Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32312d3234203d3e203137373039.roa
File:                     35392e3130322e3132382e302f32312d3234203d3e203137373039.roa (raw, json)
Hash identifier:          hsUigvD/C2MEWkcVqYUi9xtKdF4dVRjDIuk/N5UkYRI=
Subject key identifier:   83:36:1B:84:FB:8E:E3:05:B8:A1:80:FA:23:B1:41:7F:ED:14:35:5B
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       72FC527F89F691B7D3A150F47FD5EE01D86AA340
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32312d3234203d3e203137373039.roa
Signing time:             Mon 11 May 2026 17:37:05 +0000
ROA not before:           Mon 11 May 2026 17:32:05 +0000
ROA not after:            Mon 10 May 2027 17:37:05 +0000
asID:                     17709
IP address blocks:        59.102.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:fc:52:7f:89:f6:91:b7:d3:a1:50:f4:7f:d5:ee:01:d8:6a:a3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:32:05 2026 GMT
            Not After : May 10 17:37:05 2027 GMT
        Subject: CN=83361B84FB8EE305B8A180FA23B1417FED14355B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:49:a9:69:06:7f:78:78:e3:b7:1a:d2:f4:
                    14:2d:92:53:b0:99:8e:82:b6:90:56:bb:7f:f1:50:
                    e4:38:89:d7:38:e9:98:c1:13:d8:36:a4:3f:b0:ac:
                    1a:63:2f:4d:1e:d6:88:e0:49:ff:2a:e1:c7:29:ec:
                    98:c0:ee:17:74:7a:1d:fe:49:48:fe:46:69:57:b4:
                    1c:e6:e6:d7:f7:fc:2b:a5:1f:41:f4:57:be:80:90:
                    ff:2e:b4:d1:e9:7e:c0:05:4e:fe:85:76:4d:6d:31:
                    db:83:37:e4:f4:b1:0a:44:82:39:ab:25:b2:27:a6:
                    cb:57:2b:4f:42:63:4f:c9:a7:c0:28:54:14:4d:d3:
                    d6:55:3b:3b:23:a9:50:09:cb:dc:81:6b:31:cf:24:
                    f8:ed:ae:7c:73:5e:8d:fd:fe:6b:e7:fd:24:b3:41:
                    c3:d4:e1:aa:59:ff:c6:21:aa:80:9b:c4:bd:68:da:
                    24:c7:da:d6:67:44:7a:65:00:64:9c:cb:1a:81:6b:
                    22:a7:fc:22:ce:92:18:1b:07:90:d4:5b:3d:8b:33:
                    42:38:fa:ed:11:bb:4e:b0:a6:d3:6e:32:2a:d8:60:
                    ea:7f:97:92:c9:02:f5:93:85:b2:9b:03:c0:71:60:
                    97:9b:61:40:5c:55:4b:6e:ad:4f:8e:a8:f6:2e:7f:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:1B:84:FB:8E:E3:05:B8:A1:80:FA:23:B1:41:7F:ED:14:35:5B
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32312d3234203d3e203137373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.102.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:a0:94:2c:0c:7c:98:48:0f:36:33:c6:6f:e1:c4:ae:5c:
         29:16:50:7f:47:30:67:d7:4c:56:90:a7:9f:40:aa:bd:47:87:
         14:31:71:df:90:22:f2:05:6b:ba:a2:e7:17:2f:d7:45:a8:6a:
         81:b2:7f:4a:5e:05:e2:f4:5f:6b:66:8b:c3:3e:9d:c7:75:bf:
         7a:1a:ee:6d:43:3a:97:c2:3f:ca:6d:14:e0:0f:9b:a9:e9:cd:
         54:c7:73:ee:05:7e:04:e0:c9:d7:7e:2b:b1:4f:01:08:65:8f:
         76:f8:9d:c2:e9:9a:f5:29:d2:dd:a3:5c:f1:df:ff:22:a0:23:
         c6:b1:6c:6d:1f:e2:a9:4a:9d:6e:fe:54:92:94:01:c9:95:56:
         08:6d:c5:7a:bc:e7:cf:2b:38:64:41:1b:b9:6c:36:67:9e:4c:
         54:4e:cb:10:d8:a4:92:00:6a:35:d6:36:fa:cd:54:db:07:61:
         86:76:1f:b8:ce:a8:0d:a4:6e:99:b7:e4:be:8a:4a:24:09:aa:
         cb:6b:0e:2c:84:5d:1c:98:c8:92:17:63:95:03:23:83:e5:73:
         a4:27:52:e6:74:7f:af:89:83:ac:f0:cc:de:ca:f9:52:87:51:
         a1:4d:7c:7a:d4:20:a8:71:05:05:48:db:a7:62:98:37:56:47:
         ac:a6:8c:fe
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUcvxSf4n2kbfToVD0f9XuAdhqo0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2
OTY4Q0I0MDAeFw0yNjA1MTExNzMyMDVaFw0yNzA1MTAxNzM3MDVaMDMxMTAvBgNV
BAMTKDgzMzYxQjg0RkI4RUUzMDVCOEExODBGQTIzQjE0MTdGRUQxNDM1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUkmpaQZ/eHjjtxrS9BQtklOw
mY6CtpBWu3/xUOQ4idc46ZjBE9g2pD+wrBpjL00e1ojgSf8q4ccp7JjA7hd0eh3+
SUj+RmlXtBzm5tf3/CulH0H0V76AkP8utNHpfsAFTv6Fdk1tMduDN+T0sQpEgjmr
JbInpstXK09CY0/Jp8AoVBRN09ZVOzsjqVAJy9yBazHPJPjtrnxzXo39/mvn/SSz
QcPU4apZ/8YhqoCbxL1o2iTH2tZnRHplAGScyxqBayKn/CLOkhgbB5DUWz2LM0I4
+u0Ru06wptNuMirYYOp/l5LJAvWThbKbA8BxYJebYUBcVUturU+OqPYuf4sFAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUgzYbhPuO4wW4oYD6I7FBf+0UNVswHwYDVR0j
BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v
MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy
NjgwNjk2OENCNDAuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM1MzkyZTMxMzAzMjJl
MzEzMjM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzNzM3MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAztmgDANBgkqhkiG9w0BAQsFAAOCAQEAJeKglCwMfJhIDzYzxm/hxK5cKRZQ
f0cwZ9dMVpCnn0CqvUeHFDFx35Ai8gVruqLnFy/XRahqgbJ/Sl4F4vRfa2aLwz6d
x3W/ehrubUM6l8I/ym0U4A+bqenNVMdz7gV+BODJ134rsU8BCGWPdvidwuma9SnS
3aNc8d//IqAjxrFsbR/iqUqdbv5UkpQByZVWCG3Ferznzys4ZEEbuWw2Z55MVE7L
ENikkgBqNdY2+s1U2wdhhnYfuM6oDaRumbfkvopKJAmqy2sOLIRdHJjIkhdjlQMj
g+VzpCdS5nR/r4mDrPDM3sr5UodRoU18etQgqHEFBUjbp2KYN1ZHrKaM/g==
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:39 2026 by rpki-client