Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37372e302f32342d3234203d3e20313331363133.roa
File:                     3230322e3136302e37372e302f32342d3234203d3e20313331363133.roa (raw, json)
Hash identifier:          Lsqviuj6z61/0n14iEl15NKSmxBBqxDEIS4WyoPIPn8=
Subject key identifier:   DA:D2:36:5A:86:C3:B4:02:3C:76:76:24:26:AA:07:5D:23:FC:BC:37
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       55834C5D7CB2A83DFC0B2FD70B20FE206861635F
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37372e302f32342d3234203d3e20313331363133.roa
Signing time:             Mon 11 May 2026 17:57:59 +0000
ROA not before:           Mon 11 May 2026 17:52:59 +0000
ROA not after:            Mon 10 May 2027 17:57:59 +0000
asID:                     131613
IP address blocks:        202.160.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:83:4c:5d:7c:b2:a8:3d:fc:0b:2f:d7:0b:20:fe:20:68:61:63:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:52:59 2026 GMT
            Not After : May 10 17:57:59 2027 GMT
        Subject: CN=DAD2365A86C3B4023C76762426AA075D23FCBC37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:c8:7f:d8:c6:8f:36:c3:13:06:64:50:60:
                    7b:be:ca:a0:ae:13:be:ca:46:de:3f:a1:d2:21:68:
                    96:38:11:6e:ad:fd:cd:54:80:a8:24:b9:a5:d9:70:
                    ea:20:b7:08:b6:7a:3c:a9:c9:92:da:8c:05:1e:2a:
                    69:3f:76:4e:50:24:d8:e6:17:0d:a1:84:d1:17:b3:
                    c6:b6:34:2c:69:b0:1c:b5:e1:a1:2c:90:f8:85:05:
                    99:53:58:a7:3f:8c:00:54:07:56:b2:e9:09:8a:75:
                    f2:2f:73:e8:d8:f1:75:a5:da:67:bf:2c:3a:5d:84:
                    17:4d:ff:c9:8f:2a:0c:3c:d1:ce:b0:65:3e:e6:cc:
                    a8:01:fc:7c:dc:52:22:c9:bd:3e:96:9e:9d:54:2e:
                    d8:b3:c5:ce:fd:70:ca:74:8e:d4:3d:1b:bb:42:fc:
                    4e:24:e1:31:e2:e8:33:a3:ac:60:08:ce:e1:ea:a5:
                    94:32:8a:f0:d8:8e:7c:d6:b0:75:a5:43:6b:ea:a0:
                    41:6d:09:40:67:8a:c8:ce:83:0b:b3:12:47:bc:80:
                    8e:93:22:ee:f8:69:a7:91:95:ce:71:cb:b7:4f:07:
                    61:b7:b4:5a:2f:4a:a1:e3:3f:ea:38:56:6f:e3:c5:
                    67:43:36:04:c3:e9:86:7e:0e:ab:f7:77:e4:3d:0c:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D2:36:5A:86:C3:B4:02:3C:76:76:24:26:AA:07:5D:23:FC:BC:37
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37372e302f32342d3234203d3e20313331363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5a:ac:71:d8:2a:3d:b0:e8:d4:d0:f8:d7:97:93:67:74:1a:
         65:be:3a:92:a1:4f:51:a1:76:ee:72:9d:27:b0:88:28:9c:d0:
         86:3b:6c:ea:bb:af:3f:4f:ae:b0:24:30:be:78:55:3b:1d:1c:
         ab:79:0a:f8:ac:38:5e:c3:aa:68:48:2a:be:ec:09:20:d9:ff:
         90:77:2e:d1:4d:13:88:c2:8c:2b:b4:01:ea:34:f6:07:43:e1:
         98:c3:9a:4a:20:49:35:01:c1:e5:e2:56:a3:cf:f4:93:c6:1e:
         68:9e:f4:6d:aa:e8:a9:e0:f8:b2:d8:b3:21:44:56:92:7a:a0:
         07:02:2c:f4:60:7f:85:6d:e8:45:2e:0d:64:8d:7d:88:a0:29:
         27:18:cc:57:34:02:5d:3a:87:7a:c5:e3:86:d3:93:ec:00:26:
         12:a5:e6:63:62:cf:d6:bf:e2:31:17:e4:44:d1:b0:b7:72:6d:
         27:a9:76:89:29:10:e6:2a:9f:8b:fa:a4:75:2b:93:b9:f6:dd:
         02:8f:08:e2:13:77:3a:f1:e0:65:f6:ec:20:4f:a9:c6:3e:c2:
         4f:94:95:ed:4d:1e:30:3d:ac:7f:42:9b:8e:ae:fe:4f:47:ac:
         d4:76:4f:1a:f5:69:72:f1:19:b2:5b:0d:8e:98:a6:93:d3:38:
         86:32:ae:b3
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUVYNMXXyyqD38Cy/XCyD+IGhhY18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2
M0Q5MkZCMjAeFw0yNjA1MTExNzUyNTlaFw0yNzA1MTAxNzU3NTlaMDMxMTAvBgNV
BAMTKERBRDIzNjVBODZDM0I0MDIzQzc2NzYyNDI2QUEwNzVEMjNGQ0JDMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYch/2MaPNsMTBmRQYHu+yqCu
E77KRt4/odIhaJY4EW6t/c1UgKgkuaXZcOogtwi2ejypyZLajAUeKmk/dk5QJNjm
Fw2hhNEXs8a2NCxpsBy14aEskPiFBZlTWKc/jABUB1ay6QmKdfIvc+jY8XWl2me/
LDpdhBdN/8mPKgw80c6wZT7mzKgB/HzcUiLJvT6Wnp1ULtizxc79cMp0jtQ9G7tC
/E4k4THi6DOjrGAIzuHqpZQyivDYjnzWsHWlQ2vqoEFtCUBnisjOgwuzEke8gI6T
Iu74aaeRlc5xy7dPB2G3tFovSqHjP+o4Vm/jxWdDNgTD6YZ+Dqv3d+Q9DOtTAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU2tI2WobDtAI8dnYkJqoHXSP8vDcwHwYDVR0j
BBgwFoAUJYYEPRgLFTzvNmpCIjLCDWPZL7IwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxL
RVJBLzAvMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2M0Q5MkZCMi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNTg2MDQzRDE4MEIxNTNDRUYzNjZBNDIy
MjMyQzIwRDYzRDkyRkIyLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RQU0lMS0VSQS8wLzMyMzAz
MjJlMzEzNjMwMmUzNzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMxMzYz
MTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyqBNMA0GCSqGSIb3DQEBCwUAA4IBAQCsWqxx2Co9sOjU
0PjXl5NndBplvjqSoU9RoXbucp0nsIgonNCGO2zqu68/T66wJDC+eFU7HRyreQr4
rDhew6poSCq+7Akg2f+Qdy7RTROIwowrtAHqNPYHQ+GYw5pKIEk1AcHl4lajz/ST
xh5onvRtquip4Piy2LMhRFaSeqAHAiz0YH+FbehFLg1kjX2IoCknGMxXNAJdOod6
xeOG05PsACYSpeZjYs/Wv+IxF+RE0bC3cm0nqXaJKRDmKp+L+qR1K5O59t0Cjwji
E3c68eBl9uwgT6nGPsJPlJXtTR4wPax/QpuOrv5PR6zUdk8a9Wly8RmyWw2OmKaT
0ziGMq6z
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:50 2026 by rpki-client