Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/34332e3234302e3130382e302f32322d3234203d3e203234313538.roa
File:                     34332e3234302e3130382e302f32322d3234203d3e203234313538.roa (raw, json)
Hash identifier:          jgSZl/bfvxgEOJvzV0oo2+KlY4i3qBqFvCMdnZLKmpQ=
Subject key identifier:   86:2B:15:E3:DF:61:37:18:1E:F3:21:7A:77:42:43:A0:B7:A6:27:9E
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       4ADBD5839D8D1B54A96D96D6551B526CF667FDA4
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/34332e3234302e3130382e302f32322d3234203d3e203234313538.roa
Signing time:             Mon 11 May 2026 16:13:42 +0000
ROA not before:           Mon 11 May 2026 16:08:42 +0000
ROA not after:            Mon 10 May 2027 16:13:42 +0000
asID:                     24158
IP address blocks:        43.240.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:db:d5:83:9d:8d:1b:54:a9:6d:96:d6:55:1b:52:6c:f6:67:fd:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 16:08:42 2026 GMT
            Not After : May 10 16:13:42 2027 GMT
        Subject: CN=862B15E3DF6137181EF3217A774243A0B7A6279E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:5d:3c:85:0d:db:aa:c0:c5:f9:4f:ee:87:
                    1c:03:d5:b8:a3:c6:ed:7a:3a:bd:1d:04:9b:c4:41:
                    bc:e9:85:50:66:4d:09:96:e8:7f:19:65:ff:35:a7:
                    22:f4:f2:b7:bf:61:5b:ff:cc:44:b3:db:bc:7e:1f:
                    f2:4b:d8:38:f6:d6:da:bb:a5:cd:1c:fd:38:ee:f5:
                    44:26:1b:ef:15:bd:c5:da:e7:60:04:f4:20:a1:d2:
                    d2:86:7d:cd:4c:87:97:77:19:bb:d1:be:4a:cf:9d:
                    fd:b8:a2:1d:25:7b:00:d5:7d:20:3e:40:07:f8:43:
                    0e:37:38:7e:21:8b:59:97:89:31:0d:22:71:86:81:
                    40:93:7d:d6:9f:74:00:11:2e:3c:f3:0b:de:ec:1d:
                    a2:8b:df:19:92:4a:c2:08:cc:69:5a:73:a5:7e:28:
                    64:e1:f4:a4:84:4f:89:b3:5b:51:de:8d:83:22:11:
                    08:b7:72:7f:bf:16:0f:8b:f0:da:f9:25:d2:af:0d:
                    9c:26:2e:2f:b0:8d:33:82:ef:93:a1:d9:d8:be:4c:
                    7e:2b:cf:15:a1:10:b5:39:e4:7f:41:98:cf:82:9a:
                    6f:38:cf:c8:7f:a9:52:7d:34:30:d6:5b:0e:b6:0d:
                    1a:3b:24:df:fd:13:0f:7a:bd:9a:93:69:71:44:18:
                    14:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:15:E3:DF:61:37:18:1E:F3:21:7A:77:42:43:A0:B7:A6:27:9E
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/34332e3234302e3130382e302f32322d3234203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:39:8b:ac:07:98:5e:84:9e:8a:9a:d4:bc:80:a3:9d:ec:2e:
         1e:32:b7:63:bf:55:f4:16:e1:c1:95:58:52:9c:af:36:2a:b1:
         01:2a:ea:d2:8e:57:5a:54:9b:97:a8:1d:d7:fb:11:c1:04:b2:
         0b:c3:78:91:a4:c8:4e:d3:89:d9:2d:2d:45:01:e3:d8:7b:c3:
         24:42:ca:6c:1c:b1:96:f4:d2:17:69:2f:8c:f2:62:6b:80:fd:
         72:95:4a:97:12:66:19:76:73:20:e4:e6:57:b6:0c:96:08:be:
         99:3e:df:03:a2:ee:32:70:ec:28:42:98:a6:61:ef:5d:39:de:
         9a:91:d8:54:2d:cc:73:7b:c4:ea:39:09:b9:81:83:83:72:10:
         03:28:49:69:fd:20:8a:6d:7a:dc:2a:e5:2c:5e:31:c2:ee:8b:
         1c:88:54:9a:90:23:32:da:62:0e:00:ee:f2:58:ef:d2:86:cf:
         82:1f:6c:c4:7b:00:57:47:f1:0b:53:e2:7d:be:e8:04:b5:86:
         dc:13:49:03:c6:b2:78:78:98:b1:72:3c:7e:3a:81:f5:42:51:
         15:70:ed:24:ad:b7:b3:8b:d8:75:a6:55:2a:0e:5b:63:53:be:
         d9:ed:16:f0:1e:38:bb:ba:6c:25:62:89:b7:72:1a:a0:f5:1c:
         62:a0:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:44:00 2026 by rpki-client