Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3135302e302f32342d3234203d3e203138343234.roa
File:                     3132312e35302e3135302e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          pnR8WaDbffAtyC9HWuh/rncfDZuz2UTAKuv4zRf1JYw=
Subject key identifier:   20:71:11:B3:F0:11:5E:9F:7A:5C:F8:FB:69:61:79:0A:7D:06:FD:C7
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       5A4D6466348836674C707E1BD2E50B8AE100911A
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3135302e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:07:19 +0000
ROA not before:           Mon 11 May 2026 17:02:19 +0000
ROA not after:            Mon 10 May 2027 17:07:19 +0000
asID:                     18424
IP address blocks:        121.50.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4d:64:66:34:88:36:67:4c:70:7e:1b:d2:e5:0b:8a:e1:00:91:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:02:19 2026 GMT
            Not After : May 10 17:07:19 2027 GMT
        Subject: CN=207111B3F0115E9F7A5CF8FB6961790A7D06FDC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:f8:a1:79:94:c6:9b:15:78:98:e7:d9:fd:
                    f7:09:54:e2:e0:4c:f7:53:16:9c:2d:21:42:e8:52:
                    55:e9:2a:04:97:90:f6:58:b9:ab:be:b9:9f:fc:7f:
                    63:85:22:cc:c3:ed:cd:e6:8b:1a:73:2c:10:d4:a2:
                    6e:89:41:d1:b9:3c:85:88:01:9a:00:b2:96:5c:3e:
                    d5:c3:19:15:3b:c4:7b:d1:e7:a8:10:5f:09:e7:98:
                    a8:c6:c2:22:7e:1f:b4:15:71:d9:cc:c9:ba:3c:99:
                    46:1e:11:43:c6:c9:70:cc:13:b8:53:ed:3f:93:13:
                    97:22:3a:37:76:9e:96:31:8b:1a:32:a0:d8:8d:a2:
                    46:a9:f9:0b:fe:49:1c:8a:74:ea:93:b3:ef:8c:d5:
                    8e:bd:83:cb:cb:ce:c7:a7:51:7a:8f:66:da:13:09:
                    a7:e3:e3:a2:d6:00:b8:2d:7a:c7:e5:fb:c1:b0:56:
                    43:ed:94:75:36:ac:d1:ee:71:6f:1d:fe:fc:63:95:
                    a9:ff:b5:c3:17:b3:ce:78:80:26:58:bc:cf:1a:35:
                    21:4a:24:17:56:8b:bb:c0:90:b0:1f:bf:7d:6a:ab:
                    8b:ed:60:fb:83:11:f1:c3:a0:a7:2c:4b:f4:b3:23:
                    1a:f8:73:d3:48:41:20:71:95:96:eb:bd:0f:dd:c2:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:71:11:B3:F0:11:5E:9F:7A:5C:F8:FB:69:61:79:0A:7D:06:FD:C7
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3135302e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:59:83:e9:e3:98:30:3b:00:54:99:8a:05:65:1e:30:d0:31:
         78:09:5e:4c:29:94:79:21:ba:a7:6e:31:31:0f:f3:14:e9:17:
         f7:52:ea:b8:d1:47:27:6a:a5:ab:cf:b2:c3:50:35:15:2c:ff:
         b8:4d:33:a7:73:71:a8:8f:25:3a:87:db:61:94:6d:46:de:ed:
         7c:2f:03:2b:8d:a3:96:07:7f:7c:8a:4a:67:8e:0d:49:6d:69:
         3b:3b:73:0c:a9:bb:3f:a0:7c:e5:19:d1:7b:d3:b1:84:80:cd:
         1c:77:59:4d:24:bd:f6:05:11:97:2d:34:f1:de:3d:c1:27:1c:
         da:13:7f:17:79:29:0d:9c:c3:72:7d:81:d1:2c:cf:41:2c:1f:
         56:7c:b9:c7:6e:9e:b7:0b:15:4b:2b:d6:19:04:5b:6c:1b:c6:
         9f:72:0e:0c:cd:86:72:79:b5:d0:88:08:70:3e:ca:78:d9:3b:
         7d:be:86:16:83:42:91:1a:60:17:96:e4:ff:7c:5b:19:90:6a:
         9a:69:62:81:d2:21:e7:83:1c:64:00:74:21:c9:72:ed:09:76:
         e8:df:34:04:8c:a8:b0:c2:3a:c9:d2:5f:d1:fc:15:d7:c5:21:
         67:d3:f5:74:1a:ca:57:9e:b4:7b:16:0e:87:df:d2:32:3a:1b:
         8d:45:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:51:45 2026 by rpki-client