Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e38382e302f32342d3234203d3e20323135353935.roa
File:                     3230322e3136302e38382e302f32342d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          H8y67UDzAkg+7bw2hqumtHQrS3yNQbc3u7rFSdPjXt0=
Subject key identifier:   C8:C8:55:86:26:28:A2:23:82:6E:D2:C3:D4:85:7A:B6:58:C4:EA:FE
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       396393963536200FBDF5052288E368273836CB49
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e38382e302f32342d3234203d3e20323135353935.roa
Signing time:             Mon 11 May 2026 17:59:00 +0000
ROA not before:           Mon 11 May 2026 17:54:00 +0000
ROA not after:            Mon 10 May 2027 17:59:00 +0000
asID:                     215595
IP address blocks:        202.160.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:63:93:96:35:36:20:0f:bd:f5:05:22:88:e3:68:27:38:36:cb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:54:00 2026 GMT
            Not After : May 10 17:59:00 2027 GMT
        Subject: CN=C8C855862628A223826ED2C3D4857AB658C4EAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:89:62:c5:20:ce:fc:9f:cb:45:56:12:11:
                    d7:43:57:0e:db:51:cc:1c:2a:9e:ee:7f:1f:e2:65:
                    02:7e:af:5e:2e:b8:8a:85:17:04:5b:28:c3:64:a4:
                    15:f6:62:61:44:89:36:77:a4:ce:9f:ce:ce:00:9c:
                    10:1f:e4:fd:01:72:5b:be:be:31:43:63:89:1c:3f:
                    b8:98:0a:f6:a1:1d:c8:cf:13:b6:9a:ba:74:8e:6d:
                    9f:c3:92:c5:be:0a:be:67:57:58:40:5d:3f:fa:a2:
                    c1:de:88:28:59:2e:55:b2:3c:54:3f:a4:fb:78:74:
                    7b:31:85:c8:15:dd:29:ee:9a:96:a6:64:0e:43:7e:
                    6e:f0:34:72:b0:5b:a0:10:9b:07:a4:18:6f:8c:36:
                    d9:a9:30:bc:6e:74:24:20:e5:c6:26:06:da:cd:b3:
                    f4:95:6c:44:79:79:76:12:e2:3d:1b:bb:34:f8:b9:
                    00:6e:44:4f:12:7d:23:3d:71:0b:bf:bb:b9:9d:63:
                    0a:24:ba:f0:e2:a6:5d:42:94:20:14:c0:e1:5f:28:
                    ed:de:9c:b1:00:8a:bd:a1:f8:ae:c8:7a:a4:7b:ba:
                    8d:c4:f6:2f:8d:03:74:da:79:45:33:e3:b5:9a:6b:
                    f9:34:e9:fc:ea:7d:65:7b:5f:4c:f0:f4:bb:e2:e1:
                    08:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:55:86:26:28:A2:23:82:6E:D2:C3:D4:85:7A:B6:58:C4:EA:FE
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e38382e302f32342d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:21:5b:4d:dc:92:6b:9b:47:64:e5:82:d0:b2:60:db:74:
         4a:d1:6a:d7:e6:3c:3a:07:73:75:fc:5b:66:38:be:27:ca:26:
         a4:9c:ef:9e:00:68:a6:f8:4e:a3:0b:26:3e:e4:0e:c7:fb:7a:
         a9:df:ed:11:57:7b:56:2e:2b:36:2d:25:11:3e:e4:b7:fd:8c:
         4c:4d:09:84:4f:29:ef:dd:71:1d:a1:96:62:c2:75:bf:b3:1c:
         16:ab:ea:74:ee:87:8e:37:9e:67:8b:b5:47:04:48:98:09:0f:
         e8:e5:52:76:40:6b:60:20:61:89:0b:2b:7a:9a:2b:29:c3:bf:
         be:61:01:6d:fa:d7:2a:27:f7:75:cd:b4:83:49:13:2e:de:25:
         d0:e2:62:b6:47:eb:6c:b6:f3:16:e2:e6:5b:cc:83:df:31:dc:
         b5:14:e2:5e:e7:2a:31:62:fe:f7:9f:6c:02:76:76:d9:74:cf:
         ce:8e:7a:7e:0b:38:7d:ed:9d:b2:f8:fc:99:3e:94:2d:6a:a7:
         04:f8:83:90:ec:e2:b9:49:8a:31:f8:59:5e:a0:ad:98:a8:9f:
         f5:c4:a3:ed:12:76:e0:00:ea:81:7d:0b:c3:ff:dc:2a:a9:c6:
         c5:94:de:88:22:f4:c5:ce:2a:ac:b8:c0:ae:f5:59:51:4c:0f:
         6b:f4:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:40 2026 by rpki-client