Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3230322e3134302e3136302e302f31392d3234203d3e2039323634.roa
File:                     3230322e3134302e3136302e302f31392d3234203d3e2039323634.roa (raw, json)
Hash identifier:          5ggubjSM1VSLiOYCCBhiOsPeTG2KFEdIp+IiWRBa4p4=
Subject key identifier:   BB:4D:18:51:62:3C:D0:04:DE:BB:37:AD:B8:2F:BC:0D:7F:1C:75:02
Certificate issuer:       /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial:       6972326F5C89F1E99CF969C7469DC524994F8E34
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASNET/0/3230322e3134302e3136302e302f31392d3234203d3e2039323634.roa
Signing time:             Mon 10 Aug 2026 02:04:01 +0000
ROA not before:           Mon 10 Aug 2026 01:59:01 +0000
ROA not after:            Mon 09 Aug 2027 02:04:01 +0000
asID:                     9264
IP address blocks:        202.140.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
                          rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 18:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:72:32:6f:5c:89:f1:e9:9c:f9:69:c7:46:9d:c5:24:99:4f:8e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
        Validity
            Not Before: Aug 10 01:59:01 2026 GMT
            Not After : Aug  9 02:04:01 2027 GMT
        Subject: CN=BB4D1851623CD004DEBB37ADB82FBC0D7F1C7502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:12:a0:2f:57:f3:43:48:f7:f4:67:6c:df:
                    3d:dd:5d:3f:d3:cc:ec:77:27:70:9a:8f:eb:38:20:
                    53:c9:4e:1b:c5:14:58:b9:31:c4:77:b4:36:7c:3b:
                    ca:a2:20:9a:d0:e5:da:34:bd:43:4b:b7:48:69:e4:
                    59:fa:c8:2b:36:82:d1:49:4f:0b:89:04:0b:50:c3:
                    40:be:96:ff:fa:3b:e4:4c:fa:83:8c:18:0f:be:27:
                    54:55:ce:91:a7:84:0f:05:b9:b6:c7:d7:18:b6:55:
                    a0:8f:25:f8:ff:82:d0:ee:97:90:c5:f3:21:b1:c1:
                    c2:f4:e2:c6:ba:32:48:7b:38:1d:73:6d:be:b0:00:
                    ff:3e:ee:d5:f6:78:77:7a:df:ee:c1:be:be:cd:d0:
                    5b:20:5c:6b:c9:49:3b:3c:fd:a6:c8:cc:fb:86:87:
                    92:36:41:56:17:69:67:c6:c9:05:9d:d1:31:d4:d3:
                    c8:9f:64:e0:43:e5:04:10:e9:4a:ab:fa:96:a0:d5:
                    38:c6:b5:eb:11:af:e2:7b:1f:3f:18:b8:92:3f:6e:
                    0e:dd:c9:5f:1e:04:fc:3a:a4:c2:38:c6:05:12:a9:
                    bd:f5:16:34:33:2c:cf:3e:1c:f0:3b:34:79:d8:14:
                    88:03:db:a3:81:06:4b:3d:cc:b7:15:d1:e7:47:c9:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4D:18:51:62:3C:D0:04:DE:BB:37:AD:B8:2F:BC:0D:7F:1C:75:02
            X509v3 Authority Key Identifier:
                keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3230322e3134302e3136302e302f31392d3234203d3e2039323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.140.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:d7:fb:81:2a:01:48:9f:cd:59:4a:c5:e6:9e:18:42:76:74:
         d5:45:f3:89:18:ae:01:cf:5a:30:b9:3c:84:fb:09:29:a2:3f:
         01:07:a4:f3:32:ce:ae:38:30:4b:ff:64:59:96:bb:56:0e:fd:
         99:4a:2b:b7:6f:5c:b7:a0:bf:db:90:e8:e1:23:8f:3f:bd:58:
         0b:c6:84:53:75:ad:b4:e4:e8:e7:d4:eb:c2:c5:5f:91:37:a8:
         c5:65:63:be:53:49:1c:a7:5d:c9:3c:7b:0e:0e:cf:42:78:72:
         47:85:81:46:7d:05:1a:db:d3:d0:5d:90:a5:0a:00:7d:95:71:
         d3:f3:ae:d5:29:18:64:85:19:87:d3:4a:28:71:6a:d6:b2:e8:
         eb:fc:85:c4:f0:36:78:2f:88:84:b5:a8:d6:23:6c:86:d1:84:
         47:fc:36:4e:43:93:bd:c5:22:29:78:2e:45:34:64:ae:77:ea:
         1c:d1:d1:d3:a8:8b:59:12:86:f2:fe:f2:db:91:65:5c:01:6c:
         b8:1e:16:e6:45:b9:8d:fe:88:46:84:f1:c4:d3:0b:6f:a6:ce:
         19:76:2f:28:6a:38:61:18:19:22:9e:04:1a:26:ae:2c:1b:a9:
         e4:2c:7c:86:9b:f0:3a:90:1a:28:25:74:76:c9:63:c7:e9:57:
         f5:7f:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:16 2026 by rpki-client