Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32322d3232203d3e203137373039.roa
File:                     35392e3130322e3132382e302f32322d3232203d3e203137373039.roa (raw, json)
Hash identifier:          SCQP7ZSoRUkhfvE+FTEsIIoTtYLA2MgGSybNZQ/jWGA=
Subject key identifier:   0C:37:DF:6D:87:67:0D:04:B2:3D:ED:88:4B:FE:C0:44:27:7A:95:32
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       3D62BDB88D45C8E782609E007A422EE93EBD71A1
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32322d3232203d3e203137373039.roa
Signing time:             Mon 11 May 2026 17:37:06 +0000
ROA not before:           Mon 11 May 2026 17:32:06 +0000
ROA not after:            Mon 10 May 2027 17:37:06 +0000
asID:                     17709
IP address blocks:        59.102.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:62:bd:b8:8d:45:c8:e7:82:60:9e:00:7a:42:2e:e9:3e:bd:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:32:06 2026 GMT
            Not After : May 10 17:37:06 2027 GMT
        Subject: CN=0C37DF6D87670D04B23DED884BFEC044277A9532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:11:b0:69:38:fd:b7:3f:44:5f:d7:85:53:
                    08:60:e4:26:1d:96:a6:d0:36:63:65:d0:12:d8:ff:
                    f7:d2:d2:30:ab:96:50:d1:e7:7b:92:12:b7:c0:42:
                    17:ec:1f:af:3c:61:a2:26:33:22:ea:e6:67:02:e2:
                    49:93:2f:52:6e:59:b9:52:2e:69:13:8c:6c:99:29:
                    3d:ba:ac:e1:e4:07:90:29:24:ca:b2:e4:e9:a4:a6:
                    be:53:17:2d:3a:5d:9c:fe:58:bd:49:e6:f8:ef:7a:
                    72:07:b8:57:c9:3f:4b:6a:18:87:1d:79:ab:e0:79:
                    a6:cb:46:31:c7:9b:34:d3:27:13:29:8d:37:9c:2e:
                    21:17:d6:fb:31:38:46:82:f3:30:35:9a:f7:58:4a:
                    b9:31:58:0c:70:7c:43:7b:7a:2a:1d:6a:c9:11:de:
                    d8:75:a5:49:48:ec:17:b3:9f:ec:e1:ee:65:05:1c:
                    b2:da:77:cd:40:41:85:58:fe:c9:98:ca:83:08:30:
                    27:1d:c3:7e:ee:8b:0d:85:4e:06:61:29:06:a1:25:
                    3f:26:4b:ca:fa:20:f7:98:d6:d8:d4:a1:ce:8a:a1:
                    54:0a:74:44:8e:24:03:9b:23:9e:87:4d:8f:d8:91:
                    3c:e0:f2:fb:62:29:9b:a1:fd:1f:f0:a3:fb:8b:6c:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:DF:6D:87:67:0D:04:B2:3D:ED:88:4B:FE:C0:44:27:7A:95:32
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32322d3232203d3e203137373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.102.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:c1:af:cc:ae:aa:0f:bd:c3:d9:25:92:c0:fa:69:1c:39:
         3e:6f:31:10:40:8a:b2:fe:d5:89:09:3e:94:06:f2:07:83:0e:
         6d:22:51:02:5a:ea:74:c7:c3:3f:69:3c:db:cb:45:63:fa:27:
         bd:c9:24:f5:f7:70:2b:64:21:06:b4:a3:5e:21:eb:80:2b:f5:
         c3:59:06:e4:e4:af:b2:50:99:b6:ed:d1:d5:4f:a0:5d:9a:81:
         37:cb:8b:93:aa:ac:ed:1a:bd:2e:bb:25:e1:49:84:63:e0:e4:
         58:e9:90:0b:c0:bd:1d:e8:53:77:89:7f:1c:9f:45:cd:71:28:
         1c:ac:8b:f4:b5:5b:1b:a7:a5:80:ee:65:95:ec:32:f2:b6:46:
         26:68:09:ce:70:8e:4c:2c:11:9c:d1:3a:7a:80:d8:67:dd:f1:
         ac:81:7e:26:da:74:41:4b:0e:75:b7:97:48:b0:46:5c:3d:14:
         af:fb:4e:ca:c9:5c:e2:74:45:3e:b6:a7:c1:d6:70:e9:70:38:
         9a:e0:e0:30:4e:71:ac:1d:c5:e1:b2:a8:89:11:2c:1a:9d:6b:
         88:f4:5b:53:89:f4:92:b5:4f:12:4e:5b:de:89:31:7d:76:22:
         3d:87:f2:a8:12:0a:c2:ec:4a:cc:20:a5:92:64:ce:2b:f6:3b:
         d0:f1:05:72
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUPWK9uI1FyOeCYJ4AekIu6T69caEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2
OTY4Q0I0MDAeFw0yNjA1MTExNzMyMDZaFw0yNzA1MTAxNzM3MDZaMDMxMTAvBgNV
BAMTKDBDMzdERjZEODc2NzBEMDRCMjNERUQ4ODRCRkVDMDQ0Mjc3QTk1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl1BGwaTj9tz9EX9eFUwhg5CYd
lqbQNmNl0BLY//fS0jCrllDR53uSErfAQhfsH688YaImMyLq5mcC4kmTL1JuWblS
LmkTjGyZKT26rOHkB5ApJMqy5Omkpr5TFy06XZz+WL1J5vjvenIHuFfJP0tqGIcd
eavgeabLRjHHmzTTJxMpjTecLiEX1vsxOEaC8zA1mvdYSrkxWAxwfEN7eiodaskR
3th1pUlI7Bezn+zh7mUFHLLad81AQYVY/smYyoMIMCcdw37uiw2FTgZhKQahJT8m
S8r6IPeY1tjUoc6KoVQKdESOJAObI56HTY/YkTzg8vtiKZuh/R/wo/uLbJnVAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUDDffbYdnDQSyPe2IS/7ARCd6lTIwHwYDVR0j
BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v
MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy
NjgwNjk2OENCNDAuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM1MzkyZTMxMzAzMjJl
MzEzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM3MzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAjtmgDANBgkqhkiG9w0BAQsFAAOCAQEALMjBr8yuqg+9w9klksD6aRw5Pm8x
EECKsv7ViQk+lAbyB4MObSJRAlrqdMfDP2k828tFY/onvckk9fdwK2QhBrSjXiHr
gCv1w1kG5OSvslCZtu3R1U+gXZqBN8uLk6qs7Rq9Lrsl4UmEY+DkWOmQC8C9HehT
d4l/HJ9FzXEoHKyL9LVbG6elgO5llewy8rZGJmgJznCOTCwRnNE6eoDYZ93xrIF+
Jtp0QUsOdbeXSLBGXD0Ur/tOyslc4nRFPranwdZw6XA4muDgME5xrB3F4bKoiREs
Gp1riPRbU4n0krVPEk5b3okxfXYiPYfyqBIKwuxKzCClkmTOK/Y70PEFcg==
-----END CERTIFICATE-----
Generated at Wed May 13 07:36:05 2026 by rpki-client