : May 10 17:55:54 2027 GMT
        Subject: CN=955E49DFD897C51E00EE7028404F971D8EE0078B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:84:7e:15:a4:f6:a2:86:7b:49:69:25:ee:
                    1f:10:2a:c3:24:9f:44:66:a8:6a:67:f9:21:9f:f2:
                    5d:7a:02:9f:af:90:d6:7b:3b:71:2e:8c:87:82:3f:
                    54:75:82:38:c7:f0:f0:4d:f5:a3:b7:ac:c6:88:2b:
                    a4:a4:70:b2:56:ee:4a:b9:29:a8:ff:14:6c:f0:26:
                    10:73:8f:a1:80:23:6c:e1:73:1c:df:0f:56:25:2c:
                    21:b1:12:db:7f:4f:43:64:7b:f0:4d:f0:b8:50:bf:
                    48:5d:be:cb:97:c8:fd:ac:ef:a5:3b:f8:ce:10:6e:
                    7d:89:11:65:c1:f4:3d:a3:06:98:db:e0:6c:a9:58:
                    7a:04:ad:99:29:dc:b8:1f:21:64:bf:77:9c:f5:ed:
                    52:6d:35:bc:5e:30:92:b4:a0:d3:5b:02:22:d0:4f:
                    31:0e:92:7d:6f:1a:4a:c1:1b:71:20:03:2c:d5:13:
                    8c:7c:e9:b1:24:c5:00:22:fb:02:50:27:0d:09:dc:
                    18:5e:47:6f:38:5b:10:77:d0:db:b3:3d:4f:1f:ed:
                    e2:1c:fa:97:19:f6:1c:83:ab:9d:3a:bd:b1:98:e7:
                    35:d8:10:08:0f:08:63:7d:80:01:1e:fd:5f:ba:2a:
                    e3:a1:10:11:aa:c3:21:5e:0c:b8:ab:0c:17:eb:4c:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5E:49:DF:D8:97:C5:1E:00:EE:70:28:40:4F:97:1D:8E:E0:07:8B
            X509v3 Authority Key Identifier:
                keyid:65:80:2A:FA:3A:58:9A:07:63:7F:32:B0:17:F6:7F:DE:17:41:9D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/65802AFA3A589A07637F32B017F67FDE17419D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65802AFA3A589A07637F32B017F67FDE17419D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LONGDETECH/1/3133382e3235322e35352e302f32342d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:dd:fc:59:58:91:79:92:1e:7d:15:4d:29:3b:05:6a:40:3a:
         45:98:f4:58:97:35:92:cb:bf:40:e1:43:b0:38:0e:88:31:0e:
         99:7a:04:42:30:5b:f5:9a:fa:32:4c:5e:29:3d:8f:b6:f5:a3:
         7c:6e:84:4d:80:40:fb:55:03:7e:c3:9c:32:97:5d:99:78:c3:
         6a:8b:12:e4:75:fc:be:98:e9:45:78:c7:93:39:b0:84:9f:40:
         b6:79:8b:aa:15:f1:64:9f:64:cb:95:27:00:32:85:3e:44:96:
         c9:45:b1:42:47:7a:c9:7f:3f:c0:e8:b6:11:e7:b6:82:50:03:
         98:3d:8f:d2:80:88:d9:df:42:96:d8:f1:dd:d2:27:30:8e:65:
         be:ed:ba:e7:00:3c:ee:9d:45:ce:b5:ba:c7:5c:d6:6d:82:ce:
         38:65:69:de:a1:da:e9:2e:f9:bd:0d:31:b5:69:9b:62:5c:45:
         8c:96:a7:8b:34:8f:00:21:1e:b7:87:14:39:5f:26:54:88:a9:
         d6:b9:33:98:4a:d3:83:18:cc:da:8c:a4:1e:f8:c6:1e:c4:ed:
         18:d5:0a:20:54:e0:23:35:73:75:84:7f:42:88:73:d4:37:c3:
         82:4d:7b:fc:eb:17:12:77:33:bf:0d:f0:1d:7e:e8:9f:45:18:
         aa:68:f6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:45 2026 by rpki-client