Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37382e302f32342d3234203d3e20313331363133.roa
File:                     3230322e3136302e37382e302f32342d3234203d3e20313331363133.roa (raw, json)
Hash identifier:          qHjROtH4ZhHqSJgRQZh7VqUsj4li1MGgEc2tfB6T1IA=
Subject key identifier:   01:4B:B1:0C:3A:5C:06:D0:CC:EC:BC:69:80:34:00:A4:C1:11:CD:B1
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       1DEE9F8703C7E462F092C3D42CCE45DE8C08E608
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37382e302f32342d3234203d3e20313331363133.roa
Signing time:             Mon 11 May 2026 17:58:02 +0000
ROA not before:           Mon 11 May 2026 17:53:02 +0000
ROA not after:            Mon 10 May 2027 17:58:02 +0000
asID:                     131613
IP address blocks:        202.160.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ee:9f:87:03:c7:e4:62:f0:92:c3:d4:2c:ce:45:de:8c:08:e6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:53:02 2026 GMT
            Not After : May 10 17:58:02 2027 GMT
        Subject: CN=014BB10C3A5C06D0CCECBC69803400A4C111CDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:6d:ab:3b:99:27:da:b4:27:63:a5:5d:5e:
                    ae:a3:0b:27:04:93:2a:ce:a6:a5:cf:08:de:d6:19:
                    db:de:da:9b:ee:7b:eb:ae:18:fc:c5:06:90:bd:dd:
                    e0:4b:86:a9:2b:7e:12:cb:c8:da:16:d5:b6:98:5d:
                    85:e8:9a:7e:30:bc:6d:44:20:6c:1c:2d:1d:b5:7e:
                    b6:18:aa:bc:49:10:6e:a5:97:dc:05:fd:50:7a:b4:
                    32:04:84:05:04:2f:1a:e5:e5:17:54:9c:03:7d:8b:
                    dc:de:1e:07:ae:bd:c5:d4:af:5d:39:93:95:1a:44:
                    59:59:0b:ef:01:2f:6e:6f:cb:13:50:c8:9b:e1:ad:
                    75:13:8a:3f:d9:ef:b0:8a:a2:1e:27:8f:80:4e:f4:
                    ce:e8:14:b7:d1:5b:a6:9d:b8:d5:2f:b9:a6:c8:77:
                    31:5d:d6:93:b0:bb:de:65:19:8a:ef:93:eb:c1:93:
                    29:a4:1d:95:66:0b:3e:1d:7f:d0:7f:b3:08:48:5b:
                    52:d1:37:07:ec:30:e3:81:46:94:9e:78:1e:f5:f7:
                    a4:0e:40:e3:c1:fb:4b:da:2a:9d:b8:0a:a2:62:b4:
                    e7:ba:24:52:39:84:7f:63:31:14:1a:66:c3:c4:a9:
                    63:66:41:96:00:d2:1f:61:14:e6:70:a8:71:5e:99:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:B1:0C:3A:5C:06:D0:CC:EC:BC:69:80:34:00:A4:C1:11:CD:B1
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37382e302f32342d3234203d3e20313331363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:98:0a:36:90:75:cf:d2:2a:7c:56:ab:3a:b9:d9:87:0b:
         02:ae:46:69:7d:a6:b7:bc:7b:c1:3a:09:30:9a:5c:04:a4:1f:
         1d:2e:34:42:82:13:47:77:c3:58:7d:bd:32:ed:1a:eb:38:36:
         26:71:d1:7b:f4:72:45:77:1a:88:06:62:64:50:b2:6d:3d:fd:
         6e:7f:c0:16:2a:59:0f:b3:46:54:d8:fe:a7:a0:8d:db:c1:42:
         85:2a:5d:1e:b8:7d:3e:1b:cf:19:ee:e1:32:bd:d1:fc:cd:b3:
         41:13:e2:51:0c:cb:86:64:43:68:3e:e4:78:95:f3:e7:a4:d4:
         ed:83:ca:eb:7b:40:0c:4e:26:84:3e:86:f1:d5:73:0f:2f:81:
         3b:e0:cb:13:30:6a:e4:d2:22:52:0c:37:e8:1d:77:3a:de:6a:
         20:6f:3a:4a:1b:8c:f5:f2:ae:62:8a:2a:19:82:37:3f:4b:a6:
         65:6d:73:c0:23:ea:5d:1d:44:24:3e:a1:93:6d:18:a0:fd:6f:
         fa:b7:0d:72:82:6d:ee:d3:93:3d:2f:dc:d3:c0:7b:78:1e:11:
         1b:d9:b2:e7:ad:9d:56:52:2a:e4:0d:19:1e:92:be:4b:d5:93:
         46:21:bb:dd:55:3a:13:f9:c0:af:78:39:83:3b:9d:25:03:42:
         ea:df:b7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:14 2026 by rpki-client