Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134372e302f32342d3234203d3e203138343234.roa
File:                     3132312e35302e3134372e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          VPzvdGpVYOH3jfuS242KXMIP/Dp+ZzWeSvJDpBgg8YY=
Subject key identifier:   51:D1:8E:8C:69:88:6B:9B:7B:39:35:4D:3F:3C:80:9D:FB:E8:0F:F3
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       2C68C7DD4DF64B192234E5091157E460AD03F137
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134372e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:07:21 +0000
ROA not before:           Mon 11 May 2026 17:02:21 +0000
ROA not after:            Mon 10 May 2027 17:07:21 +0000
asID:                     18424
IP address blocks:        121.50.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:68:c7:dd:4d:f6:4b:19:22:34:e5:09:11:57:e4:60:ad:03:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:02:21 2026 GMT
            Not After : May 10 17:07:21 2027 GMT
        Subject: CN=51D18E8C69886B9B7B39354D3F3C809DFBE80FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:85:68:03:0d:ce:f1:9d:f0:29:d5:f4:c8:
                    fb:51:f4:5d:a8:2a:d1:1d:6d:35:94:78:e5:92:29:
                    7f:c8:ad:47:42:04:cb:fa:09:8c:8f:23:ad:7c:04:
                    97:49:5f:96:2e:6b:2b:78:42:16:4e:c7:9a:ee:d3:
                    6c:e2:9a:cb:65:12:a3:5c:1e:4c:34:76:9d:64:61:
                    72:c2:46:ac:40:d3:d0:f3:24:8a:2a:e2:21:2a:f3:
                    d5:da:2e:5d:4b:59:c5:1e:4e:82:e4:09:14:8b:14:
                    ea:2f:39:d2:af:13:c1:93:6c:8d:d0:88:7c:8d:6c:
                    2b:1e:b0:12:76:2e:68:75:d2:30:e6:f2:d3:de:f4:
                    7b:74:f9:0c:d2:6a:21:7f:11:8b:f6:48:be:80:f9:
                    ae:b5:b0:fa:41:48:cb:4c:64:53:0a:53:ef:d0:b2:
                    8e:66:db:0b:fb:4d:c4:c0:8e:11:68:5c:69:24:9b:
                    ca:b0:a0:ca:b6:e7:20:af:85:b7:4f:01:33:81:8c:
                    7c:9d:60:21:a9:69:f5:1e:ad:78:36:0d:3e:a2:49:
                    95:8d:b0:50:6d:29:ce:8f:1f:cc:8d:ef:3b:6f:31:
                    56:46:d2:39:6c:eb:93:62:0c:7f:3f:28:44:31:c5:
                    f2:95:d7:9b:be:18:17:7f:8b:f4:1c:84:5b:93:af:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D1:8E:8C:69:88:6B:9B:7B:39:35:4D:3F:3C:80:9D:FB:E8:0F:F3
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134372e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:64:68:02:d7:fa:2c:89:6d:d3:5e:ba:88:78:91:46:8a:9c:
         9b:1e:95:19:9a:02:c8:5e:29:e4:e8:a6:0d:60:33:d6:63:b6:
         7c:43:31:37:e4:04:53:c0:c8:af:d0:67:a5:47:67:bc:8c:6e:
         b9:b3:11:ec:e5:6d:33:8d:1a:5b:25:5c:b9:fb:74:d0:46:96:
         d2:c4:a4:6b:6c:6c:0b:29:31:5c:2d:ab:88:6f:9c:fa:ee:d0:
         ff:7f:2e:49:d3:85:46:af:29:fc:41:28:6e:3f:8a:f3:ac:7c:
         de:b9:4c:a0:7d:f7:f9:ec:57:4f:4d:27:3c:52:20:be:67:99:
         9d:0d:17:85:70:98:13:7e:12:a9:4e:52:b2:a8:2f:1a:4a:63:
         44:b7:ff:5e:dc:53:3c:f9:f6:9d:6c:78:28:40:6d:45:1d:1b:
         87:d0:84:2f:c4:49:ef:39:d7:94:af:d3:a1:bb:37:02:cc:99:
         05:40:58:6a:22:85:8e:d0:3a:c7:d6:36:f8:03:31:d6:aa:2e:
         16:62:92:81:41:47:0b:a7:fb:8d:cc:c3:1f:b1:28:2e:1a:15:
         8f:61:d8:de:e9:33:38:3c:ba:67:54:c3:4c:71:39:34:f8:64:
         c4:2d:21:69:af:d6:38:5a:cd:3a:1a:2d:c3:ea:61:b3:28:aa:
         31:ee:bd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:20 2026 by rpki-client