Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e31322e302f32332d3234203d3e20313331363434.roa
File:                     3138322e3137332e31322e302f32332d3234203d3e20313331363434.roa (raw, json)
Hash identifier:          wwhlvzK9J3LvgkoKWNyfCYaqNE/keqCQ9DZTCQ142AI=
Subject key identifier:   F4:83:7A:CF:9C:93:DF:6F:05:02:47:54:EF:B2:11:8D:66:9E:96:64
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       36F4EB22924939E61F972BFAB92FFA9D3B5F4FD4
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e31322e302f32332d3234203d3e20313331363434.roa
Signing time:             Mon 11 May 2026 17:37:35 +0000
ROA not before:           Mon 11 May 2026 17:32:35 +0000
ROA not after:            Mon 10 May 2027 17:37:35 +0000
asID:                     131644
IP address blocks:        182.173.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f4:eb:22:92:49:39:e6:1f:97:2b:fa:b9:2f:fa:9d:3b:5f:4f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:32:35 2026 GMT
            Not After : May 10 17:37:35 2027 GMT
        Subject: CN=F4837ACF9C93DF6F05024754EFB2118D669E9664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:2a:f1:1c:ce:31:4d:00:0b:89:80:97:cd:
                    7f:5d:df:61:32:91:90:24:ff:4f:d2:cc:29:16:4d:
                    c3:55:aa:46:0b:87:02:5e:b0:05:e3:48:af:0f:91:
                    03:dc:f6:93:44:3f:9b:a1:1f:25:d3:70:b7:c1:46:
                    d6:f1:d7:1c:5a:ef:d2:61:6d:eb:3f:47:26:2f:ac:
                    c5:7e:91:ed:20:6d:6f:15:95:8d:f9:0f:2f:e7:63:
                    33:71:3f:1a:ca:98:5b:92:f2:5e:92:ff:d2:1d:eb:
                    f8:2b:f8:0d:a7:84:08:5b:9b:7a:1a:87:05:f5:56:
                    45:e5:fb:1f:04:65:d6:0a:34:6b:ba:c8:95:3c:03:
                    bf:a2:94:42:69:ae:bd:8c:d2:67:cd:d3:b6:23:36:
                    c2:d8:a8:8e:a0:4d:75:ed:ca:68:bd:90:87:f4:79:
                    63:f6:6a:ba:da:2b:8c:b5:20:10:df:b0:0d:5a:dc:
                    cf:11:d2:e3:15:54:70:50:e7:77:7e:c7:78:bd:fc:
                    cc:18:92:10:15:da:2d:14:9b:17:69:7c:41:dd:5f:
                    fc:cd:b0:13:f9:c2:0a:31:a5:8e:2c:95:f8:93:2a:
                    29:b2:6d:2b:0a:51:2c:c8:cb:cb:cf:73:81:e6:83:
                    7d:d9:19:63:34:a4:15:2d:3d:77:e1:c0:cc:6a:97:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:83:7A:CF:9C:93:DF:6F:05:02:47:54:EF:B2:11:8D:66:9E:96:64
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e31322e302f32332d3234203d3e20313331363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.173.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:d0:00:31:27:cd:62:7e:b3:0a:ac:71:b8:fe:e1:b2:dc:
         41:0d:12:60:9f:9a:7c:39:5f:b9:58:b4:dc:71:3c:ab:d5:10:
         e3:22:70:a6:fc:e4:0f:9b:c6:7e:ea:ec:0f:09:b9:07:ff:02:
         27:45:52:24:af:62:2a:67:2f:5b:99:85:8b:02:f0:77:cd:02:
         ce:26:7e:65:3e:ee:40:dd:2f:a5:29:64:95:97:a1:6b:6f:9b:
         fa:00:b0:57:18:69:db:64:86:b0:4e:74:61:41:ff:0a:ed:0c:
         37:eb:5f:4b:d5:1c:cd:9c:20:01:81:a7:f4:2c:ca:3b:79:85:
         8a:7e:8c:d5:c3:af:b2:7d:07:80:0d:52:b6:9c:55:c0:98:f2:
         78:85:c9:a7:30:2b:82:d5:62:af:4d:5a:75:b0:ad:21:6e:68:
         93:72:73:eb:16:bd:94:f7:96:d2:10:c4:32:98:af:74:3d:cb:
         ce:fb:46:eb:c1:66:06:e2:d9:8b:47:ca:3c:96:5d:f3:a4:66:
         65:7b:58:ab:06:0f:e7:a6:d8:7b:e8:c0:9f:43:1d:ed:00:b1:
         43:e8:2d:c2:63:8c:0e:ef:8a:10:cf:4a:1f:09:4a:cd:66:f4:
         59:e9:55:2a:7c:7d:5e:47:77:5f:11:e5:15:57:1b:b6:4c:17:
         f2:b9:a4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:19 2026 by rpki-client