Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa
File:                     3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          yCZqZR2AGCBzXj4ey9qRZrUJv2f1vti5atnbmciNS40=
Subject key identifier:   7C:94:D8:A3:A4:41:98:D9:69:6A:6F:DC:AF:AF:37:D8:82:56:65:4B
Certificate issuer:       /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial:       5455923B01A4EEAA4716C0CF87D7B79EFAFEF849
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:39:32 +0000
ROA not before:           Mon 11 May 2026 17:34:32 +0000
ROA not after:            Mon 10 May 2027 17:39:32 +0000
asID:                     134823
IP address blocks:        161.248.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
                          rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:55:92:3b:01:a4:ee:aa:47:16:c0:cf:87:d7:b7:9e:fa:fe:f8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
        Validity
            Not Before: May 11 17:34:32 2026 GMT
            Not After : May 10 17:39:32 2027 GMT
        Subject: CN=7C94D8A3A44198D9696A6FDCAFAF37D88256654B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:e0:1d:08:96:58:04:95:df:6f:25:ba:9b:
                    d2:78:e0:e6:f7:f0:cf:23:2d:34:88:67:22:e0:4f:
                    dc:b1:b7:8a:68:b0:bb:97:18:6f:09:1b:69:aa:40:
                    ef:20:5a:91:eb:f4:57:78:89:de:1c:8f:0e:53:cb:
                    60:19:22:45:0c:d6:aa:c7:c2:e4:7b:f8:d9:50:49:
                    88:94:18:b7:76:4d:9c:f7:eb:90:20:76:06:87:20:
                    32:e6:bf:81:4c:27:4c:b3:ed:7b:91:d8:6c:cb:60:
                    ba:11:67:0b:7d:ce:37:a4:8d:0e:d3:98:00:97:5e:
                    92:cd:fd:f8:f5:da:49:32:64:09:04:bf:07:28:29:
                    bb:e8:1a:65:cb:c1:4f:0c:b2:24:a7:3d:b4:79:17:
                    25:ec:39:25:bf:46:fe:32:49:93:92:e4:1b:01:8a:
                    33:40:5e:23:bf:03:17:ce:6e:47:fe:f0:9b:94:e6:
                    00:69:49:29:8a:2b:83:74:cb:98:ce:f2:8c:ff:a4:
                    6d:1b:27:37:96:b5:72:cf:27:b5:8a:83:d7:51:c7:
                    8c:40:e8:19:09:0b:b9:45:08:f2:48:f9:f3:a3:f5:
                    b5:5d:b4:69:e3:a2:ab:c3:df:9e:ae:f0:30:d9:af:
                    f5:fc:91:28:f2:53:94:20:3b:f0:3d:24:b6:92:0f:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:94:D8:A3:A4:41:98:D9:69:6A:6F:DC:AF:AF:37:D8:82:56:65:4B
            X509v3 Authority Key Identifier:
                keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:c2:30:57:9f:f0:89:8f:ac:aa:de:5f:d7:5d:24:ab:d4:25:
         70:9b:c6:96:fa:53:99:34:1d:dd:66:e7:fb:a0:44:37:7c:84:
         7c:f7:93:92:16:15:2d:a2:ab:41:c3:3e:ed:2c:67:9f:5f:9c:
         34:50:43:27:10:7b:9a:f0:e1:22:94:65:66:39:59:f7:68:43:
         53:2b:f5:58:10:e0:18:2b:a0:e6:cd:51:53:e3:d1:05:54:99:
         b2:3e:ef:19:d2:45:ba:da:b7:66:ff:d4:3a:6b:4f:5c:bf:a1:
         ac:c4:7f:73:cd:df:ba:66:67:5a:0d:14:47:aa:97:1d:f8:7a:
         a5:98:3c:5f:8b:0f:e0:13:3b:bf:dc:07:51:dd:a6:f1:ee:a1:
         e2:c9:41:ce:6f:ae:da:75:80:fc:47:d2:c9:30:cd:71:dc:f7:
         83:26:42:cd:f8:a7:18:a8:5c:37:ef:02:e1:3d:c6:8b:aa:20:
         31:43:84:23:f0:4f:c1:0c:37:49:ca:df:a3:1a:44:b1:62:55:
         dd:4b:f0:28:2f:00:2e:1d:2f:59:2f:7e:1b:9e:1b:61:51:4f:
         89:90:a8:42:15:99:56:92:55:02:7c:af:a8:21:05:27:58:fa:
         95:51:99:c0:60:7d:8d:00:ec:3e:6c:2b:0d:81:22:b7:d4:d1:
         de:0b:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:18:08 2026 by rpki-client