Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa
File:                     3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (raw, json)
Hash identifier:          rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=
Subject key identifier:   1C:C5:D6:32:EF:53:95:12:2C:E6:A2:C5:0C:B0:85:F7:29:3A:63:47
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       06183ADF76418E917C236BB7011AED4173ED80A7
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa
Signing time:             Tue 08 Sep 2026 07:44:13 +0000
ROA not before:           Tue 08 Sep 2026 07:39:13 +0000
ROA not after:            Tue 07 Sep 2027 07:44:13 +0000
asID:                     18419
IP address blocks:        202.148.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 17:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:18:3a:df:76:41:8e:91:7c:23:6b:b7:01:1a:ed:41:73:ed:80:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Sep  8 07:39:13 2026 GMT
            Not After : Sep  7 07:44:13 2027 GMT
        Subject: CN=1CC5D632EF5395122CE6A2C50CB085F7293A6347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:cf:ab:79:98:7f:1a:02:e2:cf:e5:87:e9:
                    3c:99:f7:63:f5:be:4a:92:ca:47:69:4e:88:d2:a7:
                    55:00:1d:a7:45:fa:2a:25:5f:69:a6:d6:29:46:7e:
                    d1:8b:4f:f6:8d:e6:e2:dd:22:cd:c5:e9:c7:23:e7:
                    65:58:b2:55:7a:76:3e:20:72:ba:b0:1c:d4:21:22:
                    6b:0b:0f:07:1e:94:21:7c:82:f4:53:67:4c:94:d1:
                    8a:cf:62:f5:a8:26:7c:9b:3e:fb:d9:69:fc:ad:1a:
                    d0:ef:cf:a3:fe:c4:7a:99:4e:48:0f:0d:c7:40:a9:
                    b7:50:5a:89:5e:85:f9:1f:0d:ba:aa:ea:4b:1e:9a:
                    ad:dc:5c:95:82:8e:2e:cc:b8:bb:f9:55:7f:bb:89:
                    94:50:10:45:44:25:7d:c9:c1:5e:21:f9:47:c8:a0:
                    de:12:4c:e3:a9:7b:54:00:96:cc:75:80:c2:4e:ff:
                    37:9a:65:80:cc:15:57:6c:40:ee:25:81:99:28:5e:
                    a9:13:6a:94:ed:44:fe:da:a7:cb:ed:54:5e:ee:c1:
                    83:5d:02:9a:e6:ae:dd:32:fa:fa:11:3d:56:be:52:
                    8e:a8:7c:cc:36:91:94:cc:c6:7a:20:5c:ec:2f:48:
                    ca:5a:4f:e9:6e:db:b1:c5:c0:11:6b:78:fd:cf:ba:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C5:D6:32:EF:53:95:12:2C:E6:A2:C5:0C:B0:85:F7:29:3A:63:47
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:e7:95:a2:2d:7d:b4:32:8e:c1:0b:78:7c:c0:29:18:3f:4f:
         11:60:fe:68:f9:b6:52:50:28:0d:89:b4:3c:1a:7e:9d:62:d3:
         6f:33:cb:7a:1b:80:97:5b:bb:3a:e4:8d:df:02:82:45:cc:b2:
         8a:fa:37:4b:f4:79:3b:86:d9:c6:2e:28:48:73:90:54:6f:50:
         f4:75:17:11:6b:c9:96:2f:4c:0a:03:b4:f8:f0:d3:27:a9:81:
         31:05:f9:67:1e:b9:82:32:69:3a:39:dc:d3:0d:38:cd:62:b6:
         ac:b2:e4:c5:52:c6:4d:df:1d:83:58:52:c7:82:3e:ce:43:7e:
         c6:f9:ed:f9:6d:ba:1f:c7:c9:c4:0d:2f:de:b9:21:2f:37:9f:
         3f:4e:25:d5:9f:90:1f:2f:b4:4a:6f:21:1d:98:f7:38:8c:ed:
         c0:1c:c5:d4:da:d5:27:58:0a:eb:75:50:39:98:e6:4c:ab:b2:
         53:3d:a4:78:71:26:17:2a:f8:27:36:5e:1d:5d:98:7d:6b:b5:
         de:4b:57:e7:8c:b0:26:c8:ca:e8:81:a5:9b:db:6f:fa:4b:61:
         05:f5:e7:17:a4:df:30:e4:f8:a4:d3:db:93:6a:36:28:4f:c1:
         95:80:89:e3:40:1f:13:1c:09:5c:48:e1:18:f3:e6:c2:7f:0e:
         37:c2:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:04:04 2026 by rpki-client