Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34302e302f32312d3234203d3e203138343239.roa
File:                     3132332e35302e34302e302f32312d3234203d3e203138343239.roa (raw, json)
Hash identifier:          E9eXu+JTrSTZfcRehTYexSHqykBb8zI5XVzwh/mQ4XQ=
Subject key identifier:   6E:79:E7:B0:B1:FC:2C:6D:91:27:B0:FF:D2:55:90:6C:98:B5:42:01
Certificate issuer:       /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
Certificate serial:       515F81363FB23CCD6F355E634A1227EF6D079DDB
Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34302e302f32312d3234203d3e203138343239.roa
Signing time:             Mon 11 May 2026 17:26:55 +0000
ROA not before:           Mon 11 May 2026 17:21:55 +0000
ROA not after:            Mon 10 May 2027 17:26:55 +0000
asID:                     18429
IP address blocks:        123.50.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl
                          rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5f:81:36:3f:b2:3c:cd:6f:35:5e:63:4a:12:27:ef:6d:07:9d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1
        Validity
            Not Before: May 11 17:21:55 2026 GMT
            Not After : May 10 17:26:55 2027 GMT
        Subject: CN=6E79E7B0B1FC2C6D9127B0FFD255906C98B54201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:7e:40:38:09:a0:9a:91:56:a9:4e:f7:0a:
                    9c:1e:65:02:35:c5:14:01:48:17:5d:d7:d4:c0:09:
                    ea:68:37:f0:b4:01:ea:55:42:36:96:64:5c:9e:bd:
                    ec:21:0c:e0:30:36:fa:cd:ac:4a:d1:5b:ec:ae:24:
                    21:f0:a6:24:c2:b5:f2:64:c3:47:3d:80:89:e9:01:
                    04:7d:8b:5b:0f:d8:b3:28:93:c4:ee:88:d5:5c:0c:
                    4b:55:da:09:26:a8:ec:ea:c4:72:60:ef:7e:e8:cf:
                    19:ef:ee:64:a1:6e:fe:b6:87:da:7f:99:ab:da:37:
                    d6:12:f4:93:28:21:2d:69:c9:e2:1d:94:c7:df:0d:
                    c3:13:3c:4d:26:b3:70:ac:87:69:7a:fa:37:e9:33:
                    75:b3:d1:e1:9b:ed:a9:cd:16:9f:15:d7:4c:19:1a:
                    1f:33:f6:09:9d:68:ab:24:c4:81:21:73:f2:9e:4e:
                    56:3b:d5:d4:ad:fe:4a:10:89:a3:b4:16:92:14:c2:
                    24:5f:6d:93:bf:98:f4:2d:f1:a9:ab:42:66:10:c0:
                    b6:89:10:b5:4d:25:57:14:bd:40:80:43:fb:45:1b:
                    1f:79:f4:96:c6:ec:a6:93:75:70:41:3f:c5:23:73:
                    ae:5c:b2:bd:56:91:e1:18:d2:e3:0e:70:08:ea:2d:
                    e7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:E7:B0:B1:FC:2C:6D:91:27:B0:FF:D2:55:90:6C:98:B5:42:01
            X509v3 Authority Key Identifier:
                keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34302e302f32312d3234203d3e203138343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.50.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:c1:96:19:e4:78:ec:f6:02:50:bf:7c:72:7a:17:39:b8:f4:
         c5:fb:b3:18:aa:03:2a:1b:ab:df:02:ec:5c:d5:85:56:02:f0:
         f5:4f:45:86:fb:8c:3f:01:f9:71:38:77:35:be:69:a5:62:cc:
         34:56:1c:b8:6b:fe:38:1a:14:47:31:03:f9:48:26:09:28:29:
         ea:a0:3a:9b:bc:9f:9f:45:77:91:ce:2c:9b:c0:1e:47:97:ee:
         d2:a5:3b:da:63:19:fc:20:95:e4:c3:55:74:2a:a7:52:c1:e9:
         ca:56:b2:3e:dd:fa:63:3c:3e:fb:da:34:18:cc:2c:1b:ce:25:
         b9:7f:ca:dd:5a:8c:a2:58:db:00:a4:76:4b:3e:38:3d:7e:69:
         0a:00:a7:b2:0f:0f:51:c8:3f:e9:d8:b4:3a:fa:62:55:30:da:
         3f:4a:36:61:d3:5e:7e:4b:80:e3:da:7d:06:f8:b5:23:c4:3e:
         88:1d:e9:91:81:ef:c2:7e:ae:40:fc:10:5e:65:1d:89:ca:0e:
         89:31:ee:e7:f9:25:b0:d5:e3:28:1e:11:78:a4:34:29:96:1b:
         38:22:63:66:07:da:3f:50:c2:97:5d:32:98:da:99:c2:59:7d:
         a0:6d:b7:6c:c0:bc:22:70:1d:78:64:c4:67:e5:9f:e8:a4:f3:
         bb:3d:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:18 2026 by rpki-client