Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3132332e3234302e302e302f31352d3234203d3e203137373039.roa
File:                     3132332e3234302e302e302f31352d3234203d3e203137373039.roa (raw, json)
Hash identifier:          nTIf0JLRANNHscYxEEbuDAyXdM6iJARUk7V2cTXeKos=
Subject key identifier:   94:D8:53:5A:61:83:54:6A:94:B0:15:69:4B:2E:AE:40:66:BC:A5:7E
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       74217D1D0D67AF8926A5AF37209D93AE2997A87A
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3234302e302e302f31352d3234203d3e203137373039.roa
Signing time:             Mon 11 May 2026 17:37:03 +0000
ROA not before:           Mon 11 May 2026 17:32:03 +0000
ROA not after:            Mon 10 May 2027 17:37:03 +0000
asID:                     17709
IP address blocks:        123.240.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:21:7d:1d:0d:67:af:89:26:a5:af:37:20:9d:93:ae:29:97:a8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:32:03 2026 GMT
            Not After : May 10 17:37:03 2027 GMT
        Subject: CN=94D8535A6183546A94B015694B2EAE4066BCA57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:55:6d:e7:06:88:57:7c:06:84:bf:24:12:4d:
                    b9:cf:3f:95:8e:c6:df:42:ed:02:75:6a:b1:00:94:
                    96:9f:3a:91:8b:8d:d6:a5:4e:8a:4c:81:68:37:cf:
                    68:61:21:67:5b:f7:12:13:93:b1:d8:d8:82:c1:ab:
                    5c:bc:df:b6:66:5e:e4:e7:8e:82:51:37:30:4a:10:
                    1a:d0:e2:09:f4:f0:75:bb:e2:cb:61:a0:17:84:f5:
                    0d:d1:4c:51:fe:3d:e5:a6:ff:23:37:53:44:50:fa:
                    9d:09:b5:58:1a:e2:15:67:6e:3b:17:b8:ff:c0:80:
                    09:a4:19:c5:79:7b:45:68:5e:77:ad:3a:2a:37:f2:
                    65:0f:cb:bd:04:1e:36:25:a8:48:71:ec:71:1f:01:
                    e8:bc:06:99:cc:93:08:6d:0f:b9:17:91:fb:30:c7:
                    af:05:01:14:6e:c0:57:26:ba:a8:10:d9:95:6a:4f:
                    a1:0e:1d:e7:bf:48:67:9c:d5:9d:69:6e:d6:b2:77:
                    42:10:6b:f9:2c:d8:11:21:9e:ca:26:e4:8c:25:70:
                    a2:e2:c4:7d:f7:ff:d1:25:ef:07:0d:97:a7:d7:ec:
                    91:6a:32:39:7b:3c:ed:19:a4:a7:dc:2f:36:67:fa:
                    e9:00:5b:f0:04:a6:63:9c:f3:ba:63:08:33:eb:ab:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D8:53:5A:61:83:54:6A:94:B0:15:69:4B:2E:AE:40:66:BC:A5:7E
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3234302e302e302f31352d3234203d3e203137373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.240.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a7:63:50:87:9e:46:71:86:9a:ea:4a:fe:20:cf:b4:fb:70:87:
         a9:7d:10:cf:0d:89:1b:0f:e5:d2:42:80:f6:0d:87:e3:2a:cf:
         db:d2:88:22:93:36:59:48:b1:9e:fa:d2:b2:c6:02:a4:5c:58:
         3e:0a:ba:35:b3:73:b4:9a:93:98:1a:54:4e:12:9e:a0:cf:17:
         67:59:05:43:25:67:66:94:78:c6:ba:1c:8d:e7:cb:fc:62:ca:
         76:c6:4d:3c:9a:a0:48:04:7b:12:c2:e2:19:5d:27:27:35:fe:
         66:e6:ac:06:b3:05:95:99:7e:76:8b:8d:6b:c4:8e:5a:7d:81:
         a4:8b:0f:f4:e2:1b:8e:8e:49:23:a9:87:51:85:99:6f:36:ce:
         f3:b9:95:3c:da:8c:ff:1f:d8:ab:d0:cd:eb:ed:d6:b1:8d:b5:
         36:29:e9:d0:8e:4b:eb:bf:0d:3e:1b:ce:8c:41:c2:ca:b0:9c:
         89:52:90:97:08:44:22:fc:d1:d5:e4:26:4b:dc:91:ac:2b:a9:
         aa:e8:06:47:38:7c:0b:60:43:89:d8:c3:5a:b3:8a:e5:bf:ca:
         2a:53:08:21:ad:5e:36:6e:69:a4:5d:2e:92:0e:a5:ef:cc:21:
         8e:b9:49:3c:a0:fd:40:97:a3:b0:4e:76:66:56:30:85:bc:12:
         c7:95:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:04 2026 by rpki-client