Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa
File:                     3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa (raw, json)
Hash identifier:          3vADVgqIF+DMqXN/Slxe4U6QenJyre1e9qbCennjH4s=
Subject key identifier:   09:DA:B9:E4:7E:1E:6D:27:CE:4E:4D:BA:C4:68:B5:94:F3:A3:E3:BB
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       07F9D162E1BD660E8A96751E47D868197E5B3E
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa
Signing time:             Tue 12 May 2026 09:51:18 +0000
ROA not before:           Tue 12 May 2026 09:46:18 +0000
ROA not after:            Tue 11 May 2027 09:51:18 +0000
asID:                     131151
IP address blocks:        187.79.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f9:d1:62:e1:bd:66:0e:8a:96:75:1e:47:d8:68:19:7e:5b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: May 12 09:46:18 2026 GMT
            Not After : May 11 09:51:18 2027 GMT
        Subject: CN=09DAB9E47E1E6D27CE4E4DBAC468B594F3A3E3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4e:ed:b5:a0:2c:94:46:16:10:b6:10:c6:ca:
                    aa:26:fe:eb:51:37:ce:55:dd:01:a0:2c:e5:63:0c:
                    16:8e:5b:61:8f:09:07:88:0d:bc:c0:a7:7b:c3:45:
                    52:fc:33:d8:d4:c8:74:55:d0:54:20:91:7f:e6:ee:
                    26:29:5d:bf:63:93:96:84:db:dd:71:23:26:dc:c0:
                    f4:ff:11:0f:17:1b:89:2c:14:6b:c9:42:44:28:1f:
                    9d:f3:40:1d:38:61:95:27:06:75:4e:08:17:38:be:
                    13:af:56:5f:ec:b6:41:28:07:5c:08:89:d3:fc:37:
                    87:aa:9f:7c:99:c1:8c:03:0d:e6:cc:0b:44:fd:9d:
                    7a:54:09:29:07:f6:c2:4f:f1:0d:f6:b6:dd:bd:22:
                    7f:8e:80:78:15:0f:8a:2a:46:30:8c:60:0b:3b:13:
                    fd:ae:09:e2:ec:29:30:1a:7f:32:9a:03:53:e6:99:
                    7c:53:12:6f:ae:96:9d:ac:9f:38:51:f8:04:d4:c3:
                    33:db:8d:94:38:a7:d7:bb:60:03:df:1b:9e:3b:33:
                    18:31:31:9d:16:a4:54:1a:9e:b7:15:62:0f:2e:95:
                    3f:7c:df:a0:5a:49:2d:63:94:cc:db:12:17:5a:9e:
                    a9:07:73:b0:7a:12:6e:7d:4a:39:9a:f0:fb:1c:d7:
                    75:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DA:B9:E4:7E:1E:6D:27:CE:4E:4D:BA:C4:68:B5:94:F3:A3:E3:BB
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e20313331313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:97:e9:bf:9d:4f:13:00:bd:dc:61:84:dc:9d:fb:0f:40:5e:
         0d:08:7c:4b:fc:38:dc:a3:23:c5:5a:95:b8:2e:0c:7c:d6:51:
         ac:60:4a:fe:d6:9e:2d:df:0e:76:59:c8:43:b9:9a:b7:29:93:
         6b:d0:d5:bd:9f:67:8b:d1:16:e3:a0:3e:a5:2f:c1:93:16:e7:
         e5:15:4e:ba:39:80:58:23:3a:99:34:38:42:77:60:25:0b:d6:
         44:ac:f2:75:2a:21:50:6c:4f:25:b5:2b:33:7c:7e:9a:26:19:
         14:32:4b:41:32:bf:6e:e0:43:ae:19:15:4c:4d:f0:e9:e7:2b:
         cb:ab:f8:8c:bf:88:1f:ce:0b:db:66:63:ce:da:e1:2c:7a:b5:
         5c:39:f8:7b:28:bc:ae:86:22:ad:ae:02:31:e6:26:96:1a:2c:
         25:be:79:5a:55:bf:70:48:bd:82:75:b2:e8:c5:c3:ed:b5:43:
         4a:56:9d:1b:06:61:16:e9:57:2d:f1:9d:75:12:25:b1:ac:49:
         01:ee:ed:8b:7c:16:5c:58:9a:cd:76:8e:db:df:76:3a:b0:e3:
         f7:f4:e7:4b:49:4c:b2:2e:75:fb:62:bf:0f:0f:02:14:e9:b1:
         79:5c:76:a4:f5:f8:8f:21:cd:ae:e0:e0:e0:d1:fa:8e:b4:72:
         61:c4:48:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:45 2026 by rpki-client