Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NOT_TFN_CO/1/3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa
File:                     3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          2CcgEMkqiT9SKKomSlBmDsKGF4RvxfhpXN/K83M0KAs=
Subject key identifier:   70:5C:CD:E8:42:D2:EA:9E:6A:D3:E4:F5:73:6B:21:EE:12:B5:F3:B5
Certificate issuer:       /CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
Certificate serial:       33FCC2D74013A79CB8B73912C81F499F0A711D9A
Authority key identifier: 6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa
Signing time:             Mon 11 May 2026 17:38:58 +0000
ROA not before:           Mon 11 May 2026 17:33:58 +0000
ROA not after:            Mon 10 May 2027 17:38:58 +0000
asID:                     152179
IP address blocks:        160.187.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl
                          rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fc:c2:d7:40:13:a7:9c:b8:b7:39:12:c8:1f:49:9f:0a:71:1d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B
        Validity
            Not Before: May 11 17:33:58 2026 GMT
            Not After : May 10 17:38:58 2027 GMT
        Subject: CN=705CCDE842D2EA9E6AD3E4F5736B21EE12B5F3B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:ba:88:b1:19:01:ce:b6:78:03:69:b9:26:
                    da:d8:8e:80:fd:9a:bc:c7:d1:94:34:61:33:12:88:
                    a3:b3:47:5e:5a:08:22:67:23:99:b7:0a:89:f7:41:
                    fe:66:8e:89:a0:ce:2a:44:aa:d2:28:3c:d0:bc:35:
                    23:8b:fd:86:dc:97:91:60:46:61:e2:7e:a8:a5:1b:
                    ff:07:b9:15:15:82:c2:63:0f:a8:9e:0f:93:64:f3:
                    e6:de:c3:4d:83:03:93:1f:09:09:05:5c:c6:a9:ec:
                    99:87:fc:23:aa:38:83:48:b1:49:7d:3d:63:00:d1:
                    f5:c3:2a:65:6b:16:44:ea:f0:92:52:37:d0:dc:61:
                    d2:6c:63:dc:ea:c4:2d:91:f2:f2:e1:08:e5:cb:e5:
                    d4:9c:77:29:e4:10:5a:40:37:cc:48:42:72:03:f1:
                    70:bf:8b:6e:26:cd:11:da:2a:a0:82:5c:51:fe:6b:
                    f5:ab:97:85:ee:ea:e5:2d:e7:8c:81:30:1d:78:aa:
                    2a:84:f2:22:7d:44:78:35:43:cb:df:05:c7:46:3a:
                    75:bf:2b:a0:15:1e:c5:0a:c3:aa:af:b7:ea:bb:26:
                    3b:f9:41:16:e0:6c:64:4b:8e:57:ed:c0:a9:3b:24:
                    72:2b:8b:2b:ba:d5:8d:b6:30:01:c9:5b:2d:3f:fc:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5C:CD:E8:42:D2:EA:9E:6A:D3:E4:F5:73:6B:21:EE:12:B5:F3:B5
            X509v3 Authority Key Identifier:
                keyid:6C:FA:A0:AD:4A:E8:EE:0B:42:09:19:09:FA:44:C7:FF:31:B7:46:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/6CFAA0AD4AE8EE0B42091909FA44C7FF31B7465B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NOT_TFN_CO/1/3136302e3138372e3130302e302f32332d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:04:cd:46:d4:e5:9a:70:a9:7f:9b:57:9c:be:66:15:5f:58:
         9b:6e:85:38:6f:a9:60:98:04:9c:5a:d1:cb:7b:06:c3:2d:a0:
         14:e9:be:8e:d3:b7:6c:31:86:63:1f:35:a6:95:cf:68:d0:3b:
         4f:45:d4:53:8a:5d:99:dc:eb:82:00:f9:d7:87:28:6f:b2:be:
         aa:59:43:76:38:81:a3:0f:9f:ad:73:aa:7a:43:ea:26:82:0a:
         dc:30:cf:05:b7:c4:96:ea:83:ac:7c:e0:8a:13:c7:e3:8e:b5:
         c8:fc:23:c6:a0:1b:84:ee:8f:26:90:4e:9e:ad:b3:98:4e:8a:
         49:19:ea:cd:93:17:8f:ef:23:89:2b:bf:93:bf:84:4d:6c:9a:
         c8:d8:a5:55:6a:11:18:b0:96:a2:47:e6:10:2d:d9:1d:6a:18:
         3c:66:00:0c:77:6d:e4:7c:4f:2b:17:b8:c4:45:88:13:5f:9a:
         a6:5e:3e:67:7a:a7:cd:cc:26:0b:12:57:c7:98:5f:b5:f2:8f:
         7f:6b:87:46:7f:a7:ed:0d:eb:6c:4a:db:69:2c:1f:0a:43:4e:
         b6:d0:8b:e4:30:c9:7c:2b:9c:d3:49:bc:15:c7:2d:11:22:05:
         f2:67:0c:5a:d0:f5:78:28:36:7d:fd:7c:56:b5:a8:4b:e6:44:
         f7:97:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:07:05 2026 by rpki-client