Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3132332e39392e302e302f31382d3234203d3e203234313538.roa
File:                     3132332e39392e302e302f31382d3234203d3e203234313538.roa (raw, json)
Hash identifier:          iEIjXwf3wlL+ZRLCEsyizKw6LVD+DOrECT6hFSsNOeM=
Subject key identifier:   AC:1F:89:72:64:2F:C8:6A:95:93:B5:82:50:DC:C2:22:A8:33:05:B2
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       4E9AB8110F86ADEADA4BD63A3952766A676AB837
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3132332e39392e302e302f31382d3234203d3e203234313538.roa
Signing time:             Mon 11 May 2026 16:41:39 +0000
ROA not before:           Mon 11 May 2026 16:36:39 +0000
ROA not after:            Mon 10 May 2027 16:41:39 +0000
asID:                     24158
IP address blocks:        123.99.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9a:b8:11:0f:86:ad:ea:da:4b:d6:3a:39:52:76:6a:67:6a:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 16:36:39 2026 GMT
            Not After : May 10 16:41:39 2027 GMT
        Subject: CN=AC1F8972642FC86A9593B58250DCC222A83305B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:80:83:33:82:ea:f2:2f:f0:24:0c:7d:23:59:
                    27:d2:b8:e0:08:aa:fc:8f:2a:cd:3a:1d:73:fb:70:
                    20:6a:63:ef:3e:f9:7e:b1:ea:5a:ca:e6:28:16:87:
                    a3:58:d8:f5:6e:a4:9b:b1:10:f3:36:9e:56:46:c8:
                    52:b9:82:30:c3:37:59:78:a4:38:ae:50:d1:dc:1c:
                    4d:36:13:bb:97:92:57:be:64:ff:7c:6e:00:b6:9f:
                    a6:b4:58:c9:b2:02:1c:a1:72:96:36:9e:9e:20:9b:
                    3a:ca:33:36:46:94:ff:77:9f:ca:4d:5f:f3:92:69:
                    01:f6:31:0e:7e:da:75:d9:c6:48:33:03:d9:f1:0e:
                    ff:c9:cd:16:b9:6a:f5:e5:69:71:d3:75:fa:57:ab:
                    81:52:2f:d8:3e:bb:c7:44:1f:34:3e:94:4d:3e:04:
                    d3:c3:a6:30:61:9c:b6:8a:e9:52:a8:ee:91:49:27:
                    b9:21:a2:0d:f7:8d:45:f1:64:24:32:3c:03:95:83:
                    71:50:47:25:9b:03:81:fe:ee:8d:89:35:f9:02:2a:
                    b6:6b:08:ad:e7:f1:a4:e8:ac:95:3a:2f:1f:67:27:
                    b8:49:eb:73:98:9c:2b:e6:af:4c:c1:58:60:1e:a5:
                    75:f4:93:82:d2:75:26:a2:40:2b:1d:29:99:9b:71:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:89:72:64:2F:C8:6A:95:93:B5:82:50:DC:C2:22:A8:33:05:B2
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3132332e39392e302e302f31382d3234203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:8f:69:87:95:7d:3f:0d:35:9c:62:5a:72:7f:0c:99:d6:
         dd:e7:73:2a:45:5b:63:82:6c:58:9c:5a:4c:cf:07:4b:2a:30:
         99:0f:96:61:a0:3e:57:24:6a:c5:79:39:9c:8c:20:07:dc:e9:
         70:74:a6:7c:62:ff:37:19:90:16:6a:99:28:0d:25:fa:c9:b1:
         3e:d5:2a:ea:fe:da:50:1c:86:05:ad:5b:cd:03:b6:d6:0e:db:
         6e:43:dd:f6:72:0b:c8:c4:2e:fd:7e:bf:94:cb:a6:5f:86:a7:
         04:99:20:57:bb:6e:51:ce:c4:e8:3b:ce:20:2d:63:db:e9:5c:
         8a:4a:14:08:53:b4:2d:e2:79:04:cc:a5:dd:a7:2b:de:65:aa:
         0d:ee:51:93:43:a5:25:ec:35:38:d1:ee:ad:1f:67:52:af:5c:
         57:d8:c4:46:28:ee:3f:3a:e1:e9:18:7b:69:5d:cb:e0:01:2a:
         fa:5b:f5:41:e6:38:5e:05:9a:67:c5:c5:ea:d7:68:4d:5e:75:
         aa:61:fa:f2:9b:0b:d5:2b:0a:4b:30:ac:47:34:40:39:b2:92:
         6e:81:06:41:dc:1a:4d:c4:d3:95:5b:55:22:41:2e:d7:28:21:
         c6:91:cf:48:2a:eb:fe:ea:ef:c2:2a:66:ed:9d:d1:b9:91:f3:
         c6:21:53:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:31 2026 by rpki-client