Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa
File:                     3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa (raw, json)
Hash identifier:          qRkyiJdn63qokFKKv0HxSqaEykqKM4bsKkcH46FpFZc=
Subject key identifier:   09:67:42:E8:06:6B:89:16:9A:20:59:4F:FD:02:FD:0F:38:A5:C8:7F
Certificate issuer:       /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial:       36300B473D43ABF2BAA5ED8FDAB2505DE7FD5369
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa
Signing time:             Mon 11 May 2026 17:57:34 +0000
ROA not before:           Mon 11 May 2026 17:52:34 +0000
ROA not after:            Mon 10 May 2027 17:57:34 +0000
asID:                     38042
IP address blocks:        161.248.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
                          rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:30:0b:47:3d:43:ab:f2:ba:a5:ed:8f:da:b2:50:5d:e7:fd:53:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
        Validity
            Not Before: May 11 17:52:34 2026 GMT
            Not After : May 10 17:57:34 2027 GMT
        Subject: CN=096742E8066B89169A20594FFD02FD0F38A5C87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:2e:15:68:5b:68:2b:40:08:4f:b7:33:e6:
                    c7:e5:9c:a1:56:ac:df:84:c3:fd:38:f4:58:9b:03:
                    2e:a7:ff:c8:76:03:a2:2f:c0:94:7b:1a:32:b1:d6:
                    45:4e:bb:4e:5d:0a:78:44:86:92:5a:d5:1a:ed:99:
                    07:98:49:c5:55:c1:89:a9:4d:ac:a8:5e:cf:7a:15:
                    a7:04:aa:14:60:22:40:dd:41:3a:bf:9d:f0:40:c6:
                    57:16:6d:2f:58:12:3e:f1:b1:e1:9b:b3:ee:e7:16:
                    2a:f3:1b:4f:76:e5:02:94:7a:13:45:36:31:93:f6:
                    dd:15:1f:e5:c7:7d:cd:16:e2:75:6e:91:41:ce:96:
                    73:3f:2d:fe:fe:1c:b2:f5:8d:bd:81:6e:31:8c:44:
                    d1:18:e5:cf:0e:a4:29:a0:76:34:57:88:75:28:5c:
                    72:34:e7:c6:d8:78:47:77:05:12:0d:81:35:25:1f:
                    60:ab:d7:b6:f2:aa:28:31:76:23:0f:ee:94:47:1b:
                    9f:fe:e9:fc:01:4f:da:13:dc:30:e9:c4:00:00:3c:
                    3c:d0:b2:73:75:2a:2e:31:e1:d0:6b:1c:92:8f:17:
                    ee:db:18:3a:22:16:a9:b7:5f:fa:91:20:97:2e:7c:
                    ed:52:60:80:76:92:26:8a:89:5c:d3:f2:f1:d4:5a:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:67:42:E8:06:6B:89:16:9A:20:59:4F:FD:02:FD:0F:38:A5:C8:7F
            X509v3 Authority Key Identifier:
                keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32332d3234203d3e203338303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:14:c1:ee:b3:f3:64:4b:08:cc:e1:5d:ca:87:0e:64:54:
         88:6f:89:1f:0b:f9:ea:9e:f2:a8:b9:56:4a:3e:f7:a0:27:d7:
         66:7d:c5:68:b0:d6:b1:a8:48:93:1f:9c:d1:a2:98:0a:b5:6a:
         ab:41:a4:ec:8d:1f:0c:cf:0a:8b:f3:16:f1:bd:19:40:d6:62:
         48:0a:ee:aa:2f:71:40:76:e2:90:c3:d6:b0:bd:2e:41:06:86:
         09:c8:f9:2b:bc:0c:ba:47:5b:47:27:0e:65:06:ed:63:9c:b5:
         ed:1f:97:50:ca:14:d9:0f:72:71:ed:16:29:c6:c3:3a:f7:45:
         87:44:90:1b:80:40:03:59:e6:3e:a1:ff:e2:6f:49:b5:bd:8a:
         de:da:72:e3:7b:72:c9:4a:b8:1e:8c:5e:58:ae:dd:cf:0d:44:
         72:a9:69:d7:78:31:6f:9b:6b:5c:b0:2d:15:fd:e4:fe:4a:87:
         79:4a:22:33:c3:3c:62:ea:27:82:28:f7:b6:62:e4:18:3a:db:
         73:91:0e:2e:ca:a6:b5:a4:7c:11:b1:95:86:e2:3e:04:a4:15:
         1e:d1:37:39:82:27:e5:cd:e0:90:15:a4:d4:66:77:73:96:94:
         a8:39:88:6c:70:2a:47:eb:f5:8c:14:49:32:9f:6a:04:d7:d1:
         14:83:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:06 2026 by rpki-client