Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa
File:                     3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa (raw, json)
Hash identifier:          QsixafQjwfqu9M7sBGz7C/Kx4ATf5EPodViRplY14v8=
Subject key identifier:   2E:B3:64:43:93:CA:C3:58:9B:86:C5:1C:E1:11:27:2C:49:E9:35:0A
Certificate issuer:       /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial:       65C7AAD9F48E9DDEFD0921926504FD834FB18A15
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa
Signing time:             Mon 11 May 2026 17:08:10 +0000
ROA not before:           Mon 11 May 2026 17:03:10 +0000
ROA not after:            Mon 10 May 2027 17:08:10 +0000
asID:                     18018
IP address blocks:        122.255.95.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c7:aa:d9:f4:8e:9d:de:fd:09:21:92:65:04:fd:83:4f:b1:8a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
        Validity
            Not Before: May 11 17:03:10 2026 GMT
            Not After : May 10 17:08:10 2027 GMT
        Subject: CN=2EB3644393CAC3589B86C51CE111272C49E9350A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:f4:7b:8c:4d:5d:99:66:04:88:88:c3:5a:
                    1c:94:a3:f1:9f:d3:73:51:a4:31:26:2c:b3:28:d4:
                    96:e3:4a:17:3f:37:05:75:a0:2f:00:10:e5:f1:33:
                    a5:c5:9a:7a:8b:1e:f3:e4:64:60:f5:1d:f6:41:ff:
                    79:e5:11:d4:13:b9:30:35:c2:10:a4:fc:02:54:4f:
                    9e:e9:ca:b9:72:9c:66:8a:3d:84:98:80:28:d6:bc:
                    44:dc:b1:18:4a:b8:7e:9d:c7:1b:db:4b:ac:6e:42:
                    7d:3f:1e:2f:01:22:ac:c2:0e:29:ad:ee:06:fc:14:
                    7b:ba:0d:45:e8:26:b6:16:9d:f8:45:7d:4e:39:e9:
                    d6:7f:73:0d:04:28:25:60:f8:25:43:71:77:37:66:
                    fd:c0:68:93:a0:1f:9f:a2:5f:84:40:f0:45:16:ed:
                    1f:7f:45:d6:e8:38:e6:04:86:50:40:b8:98:c0:b1:
                    11:5f:dc:30:8f:88:bb:ff:86:bc:9d:02:30:a4:62:
                    62:e1:a8:2b:83:d6:3a:90:44:ed:61:3b:6a:07:bc:
                    a0:d0:63:60:23:71:57:e6:7e:07:fc:57:c1:c5:4a:
                    18:34:c8:cf:c1:23:5e:24:95:e4:d0:9c:1d:75:1b:
                    23:f8:4d:77:f8:6a:07:a1:71:63:f1:3b:41:aa:4a:
                    24:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B3:64:43:93:CA:C3:58:9B:86:C5:1C:E1:11:27:2C:49:E9:35:0A
            X509v3 Authority Key Identifier:
                keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39352e3132382f32352d3235203d3e203138303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.95.128/25

    Signature Algorithm: sha256WithRSAEncryption
         00:cd:88:f3:e6:cb:42:cf:15:2a:bc:83:39:2b:88:48:65:c6:
         a6:c0:6d:75:7c:34:1b:2c:c5:24:a1:ba:8c:9a:4e:be:81:1e:
         bf:0f:e1:2c:8a:13:4d:54:0b:84:5f:12:4a:91:c3:38:32:e9:
         ff:63:1b:d4:9e:f6:23:7b:95:00:c7:25:da:4c:61:11:52:a2:
         8a:39:75:b9:5e:92:34:8c:4e:82:2d:99:fd:84:09:f1:45:51:
         d1:15:55:3c:2b:18:75:5e:c9:76:78:a0:31:c8:6f:18:f0:dd:
         e3:b5:b8:63:49:8b:a4:ad:cd:af:33:ab:17:8f:8d:80:d6:57:
         c1:c2:86:9f:c0:28:f9:63:49:74:0f:58:7b:50:0c:98:1c:66:
         eb:68:17:f0:0c:e7:48:3a:1b:ed:fb:82:fa:31:7e:77:3e:b2:
         c5:b3:9a:ec:83:04:45:bc:19:f7:d9:77:82:b9:c0:53:2c:6a:
         2c:4a:2b:18:e9:9f:8f:61:0d:46:19:cc:90:96:23:d7:94:8c:
         32:93:28:85:a5:74:cd:81:47:ef:02:3a:f7:7b:66:a3:d9:55:
         0e:26:b1:1f:f9:9e:de:cf:b6:cd:c8:8e:50:a3:ad:2b:72:48:
         55:91:05:87:19:8b:9c:e7:ae:4c:19:2a:ea:11:56:f0:59:de:
         6b:75:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:04 2026 by rpki-client