Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIYIYI/0/34392e3231332e33342e302f32332d3234203d3e203231383539.roa
File:                     34392e3231332e33342e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          fJnxPhgLX/rch2cog18IcRNcikXmBfffJ21WF3oWCTE=
Subject key identifier:   96:30:9B:11:9D:31:66:BF:4E:D9:E5:AF:AA:73:38:89:5F:94:F4:32
Certificate issuer:       /CN=CA678C886D87F023B9297877BF550E88E90AE169
Certificate serial:       7A97A6BF38591E445B5BF5C6013D4575236630C8
Authority key identifier: CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/34392e3231332e33342e302f32332d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:55:43 +0000
ROA not before:           Mon 11 May 2026 17:50:43 +0000
ROA not after:            Mon 10 May 2027 17:55:43 +0000
asID:                     21859
IP address blocks:        49.213.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl
                          rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:97:a6:bf:38:59:1e:44:5b:5b:f5:c6:01:3d:45:75:23:66:30:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA678C886D87F023B9297877BF550E88E90AE169
        Validity
            Not Before: May 11 17:50:43 2026 GMT
            Not After : May 10 17:55:43 2027 GMT
        Subject: CN=96309B119D3166BF4ED9E5AFAA7338895F94F432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:4e:d0:d4:17:6e:8a:b5:82:a2:ff:74:ab:
                    31:09:63:aa:53:e6:d2:ef:ba:f0:da:3c:37:e3:62:
                    8c:63:2a:4a:c9:b4:be:62:2d:da:7e:4a:2e:cd:56:
                    3e:d6:30:96:08:ee:b8:fa:d8:0b:f6:b7:e6:fb:9f:
                    ba:1b:95:81:8c:59:5b:ec:4e:2c:8b:cf:bc:46:82:
                    79:d0:c6:4e:98:6d:a3:01:64:f6:85:e6:cf:07:35:
                    d0:92:4b:66:a6:09:ab:fa:57:bb:bd:0c:78:13:90:
                    ed:b1:a8:27:56:6a:3f:6f:40:2b:57:1b:d8:ce:bb:
                    7c:69:da:88:86:80:ee:72:58:cf:8a:7b:ca:08:86:
                    c9:9e:8d:96:c2:94:d6:7d:9c:aa:1b:4e:d7:70:f0:
                    14:3e:52:8e:62:71:38:36:a4:e7:ab:1a:6e:19:a9:
                    fc:41:df:bc:12:bb:fc:1e:24:42:81:8e:e3:13:cb:
                    35:8c:8f:ba:87:4e:b6:2f:15:96:f2:16:4b:35:88:
                    45:fa:4a:78:7c:b5:d8:2d:29:ea:1d:60:f8:61:e5:
                    eb:91:0b:0b:81:3e:aa:af:8e:57:7f:75:d6:8b:32:
                    57:88:cd:f8:88:23:00:76:0e:c5:1b:1f:c9:d1:96:
                    71:55:9f:71:7d:4e:d2:1f:9a:89:a5:a5:89:e2:45:
                    96:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:30:9B:11:9D:31:66:BF:4E:D9:E5:AF:AA:73:38:89:5F:94:F4:32
            X509v3 Authority Key Identifier:
