Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CALEBTECH/0/3136332e3132382e3137322e302f32332d3234203d3e2037343833.roa
File:                     3136332e3132382e3137322e302f32332d3234203d3e2037343833.roa (raw, json)
Hash identifier:          uLO/miZp9vF1gX6kjb/vo6kgYlQos8JcnqN+vE1tiZo=
Subject key identifier:   80:F7:8D:0E:29:E1:55:88:1D:1B:90:1F:A9:C7:42:E2:B3:5A:C1:8C
Certificate issuer:       /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial:       6ED3D05AD52C37216407D5E910B431FD49576CEC
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/3136332e3132382e3137322e302f32332d3234203d3e2037343833.roa
Signing time:             Mon 11 May 2026 17:58:53 +0000
ROA not before:           Mon 11 May 2026 17:53:53 +0000
ROA not after:            Mon 10 May 2027 17:58:53 +0000
asID:                     7483
IP address blocks:        163.128.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
                          rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d3:d0:5a:d5:2c:37:21:64:07:d5:e9:10:b4:31:fd:49:57:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
        Validity
            Not Before: May 11 17:53:53 2026 GMT
            Not After : May 10 17:58:53 2027 GMT
        Subject: CN=80F78D0E29E155881D1B901FA9C742E2B35AC18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:6d:21:6d:a6:a9:32:8e:30:c0:7d:bb:bb:
                    6a:eb:16:0d:c8:05:d0:17:61:92:b2:0c:98:30:ab:
                    29:c6:34:99:1f:a5:2a:42:55:ef:01:b9:ac:77:8e:
                    b5:08:ec:77:fb:87:d4:0d:04:e4:e1:aa:c1:69:e8:
                    a1:ec:51:56:e7:0e:46:41:f7:c1:74:f3:11:33:d0:
                    a4:15:2e:21:d7:51:d4:0a:9b:1a:5c:41:02:82:f2:
                    8a:59:27:30:34:bf:7f:d5:96:10:45:ad:a2:22:f3:
                    f4:2d:10:66:ae:c4:de:cf:4b:57:7d:3d:27:42:35:
                    03:9d:99:76:c0:d1:70:4e:fa:0b:86:fb:cf:12:92:
                    1b:53:23:e2:8e:e3:5a:0e:3a:5f:53:a2:ed:08:ca:
                    e1:d3:2a:1f:46:99:1f:54:e3:eb:17:83:91:e9:b7:
                    4d:20:4d:1c:b1:0f:c2:59:d3:d3:2b:e6:c3:43:96:
                    d1:7e:77:97:02:0e:f8:82:c6:ef:0f:d3:3f:46:7b:
                    36:72:aa:72:30:af:2d:bf:03:e1:6f:6b:df:9b:d7:
                    b6:f2:ca:d8:56:e2:eb:f9:9e:30:73:79:50:fa:d1:
                    5d:4c:f9:9a:ed:44:a7:ae:0d:2d:0b:95:f2:ee:e5:
                    b3:ce:79:d5:41:8a:50:24:e0:70:0d:fd:f7:cb:c3:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F7:8D:0E:29:E1:55:88:1D:1B:90:1F:A9:C7:42:E2:B3:5A:C1:8C
            X509v3 Authority Key Identifier:
                keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/3136332e3132382e3137322e302f32332d3234203d3e2037343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:37:c6:f2:3f:c4:19:44:3d:68:47:ed:69:73:7f:b8:67:
         91:75:6d:19:2c:70:06:10:d9:07:91:b6:eb:fe:af:95:b0:29:
         b2:02:48:04:33:17:c4:65:6f:d0:25:34:c0:e5:30:04:f2:38:
         ba:e7:ee:b0:32:d6:8e:81:5f:ef:16:6b:6f:76:b9:bb:06:61:
         8b:09:97:60:e3:b4:df:a5:b8:2c:08:e8:c1:d7:6e:97:ba:78:
         07:ae:de:bb:03:3e:e7:53:c6:6b:da:a9:97:5a:7b:be:f3:a3:
         00:26:d3:b0:e0:da:b3:55:1b:ad:07:fe:c9:4b:47:10:f0:a6:
         e5:32:d3:ae:25:66:89:ff:cc:f4:67:d6:e4:d8:08:d0:80:ce:
         82:6a:d7:69:44:1e:84:73:a0:d1:aa:69:aa:90:a0:00:e9:e5:
         b7:32:87:0a:21:16:3a:30:8f:d1:14:8f:fc:2e:65:69:0f:fd:
         ed:b7:13:4a:10:28:c5:4d:5c:35:71:f1:3b:e0:1e:53:54:ac:
         11:7e:94:1d:1b:2d:37:95:d4:34:ca:04:6f:13:ad:fb:cc:31:
         07:a9:6b:99:a9:b3:97:81:3f:cc:a8:db:dd:4c:b5:82:d9:5f:
         94:76:0a:ae:60:99:3d:45:34:71:de:3a:a9:96:d2:3a:4d:33:
         21:17:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:25 2026 by rpki-client