Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138332e302f32342d3234203d3e2039363738.roa
File:                     3231312e37362e3138332e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          WQeW/K0mGyLSHX9fe9GWDv4zDTd5AFAmyVRm8HrpOvI=
Subject key identifier:   C5:32:7B:DF:5C:54:D4:C0:75:99:D3:5B:35:C8:9C:B7:2A:14:54:1F
Certificate issuer:       /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial:       31A9820355342F26F816D5527FB09D4B024F9D55
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138332e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:56:33 +0000
ROA not before:           Mon 11 May 2026 17:51:33 +0000
ROA not after:            Mon 10 May 2027 17:56:33 +0000
asID:                     9678
IP address blocks:        211.76.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
                          rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a9:82:03:55:34:2f:26:f8:16:d5:52:7f:b0:9d:4b:02:4f:9d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
        Validity
            Not Before: May 11 17:51:33 2026 GMT
            Not After : May 10 17:56:33 2027 GMT
        Subject: CN=C5327BDF5C54D4C07599D35B35C89CB72A14541F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:37:c6:02:2d:53:46:74:77:4e:f6:83:9a:
                    03:1f:1b:f9:ec:38:95:65:b1:61:4b:27:72:45:3d:
                    cf:52:f6:71:7d:67:8c:10:f1:01:eb:7b:d5:c6:06:
                    63:6e:54:9b:c7:ae:12:ad:5c:0c:4d:d4:6a:bb:8b:
                    da:4d:37:59:4e:5d:77:89:99:68:34:d7:64:4e:7e:
                    0f:fa:e1:3b:9a:4b:25:6b:0d:d3:47:df:d0:bc:a2:
                    9f:ca:5e:da:09:07:3a:99:aa:a5:da:ab:9f:e8:62:
                    25:55:71:e5:7e:ff:e8:72:de:b1:03:eb:4b:a8:2c:
                    f0:bf:2e:21:69:44:f8:78:c2:67:68:ed:14:6a:91:
                    22:52:8e:db:5d:19:19:2d:a8:97:92:4d:ae:fb:72:
                    18:1e:7c:67:d7:b0:d1:9a:96:03:84:9e:23:3f:18:
                    40:37:83:0e:b0:d7:dc:55:29:e5:81:75:01:04:86:
                    5b:4d:81:d2:97:3a:64:56:34:fd:a0:a2:7f:e5:a3:
                    b4:a6:3b:89:51:b6:76:ea:a8:8c:53:1d:00:ff:dd:
                    77:fc:b2:53:1e:9c:df:d7:c5:bf:cc:b8:99:39:de:
                    6f:6e:6a:d6:a4:d9:c2:33:ff:19:a4:fc:37:8d:d5:
                    79:ea:df:72:09:f7:5c:f8:be:0b:ff:90:eb:89:6f:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:32:7B:DF:5C:54:D4:C0:75:99:D3:5B:35:C8:9C:B7:2A:14:54:1F
            X509v3 Authority Key Identifier:
                keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138332e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4f:3b:0b:99:ba:bb:ad:18:6d:ad:4f:af:7f:23:d1:cc:f7:
         72:a2:06:0d:eb:10:43:0c:01:fc:00:0a:7e:1d:a2:b1:e6:35:
         32:bd:5e:37:26:fc:c1:38:3d:9d:cd:b6:e1:19:2d:2d:b5:3f:
         f9:3e:47:92:67:ab:72:c3:c7:e5:7e:0f:51:10:6e:04:86:c7:
         50:8e:2c:d4:2a:72:43:c7:84:ef:f9:10:55:d1:fb:0b:ce:2d:
         a8:9a:93:17:db:f1:72:75:cb:30:e1:62:8c:fe:a4:62:c4:59:
         c2:86:97:b6:f5:ca:b0:fb:91:f1:99:4c:de:d2:a0:11:90:d5:
         9c:da:f7:d5:4f:5c:a1:25:eb:d2:df:fe:67:61:bf:c6:4a:63:
         0f:fb:62:d5:fa:54:db:9d:de:fc:35:18:ec:e7:65:dd:be:79:
         62:24:5d:16:7e:d6:39:77:59:b6:fa:5a:ee:76:61:b3:4b:b1:
         49:8a:93:64:52:bb:df:93:7c:c3:3e:39:57:4f:38:6c:88:ba:
         00:f3:89:a9:51:aa:c6:b5:5e:53:f9:94:01:e9:d0:3a:bf:3f:
         95:1a:12:7c:30:65:42:43:b2:10:ce:6d:57:2b:05:2f:b7:c6:
         d0:57:b1:90:25:be:38:c8:23:6a:0f:2c:0c:ee:99:82:1f:2c:
         a7:3a:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:31 2026 by rpki-client