                keyid:CA:67:8C:88:6D:87:F0:23:B9:29:78:77:BF:55:0E:88:E9:0A:E1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/CA678C886D87F023B9297877BF550E88E90AE169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CA678C886D87F023B9297877BF550E88E90AE169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIYIYI/0/34392e3231332e33342e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:c3:9c:e7:82:a5:00:6f:d8:c9:63:18:74:6c:ff:26:45:a3:
         af:4a:49:04:9a:5f:6a:74:2b:e4:81:5c:c4:48:cd:57:5c:d5:
         2b:b2:fb:ca:8d:01:4c:76:15:dd:c9:c1:4b:c8:d8:1d:a0:00:
         bb:b9:cb:01:33:9e:56:63:37:f7:8c:60:62:30:70:dd:83:ce:
         d1:05:ae:1e:4f:24:bd:21:88:73:d5:46:df:9d:26:42:d1:fc:
         ae:14:17:b6:be:fe:29:09:80:95:47:ff:d9:11:22:10:ef:33:
         c3:dc:b5:31:a6:f7:f4:9a:3b:ec:01:0f:44:a4:68:0c:3b:6b:
         9a:0c:16:64:63:a2:24:68:87:b7:58:e1:f3:37:5e:ce:5b:af:
         b7:d3:61:36:12:60:6f:07:78:7c:e0:f0:2a:1b:8c:da:9c:08:
         57:67:75:5b:68:2c:2d:35:34:16:9f:34:d5:fe:1a:55:a3:34:
         ae:95:35:37:59:c4:9c:c8:8f:ce:96:55:67:06:be:70:41:8a:
         f4:ff:51:75:9d:f9:66:a3:e1:1f:4c:29:70:75:97:73:a4:a3:
         46:41:4c:d3:5c:ce:39:e4:1a:f3:bc:90:6f:cf:5a:33:46:2b:
         04:92:c8:37:41:50:f5:ed:f3:f4:dc:1f:89:92:90:0d:11:5e:
         f8:68:4d:ed
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUepemvzhZHkRbW/XGAT1FdSNmMMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1NTBFODhF
OTBBRTE2OTAeFw0yNjA1MTExNzUwNDNaFw0yNzA1MTAxNzU1NDNaMDMxMTAvBgNV
BAMTKDk2MzA5QjExOUQzMTY2QkY0RUQ5RTVBRkFBNzMzODg5NUY5NEY0MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+707Q1BduirWCov90qzEJY6pT
5tLvuvDaPDfjYoxjKkrJtL5iLdp+Si7NVj7WMJYI7rj62Av2t+b7n7oblYGMWVvs
TiyLz7xGgnnQxk6YbaMBZPaF5s8HNdCSS2amCav6V7u9DHgTkO2xqCdWaj9vQCtX
G9jOu3xp2oiGgO5yWM+Ke8oIhsmejZbClNZ9nKobTtdw8BQ+Uo5icTg2pOerGm4Z
qfxB37wSu/weJEKBjuMTyzWMj7qHTrYvFZbyFks1iEX6Snh8tdgtKeodYPhh5euR
CwuBPqqvjld/ddaLMleIzfiIIwB2DsUbH8nRlnFVn3F9TtIfmomlpYniRZb1AgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUljCbEZ0xZr9O2eWvqnM4iV+U9DIwHwYDVR0j
BBgwFoAUymeMiG2H8CO5KXh3v1UOiOkK4WkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJWUlZ
SS8wL0NBNjc4Qzg4NkQ4N0YwMjNCOTI5Nzg3N0JGNTUwRTg4RTkwQUUxNjkuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0E2NzhDODg2RDg3RjAyM0I5Mjk3ODc3QkY1
NTBFODhFOTBBRTE2OS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NISVlJWUkvMC8zNDM5MmUzMjMx
MzMyZTMzMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBMdUiMA0GCSqGSIb3DQEBCwUAA4IBAQAuw5zngqUAb9jJYxh0bP8mRaOv
SkkEml9qdCvkgVzESM1XXNUrsvvKjQFMdhXdycFLyNgdoAC7ucsBM55WYzf3jGBi
MHDdg87RBa4eTyS9IYhz1UbfnSZC0fyuFBe2vv4pCYCVR//ZESIQ7zPD3LUxpvf0
mjvsAQ9EpGgMO2uaDBZkY6IkaIe3WOHzN17OW6+302E2EmBvB3h84PAqG4zanAhX
Z3VbaCwtNTQWnzTV/hpVozSulTU3WcScyI/OllVnBr5wQYr0/1F1nflmo+EfTClw
dZdzpKNGQUzTXM455BrzvJBvz1ozRisEksg3QVD17fP03B+JkpANEV74aE3t
-----END CERTIFICATE-----
Generated at Wed May 13 07:57:30 2026 by rpki-client