Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/36312e36302e3232342e302f32302d3234203d3e203138303439.roa
File:                     36312e36302e3232342e302f32302d3234203d3e203138303439.roa (raw, json)
Hash identifier:          wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=
Subject key identifier:   67:2F:48:9B:FF:C3:9A:3D:F8:01:DD:A7:92:06:43:B2:05:5F:9D:D2
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       5C80A0D3A1A4755AE5DC2FEE5D5DCCDEDA9E0CD4
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36302e3232342e302f32302d3234203d3e203138303439.roa
Signing time:             Mon 11 May 2026 16:42:14 +0000
ROA not before:           Mon 11 May 2026 16:37:14 +0000
ROA not after:            Mon 10 May 2027 16:42:14 +0000
asID:                     18049
IP address blocks:        61.60.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:80:a0:d3:a1:a4:75:5a:e5:dc:2f:ee:5d:5d:cc:de:da:9e:0c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 11 16:37:14 2026 GMT
            Not After : May 10 16:42:14 2027 GMT
        Subject: CN=672F489BFFC39A3DF801DDA7920643B2055F9DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:2a:0e:ec:8d:0a:32:ee:99:cf:55:ef:6b:
                    5d:21:42:af:dc:31:88:9b:12:84:53:ec:99:90:ee:
                    4b:f0:19:6d:ef:9a:cf:03:17:ca:40:ae:f6:3a:fb:
                    4d:6c:b6:6a:b6:9a:76:6f:6e:24:84:28:61:1f:5d:
                    14:18:df:b2:94:78:b8:21:a1:d0:b5:b0:85:a7:26:
                    11:2d:50:ef:43:45:4a:75:ee:c1:fb:e8:b9:3c:73:
                    08:9b:22:dc:98:88:cf:33:69:d3:7f:14:b9:08:8d:
                    47:39:f2:ce:9d:e5:14:14:24:61:07:2b:05:d0:20:
                    56:44:d8:b1:a5:68:b1:3d:02:03:9f:15:2f:dc:64:
                    51:1a:6d:6d:5b:3d:aa:75:da:40:ce:55:97:ca:36:
                    4b:d5:3f:32:22:16:b8:45:ac:f5:4b:ca:04:25:81:
                    1f:dd:8c:c4:1e:3b:dc:1e:46:a8:e4:63:92:5d:5e:
                    25:7d:c5:a0:f9:ec:02:ec:ed:04:43:ec:0c:11:38:
                    b2:df:8e:ef:63:86:48:ff:e4:f0:1d:3b:63:76:48:
                    a0:d5:6a:e9:69:91:7f:76:58:d6:f7:81:00:97:c1:
                    8a:65:f1:b9:18:37:23:28:ec:37:cf:0c:bc:ef:88:
                    56:fb:07:c8:d4:7f:13:ba:a6:8b:f7:85:87:6e:d7:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2F:48:9B:FF:C3:9A:3D:F8:01:DD:A7:92:06:43:B2:05:5F:9D:D2
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36302e3232342e302f32302d3234203d3e203138303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:63:5e:cc:e0:be:13:ff:3c:53:34:1b:37:f3:90:cf:fc:53:
         33:d4:bf:31:9a:76:e1:58:d9:8b:7d:a1:ea:e4:3f:22:cf:5b:
         1c:bb:e2:3c:47:f7:cd:1d:84:76:60:91:53:bf:f6:28:da:2b:
         76:5b:82:7a:ab:e0:48:d9:e3:d5:9b:b7:1a:d3:f3:01:e2:b2:
         a6:a6:76:90:47:0d:8b:dc:e5:fe:56:ff:b7:3c:08:b7:27:88:
         43:8c:35:53:a1:84:9c:e8:d2:e4:c9:36:6a:f7:52:7c:98:2e:
         3c:a0:70:04:ff:6c:19:ab:8d:1d:c4:8a:f9:4d:2a:3e:84:ba:
         a8:6c:15:57:6c:78:2b:39:ec:ed:92:51:f1:6b:0a:a4:b3:a1:
         dc:d4:ca:86:fc:32:ea:43:24:cf:bb:8d:b3:5a:d7:75:6e:00:
         3e:37:e4:fb:33:48:6c:cd:b1:43:ec:94:84:b0:78:5f:fb:30:
         65:c5:4c:9f:e0:1f:4b:df:f8:2b:37:98:b0:1c:bb:b4:aa:ab:
         31:7d:55:23:bf:a6:88:a1:6c:0b:62:dd:f1:f6:7b:79:49:2e:
         db:7a:4d:e7:98:03:ea:34:76:39:ff:8e:f9:ea:5d:4d:7a:51:
         97:58:08:ab:7f:92:bf:2f:f8:91:70:58:1d:d4:ea:b6:57:82:
         5d:7d:96:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:31 2026 by rpki-client