Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134352e302f32342d3234203d3e203138343234.roa
File:                     3132312e35302e3134352e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          uo7hpGpLo6PgjBxgmsvvW1pfn0zHzcoCinIWpFYstQE=
Subject key identifier:   E2:B0:25:3C:C4:98:4D:6D:B1:8E:C7:4D:AF:81:08:DE:02:6A:82:F9
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       65EA7DE739885B78B6A08FAE5D9A13AA43433BA3
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134352e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:07:16 +0000
ROA not before:           Mon 11 May 2026 17:02:16 +0000
ROA not after:            Mon 10 May 2027 17:07:16 +0000
asID:                     18424
IP address blocks:        121.50.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ea:7d:e7:39:88:5b:78:b6:a0:8f:ae:5d:9a:13:aa:43:43:3b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:02:16 2026 GMT
            Not After : May 10 17:07:16 2027 GMT
        Subject: CN=E2B0253CC4984D6DB18EC74DAF8108DE026A82F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:06:f0:f1:6c:fe:3c:8a:ca:ed:3c:db:b5:
                    d8:0b:ec:12:72:22:bc:ba:16:bc:8f:85:51:7a:aa:
                    19:0e:f7:a9:7a:23:28:c3:64:c8:16:7a:b5:d6:b7:
                    ca:7b:82:f7:9b:97:15:66:01:26:11:80:af:62:56:
                    51:08:af:f2:ed:bc:9c:6b:cb:ca:c4:df:a6:b3:ed:
                    32:c5:5e:c2:f1:af:12:80:f5:b5:fa:15:69:4e:47:
                    37:7e:ac:ee:2f:bb:a6:e1:42:29:98:b1:1c:06:5b:
                    5c:01:90:dd:28:4a:9e:44:a1:79:36:18:ea:e5:a0:
                    ee:ee:51:78:35:2a:a9:2f:ef:2e:22:31:ff:fe:e9:
                    6c:c7:b2:68:e8:07:01:29:e2:d1:3b:70:02:de:3a:
                    97:48:5f:0f:96:db:de:d6:b9:06:40:ff:13:39:b6:
                    92:79:57:fa:07:cd:d7:1a:2f:a2:f4:17:78:4c:81:
                    2c:e9:78:04:42:e7:fc:46:d9:20:c4:1b:42:41:dd:
                    82:04:54:32:27:9c:78:0a:e4:cd:c8:2e:d2:b2:47:
                    77:68:87:f7:7c:c0:d5:a7:3d:e8:7e:12:69:fd:79:
                    ed:da:28:d3:e1:fb:13:42:2c:b1:d5:3f:fb:0b:7a:
                    4b:2d:43:31:68:b4:1d:3c:7b:eb:39:43:d1:d7:08:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:25:3C:C4:98:4D:6D:B1:8E:C7:4D:AF:81:08:DE:02:6A:82:F9
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134352e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:06:b7:c2:6a:55:4d:22:c4:4a:83:d7:b5:81:51:92:45:
         07:c0:24:a4:6d:54:a4:b1:52:e8:24:47:63:26:eb:2e:0e:00:
         58:dd:66:53:f2:1d:5f:09:0c:8c:39:77:85:17:fb:22:5d:73:
         99:75:5e:3c:dc:57:4b:7e:0d:e4:20:2b:bd:32:77:8c:13:f1:
         56:0c:62:75:24:0b:71:f8:44:07:0b:2f:6e:bb:31:9c:ae:27:
         4f:23:1e:f9:a1:44:47:04:63:1f:38:ea:cd:aa:e5:3c:55:5f:
         01:d1:1a:5f:96:f4:b2:51:ae:53:e5:0c:59:76:61:a0:3d:93:
         b5:25:ba:91:57:3a:21:91:16:4f:f0:36:84:86:c9:5c:e2:cc:
         c6:63:76:9b:11:86:cd:81:22:c0:bf:64:2b:cc:f2:a6:4b:22:
         ca:3b:dd:b7:bc:1d:9b:e5:9d:e7:f2:11:01:11:96:0e:5d:7e:
         d6:58:b8:8d:6d:95:f7:1b:19:94:23:3f:a2:10:94:b5:7a:19:
         c5:1e:93:65:8f:5a:a5:96:81:98:e0:df:b7:fd:8f:23:23:4e:
         90:3c:a0:c5:30:38:32:85:13:5c:9d:a5:8d:f0:c7:ef:da:55:
         7d:02:88:24:1b:0f:12:0b:89:0a:6d:4d:f8:2d:85:f5:06:43:
         dc:c2:45:41
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUZep95zmIW3i2oI+uXZoTqkNDO6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2
NjVGRUY2NzAeFw0yNjA1MTExNzAyMTZaFw0yNzA1MTAxNzA3MTZaMDMxMTAvBgNV
BAMTKEUyQjAyNTNDQzQ5ODRENkRCMThFQzc0REFGODEwOERFMDI2QTgyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ygbw8Wz+PIrK7TzbtdgL7BJy
Iry6FryPhVF6qhkO96l6IyjDZMgWerXWt8p7gveblxVmASYRgK9iVlEIr/LtvJxr
y8rE36az7TLFXsLxrxKA9bX6FWlORzd+rO4vu6bhQimYsRwGW1wBkN0oSp5EoXk2
GOrloO7uUXg1Kqkv7y4iMf/+6WzHsmjoBwEp4tE7cALeOpdIXw+W297WuQZA/xM5
tpJ5V/oHzdcaL6L0F3hMgSzpeARC5/xG2SDEG0JB3YIEVDInnHgK5M3ILtKyR3do
h/d8wNWnPeh+Emn9ee3aKNPh+xNCLLHVP/sLekstQzFotB08e+s5Q9HXCKNZAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQU4rAlPMSYTW2xjsdNr4EI3gJqgvkwHwYDVR0j
BBgwFoAU+Oz3ZyMCp/q1KIUirWTSF2Zf72cwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VCVEFJ
V0FOLzAvRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2NjVGRUY2Ny5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GOEVDRjc2NzIzMDJBN0ZBQjUyODg1MjJB
RDY0RDIxNzY2NUZFRjY3LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VCVEFJV0FOLzAvMzEzMjMx
MmUzNTMwMmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzQzMjM0
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAeTKRMA0GCSqGSIb3DQEBCwUAA4IBAQB18wa3wmpVTSLESoPX
tYFRkkUHwCSkbVSksVLoJEdjJusuDgBY3WZT8h1fCQyMOXeFF/siXXOZdV483FdL
fg3kICu9MneME/FWDGJ1JAtx+EQHCy9uuzGcridPIx75oURHBGMfOOrNquU8VV8B
0RpflvSyUa5T5QxZdmGgPZO1JbqRVzohkRZP8DaEhslc4szGY3abEYbNgSLAv2Qr
zPKmSyLKO923vB2b5Z3n8hEBEZYOXX7WWLiNbZX3GxmUIz+iEJS1ehnFHpNlj1ql
loGY4N+3/Y8jI06QPKDFMDgyhRNcnaWN8Mfv2lV9AogkGw8SC4kKbU34LYX1BkPc
wkVB
-----END CERTIFICATE-----
Generated at Wed May 13 08:00:23 2026 by rpki-client