Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS136543.roa
File:                     AS136543.roa (raw, json)
Hash identifier:          RWXawWfvf0DRJJfNkWgX4D2JbT4AUoTW2TGEwl6lqV8=
Subject key identifier:   2E:06:36:2F:54:DD:C3:CF:5E:86:A2:3F:C3:05:9C:AC:87:94:FF:DE
Certificate issuer:       /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
Certificate serial:       555C6493ED8448CBC1E11925C46C8B8147239297
Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCIC/0/AS136543.roa
Signing time:             Mon 11 May 2026 17:10:27 +0000
ROA not before:           Mon 11 May 2026 17:05:27 +0000
ROA not after:            Mon 10 May 2027 17:10:27 +0000
asID:                     136543
IP address blocks:        115.30.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl
                          rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5c:64:93:ed:84:48:cb:c1:e1:19:25:c4:6c:8b:81:47:23:92:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB
        Validity
            Not Before: May 11 17:05:27 2026 GMT
            Not After : May 10 17:10:27 2027 GMT
        Subject: CN=2E06362F54DDC3CF5E86A23FC3059CAC8794FFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:9a:79:34:bc:83:a6:17:d6:f7:4b:70:1d:
                    76:75:b7:db:30:1a:0c:e7:c6:27:1d:13:f0:84:2e:
                    3a:e2:37:99:ad:fe:ee:13:05:42:fc:e8:b8:01:f9:
                    3d:1d:b7:24:cc:83:63:ec:81:e9:0e:6b:3f:34:1b:
                    fe:ab:6b:d3:e1:fe:e2:13:be:39:1d:50:8e:dc:52:
                    81:0e:a8:dc:d5:b0:cb:d7:aa:b3:f6:3a:a5:ab:37:
                    c7:b6:e1:be:68:a2:e8:15:f0:1d:01:19:90:d3:1d:
                    79:de:ea:d1:5d:8c:8b:22:bc:4b:60:20:1b:69:2d:
                    b8:47:d1:8c:84:4e:c9:fb:5a:95:2a:7e:b2:88:c2:
                    23:21:04:dd:bb:ff:91:1c:46:76:ad:07:ac:00:71:
                    ae:dc:a1:d8:7a:e0:d0:52:39:6c:4d:63:b7:17:b8:
                    d9:16:a6:e4:b4:69:c8:dd:71:89:e4:55:25:70:e5:
                    77:5f:e3:03:6e:37:b1:03:7c:a2:fa:08:c1:eb:31:
                    27:6d:dc:40:6c:4a:30:eb:16:80:4a:1a:92:e1:97:
                    c1:38:78:c8:b6:1e:0b:00:ea:c4:09:47:84:1d:dc:
                    10:72:61:3c:65:e0:32:f9:7c:fc:84:b2:b4:73:34:
                    77:be:16:c2:10:8f:a6:fe:f4:81:ce:38:1b:b3:92:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:36:2F:54:DD:C3:CF:5E:86:A2:3F:C3:05:9C:AC:87:94:FF:DE
            X509v3 Authority Key Identifier:
                keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS136543.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:27:99:e0:95:f0:5c:5b:f6:43:00:80:4a:3c:5d:4e:15:9b:
         67:9d:3a:cc:e9:4f:2a:66:48:e0:2a:73:00:83:ea:d8:0b:66:
         20:03:f8:61:b6:db:71:25:4b:e2:65:1c:46:11:79:9f:fd:76:
         25:10:ef:53:bc:60:3d:ba:95:66:7a:65:80:ac:f8:b6:3d:d5:
         dd:e5:6d:8d:ff:6a:05:a3:12:04:30:d9:5d:5f:20:10:f9:e4:
         39:c2:73:f1:cb:23:66:04:c6:2b:20:ac:91:8d:73:6f:aa:42:
         c4:72:63:ad:20:12:49:89:ea:32:25:43:71:1e:c4:79:de:07:
         ab:7a:05:87:87:df:e3:f1:68:2a:1a:f3:2d:b1:9f:41:a5:2a:
         58:ab:a5:01:e8:b2:56:fc:8a:05:99:d1:d9:f3:e7:52:43:92:
         b2:2e:80:bf:b2:04:bc:b9:d6:21:4b:d0:6c:11:cc:24:12:6d:
         3f:64:01:2f:a0:00:78:f8:29:84:85:7b:db:83:99:8c:32:13:
         59:47:be:81:93:a3:46:d3:6c:84:1f:a2:d9:cb:e2:16:77:87:
         90:65:9c:55:c4:7c:da:46:f1:f8:bf:b8:b5:d5:b2:75:f7:f5:
         c1:09:fc:fb:05:de:05:4c:d5:76:b5:e0:b5:be:38:99:33:28:
         f6:3a:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:31 2026 by rpki-client