Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e2037353336.roa
File:                     3136352e3130312e32382e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier:          MDQ0MQpqvOnP3tGAXbdXYndg5XorOFrBiv2BjsmWQz0=
Subject key identifier:   1C:BB:30:28:A3:20:1B:75:99:7F:A0:12:C6:B9:C8:97:4C:12:15:2B
Certificate issuer:       /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial:       52FFBA1E5966B01B153BA69657C804ED0F5E8F51
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e2037353336.roa
Signing time:             Thu 28 May 2026 09:43:51 +0000
ROA not before:           Thu 28 May 2026 09:38:51 +0000
ROA not after:            Thu 27 May 2027 09:43:51 +0000
asID:                     7536
IP address blocks:        165.101.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jun 2026 01:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ff:ba:1e:59:66:b0:1b:15:3b:a6:96:57:c8:04:ed:0f:5e:8f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
        Validity
            Not Before: May 28 09:38:51 2026 GMT
            Not After : May 27 09:43:51 2027 GMT
        Subject: CN=1CBB3028A3201B75997FA012C6B9C8974C12152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:7c:24:f7:56:03:88:67:89:10:06:70:63:
                    1d:40:32:11:16:db:62:90:5e:0b:0a:f7:fb:70:6b:
                    08:20:20:cc:05:ee:20:fe:45:9e:00:1a:a1:f4:8d:
                    a2:34:94:d4:31:3f:44:63:ad:d9:c1:d5:d7:fb:af:
                    6c:fa:17:9e:e7:ed:67:a6:ff:43:5a:a6:82:45:1e:
                    e5:a1:94:1b:fa:d6:66:2f:2f:a6:69:33:7d:37:d2:
                    8a:b1:ef:84:c5:66:a6:a2:0c:a1:d7:63:53:36:6c:
                    d8:d3:71:92:20:dd:05:bc:f8:28:3f:fe:c0:25:75:
                    70:44:4b:b4:da:57:e9:30:11:29:ed:1e:80:13:ba:
                    46:a5:7f:44:99:ab:f8:b2:c4:5c:f9:13:7a:b2:0b:
                    23:00:f7:5c:47:f3:fb:ca:3f:1e:63:25:79:59:3f:
                    e1:f8:0c:e6:e3:6d:20:22:08:0c:63:5b:63:ab:4a:
                    b4:2a:d2:6e:ab:33:e2:2c:bc:51:b4:af:5c:4b:19:
                    10:5c:e6:59:cd:db:f1:62:c4:b5:b1:32:63:8a:b6:
                    65:db:50:a5:d8:f3:37:b6:88:85:b5:f0:b8:9d:f8:
                    c9:e4:c0:ea:1d:b5:22:15:1d:c3:8e:e1:f5:57:91:
                    5f:3e:6d:d8:ac:48:99:a6:49:22:07:ca:31:00:ce:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:30:28:A3:20:1B:75:99:7F:A0:12:C6:B9:C8:97:4C:12:15:2B
            X509v3 Authority Key Identifier:
                keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e2037353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:43:c8:a2:5c:32:44:b3:36:a7:34:fc:90:4f:19:41:a9:b9:
         97:eb:50:d8:df:e9:a8:7b:60:27:74:8f:46:90:33:86:df:ed:
         d3:dd:e0:9d:9c:64:67:75:27:1e:c4:42:2c:c9:99:88:08:55:
         c6:cc:d0:93:cc:e4:d5:f3:c5:a8:7e:55:03:a6:df:2b:84:c3:
         61:f2:32:ea:63:2f:59:67:4c:5e:82:9f:43:f6:61:dc:1e:1f:
         75:4c:7b:b4:69:5e:48:2d:ad:aa:a8:9b:de:b3:74:1f:ff:01:
         35:92:f6:cc:c5:78:a1:27:48:0a:76:2d:9f:b0:d5:97:40:e6:
         b7:b9:fc:4f:72:8c:12:70:f7:59:67:ac:a6:1d:c1:e1:5d:8c:
         13:e5:56:3c:78:99:e4:03:b1:d4:e8:04:9b:12:91:81:26:8d:
         11:0d:26:9e:fe:f4:8e:83:9f:37:08:16:bb:bf:2a:fb:41:20:
         fb:2e:3e:43:2a:fe:95:0a:28:1b:e9:53:d7:5e:2e:e6:49:c2:
         b5:50:15:6a:43:1b:e4:66:2e:75:31:04:e0:59:59:c5:74:72:
         75:3a:12:56:42:8b:18:ef:91:f2:9c:06:ae:8a:80:ca:4b:2b:
         62:55:03:28:46:bd:de:5a:a5:06:5c:00:d9:2b:cb:46:09:14:
         51:84:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:02 2026 by rpki-client