Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ACEREDC/0/3231312e37392e3139322e302f32302d3234203d3e203137343230.roa
File:                     3231312e37392e3139322e302f32302d3234203d3e203137343230.roa (raw, json)
Hash identifier:          fJ+WHwZ/QadsuhzmLQLFUZGILHar/OLv/HLjuXhUwlA=
Subject key identifier:   EC:0E:8D:3A:DC:5B:FB:20:56:46:E0:3E:30:B2:7C:25:91:F9:81:63
Certificate issuer:       /CN=E9D732B463775547C17E266980ED23CB1F48AE48
Certificate serial:       4840B77A8C902BE21F626702CCAA7127C0BC252F
Authority key identifier: E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ACEREDC/0/3231312e37392e3139322e302f32302d3234203d3e203137343230.roa
Signing time:             Mon 11 May 2026 17:31:57 +0000
ROA not before:           Mon 11 May 2026 17:26:57 +0000
ROA not after:            Mon 10 May 2027 17:31:57 +0000
asID:                     17420
IP address blocks:        211.79.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl
                          rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:40:b7:7a:8c:90:2b:e2:1f:62:67:02:cc:aa:71:27:c0:bc:25:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9D732B463775547C17E266980ED23CB1F48AE48
        Validity
            Not Before: May 11 17:26:57 2026 GMT
            Not After : May 10 17:31:57 2027 GMT
        Subject: CN=EC0E8D3ADC5BFB205646E03E30B27C2591F98163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:73:fa:de:36:e8:3c:ff:fd:61:eb:a6:b5:f2:
                    0b:47:e2:40:49:d0:1e:f6:54:9f:08:56:7d:d1:0a:
                    c9:1c:f4:54:cc:a7:98:69:b6:ce:a9:c6:6c:77:1e:
                    e4:c3:4e:11:c7:02:18:bc:77:a9:3b:c6:7b:85:c9:
                    ec:b1:76:2d:7a:8c:e4:dc:71:be:2c:df:15:60:41:
                    84:50:d2:51:aa:3c:ca:8c:30:e2:bd:7a:91:48:91:
                    aa:18:fc:e9:ee:6e:5e:cd:43:86:68:e3:90:06:92:
                    90:0c:07:12:85:dc:0b:f3:f3:1a:b8:2b:54:8f:a1:
                    31:28:78:8a:a5:d5:cc:d6:c0:fd:e9:10:9b:30:d3:
                    59:66:eb:2f:b6:5a:6a:9e:f8:ef:e7:1f:02:bf:bb:
                    82:9c:d9:c0:6a:9b:dd:26:0a:e8:29:92:e8:cb:53:
                    b0:f2:77:50:9e:d1:a9:8a:38:b1:80:7a:44:8d:ec:
                    ff:ef:d5:8e:6f:80:a2:f8:1a:24:12:6f:e9:42:ee:
                    7f:9a:39:04:fd:ee:62:bd:04:f5:c4:78:e4:f5:4b:
                    1f:20:da:17:79:8e:cd:6f:fb:7d:c8:65:c7:b2:64:
                    97:1c:13:fa:68:73:f7:7d:88:8a:58:a8:74:68:10:
                    b8:6e:8c:03:5b:b9:ba:fb:a5:59:d6:10:69:44:3c:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:8D:3A:DC:5B:FB:20:56:46:E0:3E:30:B2:7C:25:91:F9:81:63
            X509v3 Authority Key Identifier:
                keyid:E9:D7:32:B4:63:77:55:47:C1:7E:26:69:80:ED:23:CB:1F:48:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/E9D732B463775547C17E266980ED23CB1F48AE48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9D732B463775547C17E266980ED23CB1F48AE48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ACEREDC/0/3231312e37392e3139322e302f32302d3234203d3e203137343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:22:be:dd:ba:05:a2:4c:4e:9d:8c:87:a5:c3:26:ae:d3:9b:
         3a:7d:1f:74:22:ff:6a:d1:c0:db:4c:42:c7:51:a7:0f:ed:7c:
         ea:a0:2e:58:3e:6c:6c:c1:8d:46:e6:2f:8d:e8:d3:49:42:2e:
         c3:d7:f0:87:fe:5b:cc:83:0a:75:99:ab:a1:f3:c4:85:a5:5e:
         bd:ba:64:1e:e9:b8:90:d2:df:3b:48:d1:66:3d:b1:0c:42:e4:
         2b:fc:20:f3:ae:d1:02:c7:9b:f7:69:aa:58:ec:5d:51:c0:1c:
         07:40:01:4e:f8:dc:24:3d:4b:78:4b:6c:cc:1d:14:ca:bb:4e:
         aa:72:6f:78:d4:fb:d8:95:ec:3e:d7:99:4b:90:40:6c:08:ec:
         c7:b9:bc:e8:df:96:ed:7f:8b:13:56:ed:b7:15:e8:47:6b:19:
         c2:29:3a:9a:2e:24:63:1c:41:0a:f3:0c:d4:ba:01:18:5f:67:
         13:4b:7b:d8:80:b6:7a:91:fe:7e:e4:84:2c:cc:d7:71:67:2d:
         14:b0:56:36:c5:eb:d2:ac:89:57:26:bd:13:47:6b:6d:3f:af:
         7f:e6:44:e8:1c:ff:34:07:c4:eb:29:dd:1e:64:b2:37:85:cf:
         2b:a8:4e:bb:65:07:70:53:32:57:eb:62:0e:bb:9e:f7:cd:99:
         c6:74:d8:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:33 2026 by rpki-client