Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa
File:                     3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa (raw, json)
Hash identifier:          SA+MolmDElRy9IFzjhBqYoLw26M3TnFmXfdfuaY9ICs=
Subject key identifier:   8B:3E:45:6E:80:16:83:97:C8:13:75:36:EF:B1:C0:73:7F:18:E9:44
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       5ED1DE6E666975BFB009F3FEA4A04A330734257A
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa
Signing time:             Mon 11 May 2026 17:11:01 +0000
ROA not before:           Mon 11 May 2026 17:06:01 +0000
ROA not after:            Mon 10 May 2027 17:11:01 +0000
asID:                     18049
IP address blocks:        116.118.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d1:de:6e:66:69:75:bf:b0:09:f3:fe:a4:a0:4a:33:07:34:25:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 11 17:06:01 2026 GMT
            Not After : May 10 17:11:01 2027 GMT
        Subject: CN=8B3E456E80168397C8137536EFB1C0737F18E944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:04:6f:c1:5e:c8:ed:78:64:6f:da:d4:20:
                    7b:2f:96:3f:f4:82:1e:02:9f:6e:4d:2a:ee:94:d2:
                    7a:d4:5a:ed:51:d1:1c:81:f7:26:c4:f6:8b:7a:a2:
                    67:2a:69:76:97:70:56:de:b8:1c:5a:ce:14:3d:e8:
                    17:0c:fc:d5:d1:a8:03:e4:7e:40:63:cc:c9:a9:b2:
                    ff:b9:23:f8:98:0a:6a:3d:96:4a:99:3c:1b:a9:be:
                    ea:e2:fc:87:88:fc:18:2b:25:88:2d:bc:f3:54:48:
                    39:77:a3:a5:bc:f8:56:5f:22:5b:f5:be:ed:70:e1:
                    f3:cf:ad:e9:23:ac:80:f8:c2:8d:4e:2a:d3:3c:0e:
                    28:59:6f:5f:cd:5d:de:a1:64:a8:11:4b:c2:c2:13:
                    d5:d9:72:8f:de:9c:d6:ce:f8:0c:96:8e:bd:5e:fd:
                    06:d9:a7:85:8a:45:57:ed:dd:8c:c7:d6:30:58:d6:
                    3d:7d:8b:7a:4e:d0:c9:d8:19:5d:62:f4:81:59:7a:
                    67:a8:74:bb:89:6d:93:19:fc:75:a9:63:61:42:c3:
                    76:15:c2:ba:d5:ae:a6:cc:96:9f:a1:df:df:cf:74:
                    bf:0f:58:d0:47:73:cf:aa:a7:fd:bb:64:32:79:14:
                    eb:39:7b:d9:27:ee:93:5f:48:95:33:1c:fb:55:77:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:45:6E:80:16:83:97:C8:13:75:36:EF:B1:C0:73:7F:18:E9:44
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.118.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         53:20:15:39:97:19:2c:d9:b1:2e:6a:a8:d4:bc:dd:e0:0e:11:
         ab:81:37:5e:e0:fd:a0:d9:ef:46:ec:0b:36:16:0f:01:ad:d7:
         af:10:ab:cb:1e:6c:76:fc:45:aa:17:ad:a2:69:1e:55:37:01:
         0e:9d:1a:18:e2:7a:f6:be:9a:5f:ab:a2:0c:25:f5:c9:4b:59:
         b1:4f:4b:6c:45:68:2b:74:d4:ce:6e:f3:c1:c5:4d:b8:cc:8f:
         ff:78:3b:e4:fc:4b:7c:ab:5a:cd:d7:2a:63:0a:2a:fb:c6:02:
         68:98:d2:34:58:2d:93:39:1d:6d:6b:b5:3c:57:98:3c:d4:ad:
         c2:e8:1b:d6:cc:80:23:45:3a:a4:39:5b:0b:b2:78:ff:dd:5f:
         b3:cc:ea:ad:1d:18:92:0f:a6:55:8d:33:9c:9a:53:22:d3:ad:
         14:7d:ae:5a:e1:94:02:b5:fc:06:2e:a1:7d:af:fd:ba:b5:2a:
         55:bd:57:c5:d8:5b:e5:68:39:25:10:d9:50:a3:d4:e1:b5:dc:
         f7:75:71:c4:ad:7f:6f:ad:78:2c:ef:5d:98:a4:e0:d2:2d:4b:
         16:7d:a1:3c:3d:15:1a:87:8c:e9:3c:16:78:c3:ea:6d:79:90:
         4f:59:63:af:2c:36:03:12:fb:97:f0:6a:e0:6a:5d:b7:f4:f0:
         89:1e:12:77
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUXtHebmZpdb+wCfP+pKBKMwc0JXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy
NDdBNTYwRjAeFw0yNjA1MTExNzA2MDFaFw0yNzA1MTAxNzExMDFaMDMxMTAvBgNV
BAMTKDhCM0U0NTZFODAxNjgzOTdDODEzNzUzNkVGQjFDMDczN0YxOEU5NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqEgRvwV7I7Xhkb9rUIHsvlj/0
gh4Cn25NKu6U0nrUWu1R0RyB9ybE9ot6omcqaXaXcFbeuBxazhQ96BcM/NXRqAPk
fkBjzMmpsv+5I/iYCmo9lkqZPBupvuri/IeI/BgrJYgtvPNUSDl3o6W8+FZfIlv1
vu1w4fPPrekjrID4wo1OKtM8DihZb1/NXd6hZKgRS8LCE9XZco/enNbO+AyWjr1e
/QbZp4WKRVft3YzH1jBY1j19i3pO0MnYGV1i9IFZemeodLuJbZMZ/HWpY2FCw3YV
wrrVrqbMlp+h39/PdL8PWNBHc8+qp/27ZDJ5FOs5e9kn7pNfSJUzHPtVd407AgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUiz5FboAWg5fIE3U277HAc38Y6UQwHwYDVR0j
BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w
L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3
M0QyNDdBNTYwRi5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zMTMxMzYyZTMxMzEzODJl
MzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzODMwMzQzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnR2gDANBgkqhkiG9w0BAQsFAAOCAQEAUyAVOZcZLNmxLmqo1Lzd4A4Rq4E3
XuD9oNnvRuwLNhYPAa3XrxCryx5sdvxFqhetomkeVTcBDp0aGOJ69r6aX6uiDCX1
yUtZsU9LbEVoK3TUzm7zwcVNuMyP/3g75PxLfKtazdcqYwoq+8YCaJjSNFgtkzkd
bWu1PFeYPNStwugb1syAI0U6pDlbC7J4/91fs8zqrR0Ykg+mVY0znJpTItOtFH2u
WuGUArX8Bi6hfa/9urUqVb1Xxdhb5Wg5JRDZUKPU4bXc93VxxK1/b614LO9dmKTg
0i1LFn2hPD0VGoeM6TwWeMPqbXmQT1ljryw2AxL7l/Bq4Gpdt/TwiR4Sdw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:53:12 2026 by rpki-client