Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130312e302f32342d3234203d3e203138343234.roa
File:                     3231312e37392e3130312e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          UnUOW9vZnnB2HC5a5aGFR7XSoCcf7+kCWCYdS2eWaEE=
Subject key identifier:   BF:09:BC:E9:8E:63:46:A0:93:CF:AC:7C:9D:8F:CB:C2:0E:F4:2D:E7
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       0B5B353C7DC2B2EA503660109B14E66BEA217CD9
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130312e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:56:27 +0000
ROA not before:           Mon 11 May 2026 17:51:27 +0000
ROA not after:            Mon 10 May 2027 17:56:27 +0000
asID:                     18424
IP address blocks:        211.79.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:35:3c:7d:c2:b2:ea:50:36:60:10:9b:14:e6:6b:ea:21:7c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:51:27 2026 GMT
            Not After : May 10 17:56:27 2027 GMT
        Subject: CN=BF09BCE98E6346A093CFAC7C9D8FCBC20EF42DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:92:5d:92:d1:6f:8f:f9:34:03:a0:ca:dc:
                    47:6b:1a:d7:0a:56:d3:e5:09:ce:64:d9:2a:56:92:
                    70:2b:af:ce:4c:3e:0d:c2:1b:7c:cc:2c:77:6f:7f:
                    20:6b:75:32:0c:e5:f3:2d:b3:eb:84:a9:c8:32:da:
                    6d:e6:ec:53:b6:89:b3:d9:4d:5f:80:e5:8a:e9:8b:
                    db:78:36:b8:97:bf:10:3e:6a:b7:36:73:46:93:eb:
                    87:0e:d6:f8:4c:df:27:2c:07:69:26:05:d5:76:73:
                    8d:d7:23:66:14:24:e5:d1:60:56:03:38:58:52:c4:
                    c6:98:e9:25:04:06:f8:49:a8:24:26:21:b6:ff:c1:
                    1d:55:43:94:61:70:42:8b:c6:0f:22:b9:ba:a5:d6:
                    3f:f5:47:41:c4:3f:bb:50:e2:ae:05:b2:00:42:1a:
                    fb:ab:f7:15:0f:ca:76:4c:82:4c:00:1f:46:8b:ee:
                    55:08:d7:ee:70:84:c1:46:52:b2:9b:8e:28:3a:94:
                    5a:15:8f:f2:23:36:64:4c:85:af:81:b7:1c:24:af:
                    de:f5:8f:bb:17:2c:15:07:ad:50:2a:e0:b6:a5:c8:
                    99:1c:d8:8e:85:a0:6a:62:e4:50:b1:a2:4b:8e:70:
                    17:1c:14:b6:08:e2:0f:39:55:62:e6:2d:17:02:dc:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:09:BC:E9:8E:63:46:A0:93:CF:AC:7C:9D:8F:CB:C2:0E:F4:2D:E7
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130312e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:56:cb:a9:f2:e8:68:ad:eb:b3:71:0e:bb:83:9a:9e:cb:c2:
         77:c0:a1:dc:d3:c2:ef:fb:e6:6b:94:95:5a:8c:c9:c2:db:a9:
         c1:38:dc:7d:57:91:24:66:92:0c:bc:03:17:40:62:9c:5a:6e:
         2a:9b:22:d8:da:88:d4:f6:60:c6:ca:db:3c:57:89:7d:7c:6c:
         10:73:38:00:6c:a3:b3:6a:70:81:b3:32:a0:01:23:be:9d:9c:
         f9:7f:c7:a9:c3:b5:9f:26:2b:44:73:b1:d0:36:c2:84:73:51:
         64:8c:f2:50:44:d1:8d:4f:98:8e:da:b0:78:75:4b:c4:bf:53:
         ce:a8:3b:60:f9:25:14:d6:17:51:b9:6a:60:11:83:9c:7b:6b:
         43:1d:92:56:65:f3:f0:27:20:65:c0:22:2a:52:80:3c:02:d4:
         3b:92:c9:aa:63:c0:8e:24:4f:8b:74:1f:eb:f8:ea:a4:8c:a2:
         89:35:95:52:25:fd:c8:84:12:87:a0:85:a5:f4:e5:b2:78:c2:
         a5:03:b0:f8:c0:af:99:9b:58:ef:b5:05:83:1a:a0:97:74:bc:
         dd:86:ff:65:0b:cb:6d:8a:29:7b:37:5c:04:5d:60:d2:62:e0:
         4a:96:7b:b1:01:10:6a:79:5d:4f:55:c7:b4:e5:ba:b1:fb:f4:
         3b:0a:31:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:45 2026 by rpki-client