Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGDING/1/3136352e3130312e38362e302f32332d3234203d3e20313532313739.roa
File:                     3136352e3130312e38362e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          Y4PZP14tJCK7MmTbM230zXm6HZDKrsi1V3k9WtO8MoU=
Subject key identifier:   06:4B:B8:D8:6A:A6:39:1E:9D:0F:0D:C7:3B:DC:94:62:40:DC:C4:B7
Certificate issuer:       /CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
Certificate serial:       40311D016394C78B47EA3A0F0223DDECD3D4F140
Authority key identifier: 54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGDING/1/3136352e3130312e38362e302f32332d3234203d3e20313532313739.roa
Signing time:             Mon 11 May 2026 17:45:01 +0000
ROA not before:           Mon 11 May 2026 17:40:01 +0000
ROA not after:            Mon 10 May 2027 17:45:01 +0000
asID:                     152179
IP address blocks:        165.101.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.crl
                          rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:1d:01:63:94:c7:8b:47:ea:3a:0f:02:23:dd:ec:d3:d4:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54A767F70005E532FFA8B9DDE3FA21A08AB2071B
        Validity
            Not Before: May 11 17:40:01 2026 GMT
            Not After : May 10 17:45:01 2027 GMT
        Subject: CN=064BB8D86AA6391E9D0F0DC73BDC946240DCC4B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:dd:cc:74:85:b8:76:ca:3e:34:ed:53:21:
                    dc:05:f7:87:8e:78:63:63:48:00:3c:c0:32:5d:c2:
                    2c:13:83:78:4c:07:10:ab:18:27:00:3e:d8:46:74:
                    f3:d4:20:3f:47:a6:b5:3d:ea:03:9b:0c:12:51:21:
                    28:d0:bd:95:75:25:39:51:ac:69:0d:5f:c8:db:0e:
                    bf:72:b0:df:02:36:06:a7:1c:3c:ab:c5:86:e0:1b:
                    f7:41:de:dd:46:62:d5:0a:27:45:20:7e:b9:f9:01:
                    c3:c7:de:e2:a3:64:b2:ac:b6:75:0f:3f:fb:ed:dc:
                    1b:f1:68:89:77:72:fb:92:17:da:7a:59:51:fc:18:
                    4e:bc:72:8f:b3:0f:82:e8:de:32:42:68:f7:d1:ef:
                    97:90:9e:a1:82:b7:17:b9:92:ce:b7:42:5c:22:69:
                    73:2f:56:c2:06:90:87:2b:ff:ed:18:8b:84:60:7e:
                    d8:c7:4b:97:4a:48:57:06:b7:5c:f2:1b:ad:4b:0b:
                    28:14:0d:ce:b4:0f:06:0f:ea:94:74:2c:1b:c6:6a:
                    82:a4:6c:2c:47:b6:b2:66:fd:2a:44:6b:a2:35:e0:
                    cd:c5:fa:06:84:16:8f:2c:4a:b7:18:93:fa:3e:fb:
                    c2:94:5e:f4:e9:5d:88:96:40:28:85:a9:67:29:bb:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4B:B8:D8:6A:A6:39:1E:9D:0F:0D:C7:3B:DC:94:62:40:DC:C4:B7
            X509v3 Authority Key Identifier:
                keyid:54:A7:67:F7:00:05:E5:32:FF:A8:B9:DD:E3:FA:21:A0:8A:B2:07:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/54A767F70005E532FFA8B9DDE3FA21A08AB2071B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGDING/1/3136352e3130312e38362e302f32332d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:1c:49:09:9a:7f:d9:4a:10:2c:81:9c:58:30:a2:01:c1:
         6b:d4:05:2a:d3:14:b8:0e:a6:93:82:46:f9:f1:03:f2:8f:89:
         80:45:56:fe:c2:95:e6:53:be:d5:5c:53:a9:9c:bc:b4:4a:37:
         ec:50:61:4e:c8:55:51:43:0b:0c:45:91:63:43:95:36:49:cf:
         f8:9c:ff:5d:6c:70:b5:46:a0:a2:36:5b:99:cf:08:79:60:88:
         39:21:c7:f6:92:39:a1:d4:c6:96:92:4b:94:b8:41:a4:c6:cc:
         4a:cc:f1:42:b3:b6:86:f0:3b:b5:64:b0:7f:8c:46:2e:1f:25:
         86:1b:44:bc:a7:84:79:ff:21:ca:c9:8a:d3:83:e5:2e:6c:99:
         b5:9a:a5:05:c3:77:64:7d:6a:d4:4c:43:0e:64:aa:4d:6c:f7:
         f6:f3:e7:b3:f1:c4:f3:fa:f8:85:6d:44:d2:0c:5e:9a:40:2f:
         64:94:73:6d:81:b0:96:13:d9:4a:15:1e:8d:c8:73:4e:75:32:
         75:9e:be:8f:49:91:6d:80:81:f4:63:a1:c0:1b:4f:72:31:e7:
         33:b7:45:8e:82:71:89:56:c2:b3:8a:be:b0:30:69:10:c8:92:
         54:08:26:ee:1f:7a:1f:41:00:64:56:a6:75:f0:b5:02:eb:16:
         04:21:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:59 2026 by rpki-client