Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa
File:                     3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (raw, json)
Hash identifier:          5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=
Subject key identifier:   25:72:5C:AE:5F:E6:55:89:EB:4C:DD:C2:04:D4:7D:AE:85:E8:D6:D1
Certificate issuer:       /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Certificate serial:       6A1522EE2F3171AB5795205065A36E8E6B318587
Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa
Signing time:             Mon 11 May 2026 17:58:47 +0000
ROA not before:           Mon 11 May 2026 17:53:47 +0000
ROA not after:            Mon 10 May 2027 17:58:47 +0000
asID:                     18416
IP address blocks:        138.252.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
                          rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:15:22:ee:2f:31:71:ab:57:95:20:50:65:a3:6e:8e:6b:31:85:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
        Validity
            Not Before: May 11 17:53:47 2026 GMT
            Not After : May 10 17:58:47 2027 GMT
        Subject: CN=25725CAE5FE65589EB4CDDC204D47DAE85E8D6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:a9:52:8a:1a:c1:58:62:ff:de:ca:79:d4:
                    9d:02:5b:f5:2f:0c:61:0b:80:92:7d:2f:84:ac:cd:
                    4c:eb:2b:19:37:b0:2a:a1:3f:1b:b4:3d:9e:74:fb:
                    18:4d:ac:86:18:6e:8f:76:b0:b6:db:e2:92:98:28:
                    0d:14:86:69:35:74:7a:76:27:1d:6a:a2:3a:f9:af:
                    09:58:54:e0:43:2a:11:25:5e:4d:b0:e1:db:4b:1e:
                    7e:a0:ae:4e:6f:b2:1b:60:f1:ec:61:41:0f:1a:57:
                    21:96:7e:bc:dd:dc:c8:3f:c9:fb:d7:ee:f4:93:35:
                    85:a5:5b:5b:6b:e1:9f:51:3d:62:bf:9a:6f:96:91:
                    a6:cc:3a:0c:5e:33:2e:dd:25:f2:8a:52:eb:7a:df:
                    10:63:11:af:1d:14:9e:a9:fe:f0:44:30:aa:a0:ab:
                    18:62:3f:15:b5:34:57:39:f8:5e:37:2e:90:db:ca:
                    fb:cc:d3:33:9a:93:b4:65:62:8a:10:93:4a:5f:f6:
                    c7:0a:e1:4c:a3:0d:ab:c6:02:ca:b1:cd:ec:87:d8:
                    a2:de:22:b8:e4:1c:aa:1b:b0:e4:3c:20:f4:1d:2c:
                    37:fb:3b:62:69:15:24:80:b9:ae:df:2b:32:15:a3:
                    22:b4:4d:07:50:13:98:34:e6:ed:ef:06:e5:b6:46:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:72:5C:AE:5F:E6:55:89:EB:4C:DD:C2:04:D4:7D:AE:85:E8:D6:D1
            X509v3 Authority Key Identifier:
                keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:c4:5c:86:f7:6b:86:46:21:a4:88:96:db:bb:59:25:65:60:
         76:84:0c:ae:75:0a:77:36:07:d3:fa:09:b4:6e:59:db:1a:08:
         16:83:8b:90:a8:d0:45:d6:8b:94:68:1c:21:a0:10:6e:0d:3a:
         30:eb:8f:5e:bb:15:80:f9:4b:59:c2:c3:f6:3c:3f:46:23:4a:
         0b:74:8d:bf:f9:23:25:1e:b0:9a:d4:c9:68:8f:ae:40:9c:19:
         b8:ca:be:7d:c9:86:63:7d:15:b8:87:dd:7d:89:2e:3e:eb:0f:
         c5:fb:3d:b2:08:5e:48:bc:69:d8:2c:6f:6a:51:28:c1:7d:73:
         4a:f3:ae:e6:a3:04:8e:91:2b:d2:78:dd:dc:95:ab:cc:5c:9e:
         2b:a3:52:db:46:71:1a:6f:27:ac:da:54:af:98:dd:c1:c6:f7:
         4e:ba:0b:5d:8c:7b:63:d3:7b:d1:67:76:f2:da:03:7c:22:1d:
         19:84:d8:67:91:21:5b:9c:4c:02:ab:3c:81:9a:f8:bc:a8:6a:
         9e:1a:ac:2e:75:17:ab:8d:04:da:77:f5:af:3a:d2:a2:8f:16:
         8d:24:20:29:87:27:d1:9a:6e:d8:d0:d4:14:30:b6:a4:0b:13:
         9c:e7:f1:c7:ec:d7:f4:a2:30:90:f6:b0:46:6c:38:ad:d3:f4:
         8d:24:0c:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:20 2026 by rpki-client