Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3131302e35302e3132382e302f31382d3234203d3e203234313537.roa
File:                     3131302e35302e3132382e302f31382d3234203d3e203234313537.roa (raw, json)
Hash identifier:          BOONySCiYKrfg2QdVAciVdsquL8Co5W7wbUC9s4Y0d8=
Subject key identifier:   6A:99:40:07:5B:C4:D0:D9:62:6B:7E:08:8C:8A:82:9F:9B:14:FC:64
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       6F872B9833AA830AE0846F2B282A510A8F663F3F
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3131302e35302e3132382e302f31382d3234203d3e203234313537.roa
Signing time:             Mon 11 May 2026 17:32:56 +0000
ROA not before:           Mon 11 May 2026 17:27:56 +0000
ROA not after:            Mon 10 May 2027 17:32:56 +0000
asID:                     24157
IP address blocks:        110.50.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:2b:98:33:aa:83:0a:e0:84:6f:2b:28:2a:51:0a:8f:66:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:27:56 2026 GMT
            Not After : May 10 17:32:56 2027 GMT
        Subject: CN=6A9940075BC4D0D9626B7E088C8A829F9B14FC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:04:4e:36:fe:c5:a9:b2:0c:96:0c:37:fe:
                    8e:7c:c3:59:3f:59:3f:c6:3b:8f:32:d8:d0:35:91:
                    47:01:6f:1a:f7:88:a3:d8:e3:aa:82:c5:25:d5:a5:
                    b2:2b:54:ec:c6:8a:3c:00:fa:58:2c:2f:8c:76:88:
                    c4:1f:25:d2:1d:a3:45:47:ff:1f:36:54:cf:58:d9:
                    f1:39:a7:fd:ad:45:f0:e0:7f:9c:df:84:4d:a6:4f:
                    05:f7:9a:b3:eb:61:af:c3:b3:a4:95:13:7d:7f:12:
                    06:92:09:f6:15:f0:58:de:aa:84:48:fb:8c:02:e8:
                    4d:1f:96:3c:cb:bf:7e:0a:f5:45:e7:81:ee:60:b0:
                    fb:4b:bc:b9:3a:c9:49:da:33:65:bb:58:cf:7a:9c:
                    aa:d5:1e:c7:f0:a1:e4:49:a6:d7:76:45:09:66:1a:
                    d6:d7:ef:06:fe:19:da:be:1d:89:25:33:e0:8b:41:
                    ed:a6:ba:87:ad:56:02:44:29:43:53:f2:80:78:5b:
                    a8:c1:be:51:d9:a2:a3:26:d7:db:93:30:12:d4:f9:
                    ce:ad:7b:79:bc:bc:f8:5f:74:1e:71:50:de:30:58:
                    d4:d3:72:0e:0e:65:55:1b:d0:c2:90:37:d2:5d:91:
                    27:65:4b:1d:8b:dc:14:1f:00:69:f1:78:4a:ec:ed:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:99:40:07:5B:C4:D0:D9:62:6B:7E:08:8C:8A:82:9F:9B:14:FC:64
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3131302e35302e3132382e302f31382d3234203d3e203234313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:04:d7:59:ab:d8:3d:50:31:cc:fc:b0:0c:11:35:99:40:
         97:b1:e4:2f:a3:ef:89:b4:07:2c:8a:35:a6:42:d6:ee:49:aa:
         49:6b:6e:99:64:0f:59:e8:6b:15:6a:ae:45:83:3b:bd:ae:3b:
         0e:ac:29:5d:0b:9d:4c:ce:7b:92:33:45:2e:78:a5:55:eb:62:
         46:0f:6a:da:28:7d:4d:7e:23:5d:4f:d7:62:80:e8:41:ab:00:
         91:4f:c7:2f:40:f7:6d:25:24:d4:10:c0:51:04:f1:48:b8:4d:
         97:33:5a:21:9c:7e:45:83:29:0b:c1:d6:9d:0d:0f:e4:3c:63:
         c6:39:0f:8b:45:69:2c:61:da:3d:4a:9c:60:41:1c:bf:8f:1c:
         7b:6a:60:a0:58:c2:58:5b:7b:b0:2c:8f:3f:ca:29:a6:d2:18:
         54:10:01:3e:75:8e:52:1d:5d:a3:db:c4:b7:2a:24:14:a2:06:
         05:9d:3c:5d:67:88:a9:ef:92:43:3b:76:78:53:59:55:7a:b9:
         6b:46:af:c9:51:04:c1:80:74:e1:f4:e0:75:3c:fc:38:dc:d3:
         91:94:5f:4f:b5:69:c0:27:7b:21:59:88:24:ad:be:19:8c:d9:
         f0:21:2e:f1:dc:09:b2:af:94:5f:c2:4c:2c:31:3e:c8:4d:f2:
         dd:76:01:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:59 2026 by rpki-client