Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/33362e35302e3234382e302f32332d3332203d3e20313530373637.roa
File:                     33362e35302e3234382e302f32332d3332203d3e20313530373637.roa (raw, json)
Hash identifier:          h3JWwr2HmitnfBr13BTu4JXUXE3E10XdIu4AZ17neQQ=
Subject key identifier:   19:FB:AD:E6:A3:DE:FF:01:8F:DB:18:C1:42:56:A0:16:BF:49:DF:DD
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       68556CADA26AE73CA604F8BA4144444B2F9B2B62
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/33362e35302e3234382e302f32332d3332203d3e20313530373637.roa
Signing time:             Mon 11 May 2026 17:38:40 +0000
ROA not before:           Mon 11 May 2026 17:33:40 +0000
ROA not after:            Mon 10 May 2027 17:38:40 +0000
asID:                     150767
IP address blocks:        36.50.248.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:55:6c:ad:a2:6a:e7:3c:a6:04:f8:ba:41:44:44:4b:2f:9b:2b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: May 11 17:33:40 2026 GMT
            Not After : May 10 17:38:40 2027 GMT
        Subject: CN=19FBADE6A3DEFF018FDB18C14256A016BF49DFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:83:4e:04:9c:bd:38:da:46:bb:c3:24:88:
                    19:61:61:1c:54:68:88:e2:b8:37:e4:8b:4c:bf:18:
                    75:91:92:cf:b8:cd:ba:91:ee:e2:46:37:e8:e3:5e:
                    5f:d7:f3:fc:32:09:02:8a:0a:36:24:d6:ec:37:5b:
                    1e:ad:1c:e8:54:19:22:20:f0:d2:28:de:9a:4f:17:
                    de:8f:40:46:61:5f:a6:d2:b9:ee:b1:41:ed:96:3c:
                    0d:6e:61:92:7e:b9:77:2f:d1:b4:7b:04:ff:31:4f:
                    84:e7:db:96:b4:3a:81:d9:b2:c7:ab:7b:3f:d1:cd:
                    45:73:be:bc:81:23:37:94:27:e2:39:f8:c9:62:d2:
                    80:13:d2:b5:a0:a8:2f:5a:fd:6f:3a:9e:b4:20:f3:
                    21:c6:20:a4:f6:db:e6:9d:62:bc:26:3a:f0:9a:f0:
                    3c:06:83:d5:2f:54:58:56:b0:cd:fd:a3:f7:fe:e0:
                    26:e4:00:17:e7:32:7e:b2:56:5d:41:13:54:d9:a9:
                    db:84:4d:53:ae:c4:54:ab:95:57:38:cb:e8:26:90:
                    c2:ad:d8:bb:08:c9:ff:4a:6b:f5:46:65:e8:1d:7c:
                    f7:b1:91:09:30:79:3b:d8:f4:c1:f4:8c:3e:a5:02:
                    b5:79:11:cb:d0:26:7c:6e:b6:a3:02:7e:4b:16:62:
                    0e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:AD:E6:A3:DE:FF:01:8F:DB:18:C1:42:56:A0:16:BF:49:DF:DD
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/33362e35302e3234382e302f32332d3332203d3e20313530373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:dd:56:a4:44:ab:75:6e:79:89:31:95:22:67:fb:5f:90:f9:
         1a:54:35:6d:a3:cb:96:de:5b:39:0c:68:dd:09:61:f9:ef:d0:
         39:28:56:1c:e4:3d:6e:19:d9:88:76:8d:38:eb:ad:d3:6f:76:
         f6:ff:5b:11:5e:70:bc:77:5e:10:7b:46:16:26:a2:74:01:44:
         cd:e7:09:de:69:ad:58:78:3d:be:0e:be:ae:e9:5c:9d:37:fe:
         84:79:12:75:1d:c2:53:a4:33:f4:3d:ae:c6:f7:35:5f:e7:bb:
         da:65:29:01:71:a2:7b:48:a7:5a:39:0b:68:6e:2a:86:45:b2:
         21:11:48:a9:80:78:d3:5d:5d:2d:89:17:b8:02:a3:9c:cb:77:
         13:0a:0f:47:09:32:3c:81:7b:42:e2:2f:c8:26:57:cf:05:e8:
         7d:cc:58:8e:9f:fc:66:b3:2a:75:f7:be:5f:4a:a6:55:e8:ef:
         65:14:cb:9a:e9:95:92:e7:4b:86:e0:a8:f8:30:f9:ee:14:73:
         f1:19:47:cf:ec:8b:f5:5f:89:a5:93:f0:93:93:7f:28:e5:5a:
         37:fa:3a:68:cb:b2:9d:6d:1a:d0:be:ad:7c:74:00:45:0c:74:
         48:d7:f2:7a:9f:6b:55:74:5c:8c:92:73:e6:50:16:c1:60:a0:
         13:59:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:02 2026 by rpki-client