Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/RUIKE/1/3136352e3130312e38382e302f32332d3234203d3e20313532313739.roa
File:                     3136352e3130312e38382e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          uwjPzEiZg5US2WfzB/Dl8OBvnEpcY8FBzW0f+M2I97o=
Subject key identifier:   7D:1D:5E:8B:76:49:08:5B:AD:6A:1D:DC:77:4A:E1:A0:03:54:85:3E
Certificate issuer:       /CN=80A82353C115BEBF549584A0A7933571A8A20790
Certificate serial:       2BE18093530AF4A480AD11A3A196FF4F0D868C1D
Authority key identifier: 80:A8:23:53:C1:15:BE:BF:54:95:84:A0:A7:93:35:71:A8:A2:07:90
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/80A82353C115BEBF549584A0A7933571A8A20790.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RUIKE/1/3136352e3130312e38382e302f32332d3234203d3e20313532313739.roa
Signing time:             Mon 11 May 2026 17:45:03 +0000
ROA not before:           Mon 11 May 2026 17:40:03 +0000
ROA not after:            Mon 10 May 2027 17:45:03 +0000
asID:                     152179
IP address blocks:        165.101.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.crl
                          rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/80A82353C115BEBF549584A0A7933571A8A20790.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e1:80:93:53:0a:f4:a4:80:ad:11:a3:a1:96:ff:4f:0d:86:8c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A82353C115BEBF549584A0A7933571A8A20790
        Validity
            Not Before: May 11 17:40:03 2026 GMT
            Not After : May 10 17:45:03 2027 GMT
        Subject: CN=7D1D5E8B7649085BAD6A1DDC774AE1A00354853E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:3f:2c:6a:7a:9d:a4:89:5b:68:61:0e:98:
                    02:9a:86:d6:30:42:36:79:ef:83:04:95:d2:7e:57:
                    ce:fb:10:3b:22:8f:87:87:46:d6:69:1f:0d:b3:8a:
                    d6:85:fb:d4:7a:44:11:cb:f6:0c:11:af:44:ac:60:
                    9d:31:79:e3:db:ec:54:19:b0:20:73:1b:7d:6e:b4:
                    31:12:8e:c2:0a:b9:d4:bb:64:5e:ae:4d:bc:da:ac:
                    ad:d1:4c:88:88:6c:a5:2d:9f:66:41:10:a4:db:c3:
                    fd:93:e4:26:c5:85:2d:41:a9:3f:0d:a4:66:ba:15:
                    e4:2c:aa:46:46:70:6c:f3:c2:dd:92:1d:61:b6:b7:
                    f5:a0:ba:be:ae:64:e9:5a:e2:2f:d9:59:c2:91:c7:
                    42:96:05:ed:f3:b7:8a:6a:9f:e7:eb:34:4a:0f:7e:
                    78:0c:0a:3a:73:1d:b7:57:7c:9c:35:ca:ef:7a:8e:
                    bb:12:cf:75:ce:87:bc:88:9f:41:79:86:dc:0b:eb:
                    ac:f2:67:e6:3c:04:ff:07:00:ab:58:ec:7b:68:f1:
                    02:ac:7f:c0:6e:78:eb:9e:6b:38:06:e7:91:64:3e:
                    f5:5d:7a:90:77:6f:5b:f7:08:85:5e:82:f0:59:be:
                    ea:e1:62:26:10:8d:ba:f4:6e:12:c3:47:7c:a9:0b:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:5E:8B:76:49:08:5B:AD:6A:1D:DC:77:4A:E1:A0:03:54:85:3E
            X509v3 Authority Key Identifier:
                keyid:80:A8:23:53:C1:15:BE:BF:54:95:84:A0:A7:93:35:71:A8:A2:07:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RUIKE/1/80A82353C115BEBF549584A0A7933571A8A20790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/80A82353C115BEBF549584A0A7933571A8A20790.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RUIKE/1/3136352e3130312e38382e302f32332d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:62:d0:b5:e3:62:e9:c1:16:8b:18:9a:81:61:c7:3a:17:
         13:e6:c4:db:44:cb:47:94:8d:10:47:68:e8:f7:c3:4c:1e:d4:
         5d:47:cd:83:f4:e2:ff:68:2f:98:f5:9f:1c:92:f3:e4:2e:3b:
         50:c5:e2:81:fd:4f:83:fe:25:ad:42:5d:40:af:2b:e1:d1:0b:
         1f:47:b8:85:9d:af:6f:9b:bf:9c:72:aa:67:15:85:03:6e:af:
         e0:90:4d:b5:1f:8e:68:4e:96:c2:0a:80:94:86:82:31:b5:90:
         3d:6a:d6:4b:19:f3:e1:c6:17:ff:d3:ca:bb:4a:5a:e1:25:03:
         f3:e2:6a:e5:b3:77:bf:9b:88:fd:a9:b6:bb:58:08:32:79:dd:
         82:16:b2:b7:e3:b4:ac:fd:86:da:bf:1b:9a:ad:a1:4e:0b:b3:
         e4:01:84:5e:5e:be:f2:dc:f4:12:31:fd:aa:ef:48:df:f8:d7:
         02:fc:bd:f3:39:8d:a0:25:d1:4d:d0:0a:9f:30:73:ac:b6:0a:
         10:3c:d3:29:53:97:7d:e2:5a:99:d0:a2:f2:0d:32:d3:d0:86:
         e0:c9:01:c2:cb:94:47:28:ca:aa:0e:0b:2f:ac:6d:0c:77:cb:
         4c:e8:4a:ae:c9:a0:07:3e:0d:6a:b5:a8:7b:83:3c:c0:8f:f4:
         1f:f1:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:29:15 2026 by rpki-client