Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa
File:                     3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          0xOt/alcpAMDww+3hdnLaeae14FERuOIKEuHy9m9JLc=
Subject key identifier:   89:95:78:C3:1C:FB:24:3F:D8:F4:DF:E2:3E:B5:57:41:C0:E3:F7:D0
Certificate issuer:       /CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
Certificate serial:       06604DD279E34D80BEFC705F81D4C73475E47862
Authority key identifier: 13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa
Signing time:             Mon 11 May 2026 17:55:26 +0000
ROA not before:           Mon 11 May 2026 17:50:26 +0000
ROA not after:            Mon 10 May 2027 17:55:26 +0000
asID:                     148996
IP address blocks:        161.248.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl
                          rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:60:4d:d2:79:e3:4d:80:be:fc:70:5f:81:d4:c7:34:75:e4:78:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137DCF3FE18E3C9DB33AC6C50E8BE357D0729991
        Validity
            Not Before: May 11 17:50:26 2026 GMT
            Not After : May 10 17:55:26 2027 GMT
        Subject: CN=899578C31CFB243FD8F4DFE23EB55741C0E3F7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:64:1a:4a:7e:76:a2:c0:5b:55:2b:00:92:65:
                    93:a1:5a:62:f3:f6:0e:74:31:65:90:c3:13:a1:58:
                    f1:43:b2:00:c7:74:3e:12:52:92:b8:bc:4f:06:1e:
                    9f:93:5b:88:83:bc:63:db:9d:2d:b8:a0:16:bc:2b:
                    86:0f:21:bf:c2:f2:0b:c8:dc:eb:f5:a7:46:d5:3a:
                    25:28:e3:73:73:2a:f6:22:e2:1a:e2:c6:87:3b:a2:
                    d4:5e:61:bf:9e:aa:ac:90:9e:45:bb:e7:bb:ba:e8:
                    3d:49:79:29:34:f9:5d:1f:59:09:53:87:9c:c8:01:
                    f6:a2:de:a9:7a:27:86:75:c2:c5:90:ac:b6:dd:c3:
                    96:8a:36:7f:80:12:d4:25:d9:e9:dd:6c:49:64:d4:
                    68:f4:ad:a2:5c:fa:b6:5e:b4:48:f8:14:73:12:d1:
                    37:de:d6:30:68:3d:ce:cf:b1:9f:fa:5e:7b:6d:ed:
                    20:5e:f0:65:a2:f8:62:19:fd:e4:6e:54:97:4d:13:
                    2a:3a:d6:8f:90:c9:b0:09:2a:dd:2e:c4:f0:c2:fe:
                    6e:5e:57:6a:03:68:01:fc:b7:f3:5b:d9:1a:46:74:
                    d0:38:cd:5c:ae:34:19:6a:d2:67:30:2e:a8:32:dc:
                    96:7e:26:7f:90:87:ac:0d:39:d9:92:7c:fd:5a:d9:
                    fa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:95:78:C3:1C:FB:24:3F:D8:F4:DF:E2:3E:B5:57:41:C0:E3:F7:D0
            X509v3 Authority Key Identifier:
                keyid:13:7D:CF:3F:E1:8E:3C:9D:B3:3A:C6:C5:0E:8B:E3:57:D0:72:99:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/137DCF3FE18E3C9DB33AC6C50E8BE357D0729991.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANGTIAN/0/3136312e3234382e3134342e302f32342d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9e:c7:33:55:66:4f:de:09:db:7f:bf:79:bd:af:f6:53:7c:
         68:9d:c9:fa:86:7b:43:d3:e9:c4:4f:40:d1:6c:25:c9:69:53:
         d4:c4:87:83:34:33:f4:db:bf:8c:43:5e:f4:53:1f:a9:d8:ef:
         b8:86:1b:5d:d3:da:e4:2b:f9:72:64:b0:07:84:e9:c3:a2:83:
         36:04:60:53:79:38:fa:c6:ca:69:e5:56:5c:10:50:55:ed:d3:
         bb:21:57:6b:ad:5f:e3:6f:05:02:0e:94:99:97:87:54:a3:27:
         9d:d7:f4:05:47:cd:03:67:95:35:3c:7e:e4:cc:39:08:b3:02:
         b7:65:77:ae:f8:bb:37:66:40:76:2f:df:0f:15:77:b6:52:70:
         f1:fe:3d:a8:a6:55:78:11:92:55:27:fe:69:8c:3e:51:fe:19:
         5b:ed:67:9c:92:4b:ea:d3:c1:35:40:c9:90:6a:16:35:20:c3:
         99:8d:69:59:36:5c:11:ac:10:ba:32:16:14:e4:9f:52:e6:e0:
         cf:76:c7:a0:86:62:f3:b9:d2:c8:10:32:12:83:ff:2e:2f:2f:
         33:d4:c6:61:ce:16:a2:1b:84:88:ba:db:d5:d2:47:b7:82:6b:
         ab:d1:2f:9b:16:b9:21:87:ec:e9:bf:a1:02:0e:22:e3:28:95:
         3e:67:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:36:19 2026 by rpki-client