Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e382e302f32322d3234203d3e20313331363434.roa
File:                     3138322e3137332e382e302f32322d3234203d3e20313331363434.roa (raw, json)
Hash identifier:          egOWkovMd+X3jVcm9/0JpR1oIkCLoF2kWocB6ie3lEE=
Subject key identifier:   29:4C:66:76:65:E2:12:FB:AA:46:C8:83:3A:FD:34:9B:AD:90:19:61
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       02C6FEDE6936437C3CF0C95A5A19ED67318CE7C1
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e382e302f32322d3234203d3e20313331363434.roa
Signing time:             Mon 11 May 2026 17:37:35 +0000
ROA not before:           Mon 11 May 2026 17:32:35 +0000
ROA not after:            Mon 10 May 2027 17:37:35 +0000
asID:                     131644
IP address blocks:        182.173.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c6:fe:de:69:36:43:7c:3c:f0:c9:5a:5a:19:ed:67:31:8c:e7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:32:35 2026 GMT
            Not After : May 10 17:37:35 2027 GMT
        Subject: CN=294C667665E212FBAA46C8833AFD349BAD901961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:cc:6b:59:ad:0d:20:4f:13:1e:06:84:1d:
                    cb:78:31:4d:f8:db:1b:fb:64:6b:56:5d:28:06:b4:
                    c3:24:ac:4c:1c:a6:17:4d:b2:68:40:cc:0a:2d:5f:
                    b5:db:ca:3f:fd:b7:3e:da:54:16:7d:9c:8c:fe:0b:
                    f6:9e:fa:c9:66:2a:5b:ae:cb:cd:1d:75:60:be:cd:
                    90:8d:4c:50:e3:19:7e:f4:79:69:e7:df:a1:a6:08:
                    55:ac:d9:c7:18:9e:95:15:ff:b2:27:94:03:45:88:
                    ea:a7:17:53:d5:44:6a:ae:18:b4:9c:6d:d1:af:9e:
                    98:5b:c1:43:76:07:68:c0:fe:0e:e5:ce:b1:03:6f:
                    7c:33:68:0b:0e:34:7f:c1:e9:02:45:06:8d:21:22:
                    18:9a:f9:8f:8d:58:92:bd:d1:03:aa:a8:77:01:74:
                    23:5e:dc:9c:a2:0b:e0:ac:d4:73:aa:84:30:72:8a:
                    10:2c:6b:ef:72:73:50:1c:e0:54:e3:f8:1e:32:1f:
                    9c:6a:89:e2:17:65:88:57:b3:dc:e6:2d:89:b1:b2:
                    39:7a:e7:49:77:96:af:12:57:f5:63:39:bf:9e:0e:
                    50:d9:44:42:72:11:7e:8f:9e:4f:51:a8:1d:09:83:
                    54:7f:b7:dd:66:96:fd:ca:b8:ab:59:6b:7d:fa:f4:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4C:66:76:65:E2:12:FB:AA:46:C8:83:3A:FD:34:9B:AD:90:19:61
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3138322e3137332e382e302f32322d3234203d3e20313331363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.173.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:f9:6b:b7:78:ff:bf:b0:b5:b8:90:1a:d0:04:53:c6:b5:f6:
         ea:a4:6a:b3:48:1b:64:5e:5a:8a:44:bb:cd:f9:a9:7a:db:6a:
         75:89:4b:9e:7d:9d:34:e5:17:64:b8:7f:5e:2f:f3:09:ec:ef:
         c8:36:04:d2:62:f5:33:bb:38:fb:86:81:4a:11:d4:49:15:67:
         1c:5c:da:71:16:a7:16:d9:45:cf:6b:f8:c6:7b:89:9d:68:c4:
         d4:be:1b:62:aa:cd:c3:8e:fb:ee:c2:fc:c9:ea:8d:69:f7:30:
         3a:55:58:15:a7:c1:2b:5b:0f:0c:07:63:e8:35:af:da:ec:d1:
         b9:c8:4c:03:47:d4:10:20:ca:92:be:48:42:35:28:27:82:21:
         2a:b0:8d:fb:28:a6:21:25:ca:b0:70:73:e2:b8:5f:59:ed:7d:
         4d:8b:fa:cb:d3:78:dc:6a:7c:de:4e:3a:24:8c:72:f5:74:f2:
         c4:cf:55:f4:87:44:7c:96:fd:27:6e:e7:fd:6b:3c:d5:2a:53:
         1d:1e:9e:5b:1f:76:29:66:47:1a:bc:d0:e7:c8:46:6f:35:10:
         b9:5b:a7:70:e4:ea:3e:bc:54:4e:89:dd:80:9f:15:8f:5f:30:
         05:dc:b8:c4:4b:91:55:ee:ad:ab:1d:86:9d:4d:d9:4d:74:d3:
         ad:40:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:20 2026 by rpki-client