Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e39322e302f32322d3234203d3e20323135353935.roa
File:                     3230322e3136302e39322e302f32322d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          w71gAETqdxKaz8s2iKHArCthnqpExDwYJfBMf4hyfec=
Subject key identifier:   A7:D3:97:91:51:D1:85:79:83:14:AC:52:20:FE:71:75:A3:9E:0E:CC
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       09B21039C476FB9686789BE1DC87A5420FCD65A7
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e39322e302f32322d3234203d3e20323135353935.roa
Signing time:             Mon 11 May 2026 17:56:53 +0000
ROA not before:           Mon 11 May 2026 17:51:53 +0000
ROA not after:            Mon 10 May 2027 17:56:53 +0000
asID:                     215595
IP address blocks:        202.160.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b2:10:39:c4:76:fb:96:86:78:9b:e1:dc:87:a5:42:0f:cd:65:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:51:53 2026 GMT
            Not After : May 10 17:56:53 2027 GMT
        Subject: CN=A7D3979151D185798314AC5220FE7175A39E0ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:e8:77:9f:fe:bd:26:78:2f:7e:13:0f:84:
                    97:1f:0f:3c:77:74:86:14:b6:26:97:8e:e4:6f:d6:
                    75:33:4b:3c:2e:8c:d2:25:35:7e:41:31:3f:ac:fd:
                    b0:62:d5:68:18:12:28:9e:3b:b5:6e:2b:c1:ea:f6:
                    c2:99:9e:72:9f:9d:2c:81:53:32:e8:e9:93:f8:06:
                    f4:2b:23:e5:28:d3:8d:6a:6d:49:b0:26:74:56:78:
                    18:eb:79:a7:72:23:09:8a:f0:fa:db:9e:c7:76:65:
                    c4:e6:75:1a:c5:ed:2d:6e:8f:b9:38:9c:47:15:88:
                    b6:cf:e1:2c:e7:5b:38:1b:67:4e:17:a3:84:cd:51:
                    3d:ef:ea:83:40:4d:e5:01:2c:b1:69:73:d5:e1:ff:
                    cd:9a:03:23:5f:f5:53:66:18:d5:88:c0:db:f8:ba:
                    f8:50:d4:d3:b3:be:8f:77:1b:9b:79:c1:be:ff:06:
                    1c:9a:90:64:b4:9e:f3:1a:0e:3c:30:52:49:ec:b4:
                    51:dd:2f:19:9a:2a:cb:2e:c1:4d:51:21:bf:04:2c:
                    7b:ad:ae:f7:b8:78:42:51:bb:f6:b8:d8:de:b4:f5:
                    32:ad:ec:55:29:ba:73:56:34:3d:8a:35:90:2f:9c:
                    ff:71:3b:c8:1a:18:c5:70:b7:f1:51:8c:09:31:ef:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:97:91:51:D1:85:79:83:14:AC:52:20:FE:71:75:A3:9E:0E:CC
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e39322e302f32322d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:94:4d:65:56:9d:22:d7:e7:99:54:48:14:8c:58:25:35:
         7c:0a:58:52:67:48:6f:97:8d:8f:7d:0a:b5:65:e3:9c:05:38:
         cf:22:b7:5a:1b:ce:7c:a9:0e:d2:e8:7d:ca:13:8c:38:6d:92:
         96:46:d4:57:62:5c:8e:50:21:f9:fc:d3:5d:f8:de:59:28:95:
         e0:13:1b:44:15:93:9d:b7:40:2d:39:3b:c9:db:e5:bc:0f:1b:
         80:a5:cb:65:b0:5d:52:4c:77:b4:1f:fc:0b:f6:88:0a:cf:03:
         81:4c:a8:7c:f9:0b:a0:95:04:02:8e:f1:5f:7d:de:b6:42:66:
         53:9d:ee:b6:b8:fd:eb:e5:02:a5:6a:e5:82:e8:58:e6:c6:f4:
         3b:ee:0c:21:c8:a2:ad:93:7e:8c:18:92:1e:df:ec:45:32:de:
         3c:2b:9c:03:8a:54:18:1b:f9:4c:17:fb:6a:c7:86:d4:f1:3c:
         be:e9:7e:85:07:0c:56:6b:64:b1:92:c6:fb:65:aa:11:dd:e6:
         a7:77:26:3d:ba:fb:d2:3b:cf:d0:4c:63:18:14:d7:9c:51:9a:
         83:e5:09:01:8e:3a:b7:a6:4b:c7:02:ce:69:64:db:4d:d0:8f:
         d8:0c:ee:e3:2f:98:95:bf:63:0b:2e:17:8c:ca:59:97:94:bb:
         72:cb:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:46 2026 by rpki-client