Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/33362e35302e3234382e302f32332d3332203d3e20323035333239.roa
File:                     33362e35302e3234382e302f32332d3332203d3e20323035333239.roa (raw, json)
Hash identifier:          kvKFidKAXKAwaMmiIgXnzcK5auO8ISz5aFkcmjUeP2E=
Subject key identifier:   CF:20:8D:38:F6:E3:C0:99:27:BA:A6:49:65:DB:AD:6F:D6:E6:F3:F6
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       42E0D8DEC4EE77C7AC9D6ED8E3757DCA0B881A9B
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/33362e35302e3234382e302f32332d3332203d3e20323035333239.roa
Signing time:             Mon 11 May 2026 17:38:41 +0000
ROA not before:           Mon 11 May 2026 17:33:41 +0000
ROA not after:            Mon 10 May 2027 17:38:41 +0000
asID:                     205329
IP address blocks:        36.50.248.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e0:d8:de:c4:ee:77:c7:ac:9d:6e:d8:e3:75:7d:ca:0b:88:1a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: May 11 17:33:41 2026 GMT
            Not After : May 10 17:38:41 2027 GMT
        Subject: CN=CF208D38F6E3C09927BAA64965DBAD6FD6E6F3F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f0:22:8c:ff:20:b5:93:ae:63:1d:83:20:f6:
                    cc:07:3d:c3:b3:70:41:ff:8a:fb:85:56:21:c0:27:
                    e9:8a:eb:26:16:e3:70:a2:bf:52:18:4e:5a:ec:6e:
                    5b:d6:50:b3:32:8c:9a:8c:bb:d9:2c:f0:3c:78:40:
                    e5:c5:7c:8a:56:cd:7f:69:f9:bf:12:25:db:0a:17:
                    8e:c2:4e:e8:56:46:ad:17:ea:f7:09:8c:73:3e:28:
                    85:00:fe:12:85:4f:45:45:a4:9a:5f:9e:c0:6b:54:
                    de:c6:88:ef:6c:15:7b:ca:b7:12:31:75:b1:5e:8f:
                    dd:8f:0b:79:79:9a:20:ca:5b:ce:aa:b3:44:f6:fc:
                    47:e5:98:b3:5e:9c:53:54:7b:3a:15:36:0f:94:25:
                    17:df:3a:0b:09:e4:30:c5:c1:48:d1:c4:36:ef:c6:
                    33:e8:03:e3:4d:66:6d:5b:5e:b7:dc:f9:b2:26:8c:
                    97:b9:2a:ae:12:88:7a:1b:2c:9d:9f:f3:fe:d8:4b:
                    54:66:00:fa:a1:4b:f3:6b:92:66:df:70:91:38:30:
                    42:a8:14:29:bf:86:34:39:53:e0:f5:79:99:30:9b:
                    39:07:02:c9:d4:42:8c:f1:88:44:5e:5a:ff:b5:6d:
                    a2:2d:43:d2:08:be:24:c8:d9:98:8f:4f:16:49:ce:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:8D:38:F6:E3:C0:99:27:BA:A6:49:65:DB:AD:6F:D6:E6:F3:F6
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/33362e35302e3234382e302f32332d3332203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:32:62:f0:d4:a0:0f:fb:3f:78:9a:0e:9c:33:dd:ae:5b:80:
         33:23:22:d7:e0:fd:4b:52:56:00:ac:94:67:66:8e:25:dd:94:
         de:48:09:c4:a6:8f:17:c2:fc:87:96:5c:3d:77:77:56:44:fa:
         7d:e4:52:c0:b8:9a:11:4d:cf:b0:cb:c4:96:01:af:31:12:6d:
         16:ff:da:98:77:39:40:54:6e:63:34:85:87:dd:b1:9a:19:df:
         f9:09:01:9a:c2:7e:8c:c7:51:6d:d8:a9:95:08:d6:9f:10:db:
         fc:25:22:14:c6:31:83:be:aa:8e:6d:71:5a:0b:99:f8:e0:1a:
         2d:ed:d1:79:7b:ac:ec:8b:ce:90:73:1c:26:b4:f7:ee:18:90:
         79:12:b1:f6:64:dd:85:84:bc:3f:e8:f5:79:91:d9:44:2e:ed:
         3f:d7:10:7f:6f:e8:6b:aa:cb:ce:40:75:d0:b3:9c:75:18:4f:
         8f:81:d4:8c:d4:15:d4:60:b4:3d:48:54:7b:69:12:97:c9:93:
         17:21:17:e8:ef:8d:0b:b6:bf:66:26:13:64:ef:23:45:cc:a8:
         a0:77:26:54:dd:a4:3a:c2:a8:18:9b:3d:9d:5d:31:d1:fb:2f:
         6c:d5:7c:d3:44:44:7b:e3:f9:b0:ed:c3:b5:de:92:1e:08:d1:
         72:b2:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:54 2026 by rpki-client