Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3131392e37352e3234352e302f32342d3234203d3e2031363539.roa
File:                     3131392e37352e3234352e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          JK5xMYOR35H8GQjwSm62HR8uo4EHQVMnOIEZIrEpRV4=
Subject key identifier:   B2:8B:64:E3:8A:D3:C2:F9:2B:FC:49:B2:EE:01:23:31:F6:2E:E1:0B
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       7AA2FD5FB71CF07A6E8D91868D21D2EF9425A63C
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3131392e37352e3234352e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 17:39:49 +0000
ROA not before:           Mon 11 May 2026 17:34:49 +0000
ROA not after:            Mon 10 May 2027 17:39:49 +0000
asID:                     1659
IP address blocks:        119.75.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a2:fd:5f:b7:1c:f0:7a:6e:8d:91:86:8d:21:d2:ef:94:25:a6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:34:49 2026 GMT
            Not After : May 10 17:39:49 2027 GMT
        Subject: CN=B28B64E38AD3C2F92BFC49B2EE012331F62EE10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:0e:59:ad:71:ff:0b:ca:47:6b:f0:d8:fb:
                    83:b3:10:3a:2b:14:77:1f:c8:d2:20:6d:3c:1d:b5:
                    08:e9:13:4e:33:fb:55:48:c8:5f:83:1b:59:17:c9:
                    15:dd:d4:69:a5:3e:42:a9:1b:94:f4:ae:87:d3:00:
                    c9:ba:c8:b6:73:bc:3e:d6:77:1d:0e:71:e8:e5:ec:
                    2b:af:ce:2b:12:25:02:53:e9:65:b4:68:75:d6:57:
                    30:1e:d8:8d:23:73:83:6e:ef:81:ec:d2:c3:f3:e8:
                    36:00:c4:ee:8a:91:ed:af:dc:7b:f7:ae:8e:e8:54:
                    dd:7a:c6:35:5a:f7:b6:84:cd:81:8b:f6:e1:70:15:
                    1a:14:f7:ae:c5:59:d8:64:07:43:5a:c5:cf:fc:81:
                    0b:16:d4:f1:0b:3a:91:db:f9:7d:f0:16:1f:44:94:
                    69:7c:12:d7:e6:da:93:5b:2f:ce:22:e1:23:72:c7:
                    66:5d:95:c1:24:80:51:44:13:96:73:7c:61:a2:2f:
                    b2:5e:b0:0d:f2:ce:a7:a6:52:10:07:8e:38:49:5a:
                    e6:c9:b1:bc:5f:e3:06:75:5f:2d:ff:cc:a0:cf:00:
                    45:50:be:8e:00:99:41:04:11:66:37:ba:1d:46:e7:
                    8b:1b:23:fe:62:de:58:dc:8d:55:01:3f:9f:75:ab:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8B:64:E3:8A:D3:C2:F9:2B:FC:49:B2:EE:01:23:31:F6:2E:E1:0B
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3131392e37352e3234352e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3a:fd:8a:1e:3b:ef:9e:c0:11:f0:c1:4b:d6:2d:aa:f3:5e:
         e0:c4:0a:43:7e:bb:e5:e3:33:00:b0:6f:36:bc:27:9a:b9:91:
         d9:de:8c:9b:37:92:98:e7:a3:38:a2:a8:fe:dc:1c:fa:c5:7b:
         40:12:a2:b0:d7:05:6e:f7:b5:91:ba:83:ff:ca:10:f4:10:0b:
         8b:79:27:8d:62:73:5a:ad:1e:0c:4c:0d:44:d9:f6:7b:19:c6:
         9d:a5:c5:1f:c4:70:26:c5:35:4c:8b:23:c9:2b:da:fd:ef:e5:
         65:c3:61:8c:55:28:1a:7b:d0:0d:57:b5:57:09:0b:06:8c:f9:
         5e:53:e2:83:7c:b3:96:0e:d3:4c:cf:da:40:22:7e:32:47:e0:
         a2:85:d8:49:2f:4c:89:7e:b1:0c:48:cf:59:08:78:a1:f3:d2:
         28:f8:6b:d1:10:15:bf:e2:b7:ec:62:d9:4e:f3:a7:79:41:7c:
         bb:5b:15:22:6e:df:a1:66:ae:31:49:1a:46:96:e4:e8:ff:15:
         a6:61:22:29:b6:b0:ff:06:e5:fd:ad:15:ae:88:87:b6:20:be:
         95:59:75:fd:58:da:37:02:2b:33:14:eb:49:06:e7:11:c9:01:
         25:f6:d9:21:40:a0:4b:5f:ec:fb:a1:cb:de:36:ab:5f:e9:ef:
         c4:0b:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:21 2026 by rpki-client