Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20323136313338.roa
File:                     3230322e352e31312e302f32342d3234203d3e20323136313338.roa (raw, json)
Hash identifier:          AWD+zuYzrNaUxcfv/56OBONbGf7IKDXjS7DxuJrGBYg=
Subject key identifier:   52:0A:B6:47:D6:CF:98:FA:7A:4E:7B:2A:F1:65:F5:DD:9D:E2:3E:27
Certificate issuer:       /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial:       1EF789BA6F86F68F445AD403CD7A2B14CA51C264
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20323136313338.roa
Signing time:             Mon 14 Sep 2026 06:24:02 +0000
ROA not before:           Mon 14 Sep 2026 06:19:02 +0000
ROA not after:            Mon 13 Sep 2027 06:24:02 +0000
asID:                     216138
IP address blocks:        202.5.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
                          rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 20:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f7:89:ba:6f:86:f6:8f:44:5a:d4:03:cd:7a:2b:14:ca:51:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
        Validity
            Not Before: Sep 14 06:19:02 2026 GMT
            Not After : Sep 13 06:24:02 2027 GMT
        Subject: CN=520AB647D6CF98FA7A4E7B2AF165F5DD9DE23E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:1b:fd:db:87:a4:d4:91:19:a9:9c:3c:cb:
                    39:0a:11:69:22:31:6b:40:74:25:08:b9:35:30:73:
                    1e:93:1e:0b:3b:1d:ac:e3:3e:bd:18:62:8b:40:64:
                    64:92:0f:b8:e5:86:14:51:96:47:80:38:bd:4c:14:
                    92:ec:a0:2b:75:08:bd:46:06:c4:19:e8:54:df:e1:
                    88:67:5a:2a:88:1e:92:a0:91:86:50:a9:74:47:00:
                    8b:a2:20:7c:ce:68:31:18:af:d0:bd:17:db:06:56:
                    ed:04:53:8e:57:1d:ee:c7:a8:6e:c5:30:24:83:d5:
                    16:85:17:28:ac:cb:ae:39:7d:47:97:e4:bb:39:b5:
                    4d:03:4b:bd:9c:af:c4:86:7a:7c:74:c0:b1:2e:6b:
                    21:9a:1c:52:76:37:36:37:f3:b5:d1:04:ce:10:47:
                    81:b6:b3:4c:8b:a9:db:fc:84:31:4c:f6:b0:ae:92:
                    1b:43:4d:6f:bf:66:dc:91:f9:61:6d:83:07:f4:f2:
                    c0:c5:6d:31:f7:1a:c8:6e:05:bf:29:30:64:4b:a0:
                    16:2d:f3:d5:77:b2:f4:a4:0f:4a:09:06:8e:28:b4:
                    bd:b7:2b:8b:8a:6c:c9:78:8c:48:2c:6a:0b:e8:2d:
                    6b:69:e0:4e:62:e1:08:00:9c:27:76:14:bd:84:de:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:B6:47:D6:CF:98:FA:7A:4E:7B:2A:F1:65:F5:DD:9D:E2:3E:27
            X509v3 Authority Key Identifier:
                keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20323136313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:97:55:5f:31:4f:59:d0:31:0e:9f:2d:6c:95:e3:ba:90:
         67:a6:1e:c7:14:39:ca:46:04:8a:da:6d:12:3c:f3:93:bc:26:
         9f:c4:a6:f3:94:61:25:ea:4d:f5:5d:e9:e3:a0:93:33:74:39:
         bc:7f:50:59:ac:d3:29:a6:64:b7:cf:b1:b3:f9:40:71:e5:bd:
         de:e1:35:40:4f:ac:90:5a:5d:ec:49:54:11:60:96:c6:88:54:
         cf:90:2a:3a:36:08:52:fa:23:c2:60:b2:ee:5b:55:31:68:64:
         bf:31:43:f1:da:a2:84:97:0d:28:37:1b:4c:d9:aa:af:ad:0e:
         cb:97:d5:f3:6d:4a:44:1e:b5:3f:81:82:99:af:92:24:23:db:
         3c:c9:c7:39:5d:f0:40:f9:ff:98:26:da:72:5a:22:09:56:f5:
         32:05:16:c3:58:42:d4:cf:e5:40:5d:55:05:33:e7:e9:b3:3d:
         b1:2e:d5:bd:e6:c3:5e:66:98:89:08:4c:fe:bf:5f:bb:f2:92:
         94:64:79:6a:aa:f9:a7:3a:51:af:a4:f2:7f:91:6d:aa:b0:7a:
         51:29:1b:e8:f6:35:97:00:36:de:1b:6e:7a:1d:a4:59:46:35:
         8d:a5:38:fc:08:f4:c6:a1:00:61:6d:9d:ea:e4:a0:7d:b3:88:
         71:61:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:32:09 2026 by rpki-client