Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa
File:                     3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          a8CleYW3Fkq8o8fjYWlYdkD+yxdQ7vmQublJvofR+u0=
Subject key identifier:   46:AD:1B:6B:39:75:07:3E:FA:6E:18:F2:13:4D:22:05:99:BE:88:54
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       537A311A286E50C66665A6EA662E5404A87A35D6
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa
Signing time:             Tue 12 May 2026 09:51:20 +0000
ROA not before:           Tue 12 May 2026 09:46:20 +0000
ROA not after:            Tue 11 May 2027 09:51:20 +0000
asID:                     134823
IP address blocks:        187.79.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7a:31:1a:28:6e:50:c6:66:65:a6:ea:66:2e:54:04:a8:7a:35:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: May 12 09:46:20 2026 GMT
            Not After : May 11 09:51:20 2027 GMT
        Subject: CN=46AD1B6B3975073EFA6E18F2134D220599BE8854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:de:59:e2:54:65:a2:b1:cb:82:07:e1:07:5c:
                    da:a1:2a:17:6f:60:03:43:31:7c:7f:84:15:74:58:
                    48:85:ba:5b:81:19:18:66:0f:1f:a2:a5:df:c6:70:
                    ab:34:c3:c8:c9:94:b0:fb:ab:ab:41:88:b6:11:05:
                    1e:c6:61:ff:75:66:7d:f2:2c:f2:6f:24:de:17:72:
                    fb:e9:7c:79:6e:95:63:c0:ff:0a:e8:e6:f1:a7:ce:
                    12:3c:a1:22:c4:c6:d1:ec:44:76:5e:db:a3:f7:26:
                    ac:2f:11:d2:c6:98:74:34:e8:21:7d:43:b8:a1:8f:
                    68:4a:52:05:3a:ec:2f:78:ab:a4:77:14:d4:87:4b:
                    50:88:e1:0d:81:46:6a:ae:3e:a9:33:db:05:df:95:
                    dc:19:8c:6b:32:d1:2a:d1:69:b5:83:46:9f:bc:71:
                    10:4c:5f:b6:17:67:43:a6:ba:ce:36:5d:ca:b7:0e:
                    aa:3b:91:b9:49:2f:55:ae:c2:25:e6:a2:ba:71:0f:
                    80:e4:74:60:c3:74:1b:cd:64:c8:23:88:52:3c:8c:
                    93:74:dd:a4:1c:09:80:7c:77:d8:73:a5:80:82:ff:
                    e7:19:b0:8d:c4:a1:b8:0b:9f:88:35:29:b6:44:cc:
                    41:73:64:69:47:77:07:5d:1f:fd:81:24:67:c5:6a:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AD:1B:6B:39:75:07:3E:FA:6E:18:F2:13:4D:22:05:99:BE:88:54
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139322e302f31392d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:7d:63:c0:56:22:33:93:38:97:d3:14:ea:cc:21:70:94:
         bc:4d:10:4d:50:d1:1e:03:ff:d3:8a:0a:67:14:91:a7:c9:1d:
         52:23:36:d0:60:3e:ec:81:e6:d9:56:9a:f4:f7:88:0c:0e:89:
         f2:10:25:64:cd:8b:0b:f5:96:8e:ce:02:24:da:2d:8e:a5:fa:
         f3:7e:b3:79:34:e7:a2:2b:94:e5:17:96:ec:27:58:0a:e4:73:
         6d:10:e7:d7:a7:3a:ce:1a:c7:34:bd:8d:1e:9e:4b:4f:e3:e2:
         91:bf:5c:b1:ec:c6:74:75:9d:dc:cb:c2:9b:e7:d0:a5:bf:fe:
         28:83:34:1c:82:c5:82:a5:4e:ab:75:64:1b:1e:29:5b:6e:58:
         5d:aa:76:0c:4f:42:a6:0c:0d:87:d3:02:4d:3a:fe:dd:f0:7c:
         92:af:bc:26:34:08:08:bb:af:f5:a8:0a:e4:20:51:2e:e8:80:
         ec:82:2e:10:d8:be:95:41:d3:69:8c:19:b4:aa:07:7b:91:f4:
         5e:c1:ab:a8:8f:29:d6:be:78:77:da:45:84:bc:b7:bb:75:f0:
         ef:57:2f:1a:18:2a:6d:e4:b1:c2:90:1e:f4:c2:53:94:d8:fe:
         36:70:67:6b:b4:d2:4f:f8:e8:29:1d:11:18:62:86:19:75:f0:
         ef:c1:4c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:58 2026 by rpki-client