Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20323136313338.roa
File:                     3230322e352e31302e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier:          elBageucsQOSTptkEXsGAPEabTfNUu/5ZP88JzEAJHU=
Subject key identifier:   AB:A6:A0:87:5A:DA:93:7F:0D:02:17:4D:A0:CD:82:DF:C4:0D:CA:CB
Certificate issuer:       /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial:       6773B7D2B991462E06A653411C9406BCEBF546BF
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20323136313338.roa
Signing time:             Mon 14 Sep 2026 06:24:01 +0000
ROA not before:           Mon 14 Sep 2026 06:19:01 +0000
ROA not after:            Mon 13 Sep 2027 06:24:01 +0000
asID:                     216138
IP address blocks:        202.5.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
                          rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 20:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:73:b7:d2:b9:91:46:2e:06:a6:53:41:1c:94:06:bc:eb:f5:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
        Validity
            Not Before: Sep 14 06:19:01 2026 GMT
            Not After : Sep 13 06:24:01 2027 GMT
        Subject: CN=ABA6A0875ADA937F0D02174DA0CD82DFC40DCACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:90:ed:d9:22:13:83:3d:ce:fd:ac:05:2b:2c:
                    0d:06:f6:46:98:36:bd:06:ff:cd:d6:b4:9c:ca:da:
                    c1:04:99:72:c1:99:84:4e:79:58:43:22:34:8f:a7:
                    af:3c:74:11:e6:70:33:0b:79:7b:dd:51:07:a8:57:
                    c3:4c:b8:fe:0d:c6:dc:63:c4:d8:49:6d:a1:38:fb:
                    48:aa:c0:72:d2:ca:4a:a6:a4:e0:72:6f:72:ff:35:
                    67:d2:e4:02:bb:9b:79:22:b9:5a:a5:75:36:c0:c4:
                    ae:70:3b:f8:00:96:ef:ce:ee:87:c8:ff:40:c5:05:
                    cf:8a:53:7c:4b:95:f2:7a:34:61:38:c6:7b:8e:84:
                    c3:53:82:ae:e9:aa:bf:9d:db:76:6c:5a:cd:32:d5:
                    14:01:43:35:88:6a:15:31:12:eb:1c:1b:e5:66:85:
                    c1:71:db:8a:ad:0b:35:c5:8c:a3:23:ff:ba:92:a7:
                    ca:9d:e4:2f:5e:bf:ab:e8:41:b8:49:69:e3:3f:0b:
                    e5:f7:3f:74:0e:2f:b4:03:e5:59:5c:f1:b5:52:82:
                    ca:d0:3e:55:18:d7:b6:c8:c2:f7:6a:71:a4:b1:c9:
                    d0:c9:92:c5:c6:34:f8:74:f3:aa:e5:89:c8:c9:89:
                    8e:64:00:3f:87:c3:22:c0:93:0f:a4:65:24:4f:6e:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A6:A0:87:5A:DA:93:7F:0D:02:17:4D:A0:CD:82:DF:C4:0D:CA:CB
            X509v3 Authority Key Identifier:
                keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20323136313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:27:ff:ee:61:2e:6b:66:1a:2e:ae:37:36:89:4b:fa:ff:0e:
         47:ec:66:c5:f1:77:e4:1f:d0:fc:51:1f:a4:c4:a4:b9:3b:88:
         8b:dd:d3:90:5b:87:f1:75:ef:35:4c:13:31:81:0d:0c:2c:c7:
         cf:6b:08:c0:2c:d5:fe:d6:9a:53:57:26:84:15:f5:6e:7e:4d:
         01:99:91:92:c3:c4:a1:23:30:65:b0:bd:e7:d0:da:89:ca:d2:
         90:28:e9:fb:e7:63:44:99:95:b9:fa:8d:a2:35:14:1a:02:c6:
         10:da:75:26:e6:25:ec:7b:89:1c:45:9c:11:db:e4:ad:70:18:
         a3:cb:8d:6d:e6:92:38:a2:ef:f3:37:5e:7b:12:0b:ff:f0:42:
         05:62:58:a0:2d:4b:3f:a0:0f:00:cc:e5:da:c0:d5:59:96:70:
         bc:fa:dc:c1:12:04:ae:ac:6c:e6:45:a6:e4:fc:f5:0d:68:a3:
         20:87:65:29:78:81:92:ec:b7:13:79:3c:69:01:78:b1:12:bb:
         55:26:d6:ce:85:d3:68:af:f8:08:ab:13:b2:a9:a9:98:f9:09:
         f7:89:40:74:c4:2b:10:76:86:17:86:4c:a2:96:33:55:a8:97:
         11:34:cf:6f:f4:1c:fc:b2:89:d8:16:ae:34:14:2e:72:a3:85:
         2d:11:8c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:09 2026 by rpki-client