Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e302e302f32342d3234203d3e20313331363434.roa
File:                     3138322e3137332e302e302f32342d3234203d3e20313331363434.roa (raw, json)
Hash identifier:          63QZ/c4jH6Wi4Z+wQROOVO8XH4ft33mtHAV90H4f2YQ=
Subject key identifier:   D1:01:5B:AA:08:3E:C9:6A:04:98:29:55:D0:6E:B2:A6:B9:49:C0:7A
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       466E24C3758ED042EFFC1DD120F3DC735E173A8F
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e302e302f32342d3234203d3e20313331363434.roa
Signing time:             Mon 11 May 2026 17:20:06 +0000
ROA not before:           Mon 11 May 2026 17:15:06 +0000
ROA not after:            Mon 10 May 2027 17:20:06 +0000
asID:                     131644
IP address blocks:        182.173.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6e:24:c3:75:8e:d0:42:ef:fc:1d:d1:20:f3:dc:73:5e:17:3a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:15:06 2026 GMT
            Not After : May 10 17:20:06 2027 GMT
        Subject: CN=D1015BAA083EC96A04982955D06EB2A6B949C07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:00:4b:a1:1e:66:7e:21:fa:11:7a:44:b4:
                    b1:2d:01:f4:e3:91:f9:c1:3a:4c:57:75:25:a3:f5:
                    0d:ef:77:7d:39:c4:e6:d7:f9:1a:cb:18:ed:74:6a:
                    12:be:74:a0:c4:f3:66:11:25:f5:f7:2c:f6:8c:7c:
                    14:05:7f:5c:45:24:fd:db:7c:78:6a:36:af:67:d2:
                    c4:49:87:98:be:98:44:6f:65:7f:86:5c:33:f1:01:
                    f3:2c:7d:9b:ec:d2:78:b9:5d:4e:5c:80:f5:78:a9:
                    89:95:d5:a4:54:1b:ad:de:4a:62:46:11:c2:36:16:
                    17:c4:26:a1:77:ca:d7:5d:61:81:19:fb:e7:6a:d7:
                    76:4c:e5:8f:0e:20:2b:99:1c:26:c4:20:54:ee:29:
                    2e:46:07:c6:8e:a9:f1:81:2c:70:f8:78:1a:77:6c:
                    13:8d:4a:62:d6:0d:8b:00:bd:65:3b:4e:1a:b9:06:
                    46:aa:f2:a1:5a:bb:26:c8:15:7b:97:fc:32:29:af:
                    ac:95:df:fc:cf:94:32:c7:56:ff:33:9f:92:a6:cd:
                    29:9a:e9:de:c2:8d:28:b7:54:e9:c4:70:c0:00:84:
                    1f:d7:04:58:41:a3:25:8f:34:60:19:1d:4f:c3:90:
                    d6:c1:ac:6e:1c:5a:ee:1e:f0:e0:6f:9e:00:50:ce:
                    4a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:5B:AA:08:3E:C9:6A:04:98:29:55:D0:6E:B2:A6:B9:49:C0:7A
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e302e302f32342d3234203d3e20313331363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.173.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:0e:ca:6e:3f:72:76:35:8f:b0:f6:98:3d:b1:14:d7:d2:5f:
         ad:ce:7e:47:ab:49:c0:9e:d4:76:d5:2b:69:14:ac:04:7e:d0:
         8b:75:5f:34:ef:7f:d3:de:40:7a:ea:2e:40:04:45:0c:28:c1:
         47:9d:31:85:43:96:67:d7:da:04:9e:7c:47:c9:3b:b5:21:7a:
         22:d5:34:7c:40:e1:c1:99:54:82:a6:0e:ff:2d:e0:a3:c8:58:
         91:a6:92:96:a0:c5:c9:a8:2f:68:3c:2c:d8:cd:b2:82:b4:42:
         6a:9c:e8:ce:fb:a6:4c:ee:70:57:9f:69:c3:0e:7b:10:fe:e3:
         6b:79:0a:20:50:35:ec:39:d5:86:1e:1b:ea:8c:0b:10:ca:22:
         4a:55:2f:38:57:13:8e:b9:c3:4b:35:e4:ec:3a:59:60:20:07:
         53:cb:5f:3f:1f:5c:66:32:bc:d9:03:18:18:99:62:47:d2:ac:
         80:ca:fc:bf:e6:04:7b:09:67:ec:98:3b:ff:a2:1c:74:cc:fc:
         7a:ba:37:25:ec:ce:54:e9:8a:34:9a:7c:2f:39:26:6b:4f:74:
         86:b5:e8:e7:45:18:b6:91:4d:5e:b4:5b:aa:2d:f1:96:79:1d:
         fc:7e:40:ea:4e:1a:3d:9c:20:e6:77:03:15:2d:e6:1f:1d:7d:
         7f:eb:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:20 2026 by rpki-client