Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa
File:                     3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          peI0xrWdSPuR9DhduODvlN5d8660caUXM4/pXLjzdlM=
Subject key identifier:   69:E4:C8:10:5E:23:9F:18:FC:1D:61:DF:30:77:D9:9A:E1:FC:E5:11
Certificate issuer:       /CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
Certificate serial:       6F0B5EB216F9A444E3AA9990DF01A155C8257CF6
Authority key identifier: ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 09 Nov 2026 06:44:00 +0000
ROA not before:           Mon 09 Nov 2026 06:39:00 +0000
ROA not after:            Mon 08 Nov 2027 06:44:00 +0000
asID:                     134823
IP address blocks:        210.67.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl
                          rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 10:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0b:5e:b2:16:f9:a4:44:e3:aa:99:90:df:01:a1:55:c8:25:7c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDE7389B6D9A335D6B6FDD4286DB79011F87554B
        Validity
            Not Before: Nov  9 06:39:00 2026 GMT
            Not After : Nov  8 06:44:00 2027 GMT
        Subject: CN=69E4C8105E239F18FC1D61DF3077D99AE1FCE511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:22:a9:77:59:59:18:7b:7e:73:0d:d6:42:
                    dd:65:81:83:14:7b:d9:3f:b7:89:8c:53:c4:c8:ed:
                    8f:c9:38:5c:3f:ab:d6:46:d4:de:1d:9a:48:2e:3d:
                    4e:ec:9e:4b:24:20:a1:39:e6:37:bb:75:b1:a3:93:
                    8c:c0:4b:1a:8e:ac:61:be:0f:ce:91:b4:12:83:0e:
                    d0:69:0a:34:29:df:25:91:18:d7:7b:ed:59:c7:46:
                    fb:dd:94:41:63:77:fe:67:af:ec:b6:16:05:04:c0:
                    37:77:10:41:6f:cd:70:15:12:0f:f8:43:77:d7:b6:
                    fa:35:4f:66:11:30:6c:bb:2f:21:7a:9c:b8:5d:41:
                    ee:e3:bd:78:e3:6f:0b:bf:b0:9d:69:8c:09:77:fb:
                    82:e9:24:ea:15:88:0c:c3:72:0f:16:73:6d:0c:09:
                    74:98:f2:ef:43:6d:0f:70:66:18:3c:ce:68:7e:10:
                    b8:13:be:e2:3a:21:17:da:57:d9:84:bf:f5:50:c5:
                    21:4e:4e:e4:71:55:f5:4f:f5:6d:4f:3f:8d:91:80:
                    21:2b:a1:6f:11:b0:94:0c:ea:a5:b1:19:ad:e6:5b:
                    a5:ed:c0:d3:16:7e:e6:e4:c3:de:de:5d:26:8b:03:
                    bf:c3:d6:98:1b:fe:16:7b:49:7a:5e:4d:5d:4d:ba:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:C8:10:5E:23:9F:18:FC:1D:61:DF:30:77:D9:9A:E1:FC:E5:11
            X509v3 Authority Key Identifier:
                keyid:ED:E7:38:9B:6D:9A:33:5D:6B:6F:DD:42:86:DB:79:01:1F:87:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EDE7389B6D9A335D6B6FDD4286DB79011F87554B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SYSNET/0/3231302e36372e3134322e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.67.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:af:a4:46:95:c2:cb:7e:d8:69:53:e7:5d:83:36:af:16:
         7d:ce:e3:b7:c4:61:8e:04:df:c3:03:77:51:11:f1:84:b1:49:
         53:b6:8a:fd:4e:89:e7:53:2e:36:4f:ad:c3:7d:b0:f8:e8:90:
         ba:84:a3:d5:c6:0a:de:a9:2a:2c:45:16:d5:40:86:4b:51:e1:
         c7:f7:87:bd:e2:a5:51:e4:5f:3a:68:d5:78:fc:d3:df:3d:7a:
         cb:a0:0d:ae:6a:d9:ac:3e:39:9a:32:6c:9e:64:11:e6:c1:f8:
         6a:a1:ae:9f:bd:f3:02:ca:9e:a6:d2:0c:a8:ac:71:7f:69:6c:
         18:ee:3f:c0:c6:8b:6d:51:03:2b:62:fb:87:36:41:07:b7:8b:
         38:01:cd:1e:ca:46:bb:ee:f0:54:8c:1b:9f:29:be:c5:ac:e4:
         0b:07:d2:8e:51:25:0b:fb:33:b9:78:20:d8:b5:e7:9d:97:39:
         2e:50:b4:45:dc:1a:91:40:73:e8:12:46:26:b0:36:4d:72:5d:
         61:56:3b:cb:07:50:76:c9:45:10:9d:46:a5:8f:5a:fc:68:2f:
         42:8d:4c:71:3b:19:47:32:15:78:cd:11:3d:46:72:52:5a:08:
         c3:4f:b2:f6:e9:6e:4f:f7:11:08:8b:2d:60:86:92:7a:bd:1d:
         7c:79:1f:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:40:54 2026 by rpki-client