Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323032373336.roa
File:                     3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          dfD2OtCiIrSPgIlzeqY7nYIoRL0d0Rm5WuZ+VoPuEIc=
Subject key identifier:   D0:50:BA:CA:10:29:18:9B:FC:44:6B:95:50:99:7B:A2:E1:67:33:E3
Certificate issuer:       /CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Certificate serial:       573C80DF7FC3359CE8F78C820236217C53B66BA1
Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323032373336.roa
Signing time:             Tue 16 Jun 2026 07:23:50 +0000
ROA not before:           Tue 16 Jun 2026 07:18:50 +0000
ROA not after:            Tue 15 Jun 2027 07:23:50 +0000
asID:                     202736
IP address blocks:        162.4.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
                          rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 11:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3c:80:df:7f:c3:35:9c:e8:f7:8c:82:02:36:21:7c:53:b6:6b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228
        Validity
            Not Before: Jun 16 07:18:50 2026 GMT
            Not After : Jun 15 07:23:50 2027 GMT
        Subject: CN=D050BACA1029189BFC446B9550997BA2E16733E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f8:ed:17:0f:ac:0b:4c:5c:57:ee:2d:44:1b:
                    a7:32:37:a7:35:09:17:85:a7:d8:07:dc:67:72:87:
                    d6:6a:b4:f1:00:33:14:08:f6:3a:56:a6:ea:83:07:
                    1b:f4:a9:d5:62:20:65:6b:45:fe:f3:ee:b5:52:36:
                    64:a1:47:9c:30:77:02:d0:07:97:4d:0a:a1:db:32:
                    e8:9a:de:ad:b6:50:9c:e8:a8:82:cf:67:ce:9d:c1:
                    0d:09:8c:00:9c:58:98:49:0a:7b:6a:0e:c6:6d:ce:
                    12:34:24:16:eb:12:9a:12:9a:3e:aa:18:bb:9f:46:
                    8b:11:a7:c5:02:f5:63:62:8e:32:17:6a:88:75:87:
                    8d:0d:0f:c2:72:a6:f4:a0:94:33:76:db:d3:0d:ac:
                    96:14:fb:db:e9:bf:1e:8b:d7:54:72:ce:c6:a9:18:
                    b9:58:96:fd:78:d0:44:42:01:0e:b2:f1:f8:12:51:
                    f8:c9:08:4c:1b:54:7c:df:ac:7b:6a:d2:02:49:a9:
                    f0:ad:f7:02:d2:94:94:d5:d9:4c:36:23:5f:aa:8b:
                    d0:74:97:0c:5d:71:77:4a:8f:f3:9f:10:6c:5b:c3:
                    24:14:72:64:94:86:eb:01:69:9a:4f:49:e7:c1:80:
                    34:ea:e7:c0:54:0c:65:1a:28:c8:8a:f5:00:18:49:
                    a5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:50:BA:CA:10:29:18:9B:FC:44:6B:95:50:99:7B:A2:E1:67:33:E3
            X509v3 Authority Key Identifier:
                keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bd:23:1f:19:7c:a1:42:23:50:8d:74:1e:ce:1f:dd:af:40:
         cb:d7:c2:7f:6a:55:37:b4:0d:c9:07:69:ab:85:a6:b0:43:1d:
         06:a7:28:0a:04:2c:15:89:1e:b2:1c:76:9a:e5:3b:89:fc:39:
         7a:49:1d:6b:d7:71:b3:7b:48:5f:33:00:3e:be:30:58:70:f9:
         45:bf:6c:5b:ec:59:ee:a8:af:0b:11:45:20:70:6d:78:f2:76:
         0d:72:e8:49:a4:af:72:1a:4e:23:be:62:75:53:fd:47:2a:87:
         71:53:ca:2e:f6:f7:34:99:25:3e:a1:c0:a0:de:36:c4:3f:61:
         e8:07:8f:74:93:66:9f:3a:6b:85:ad:09:c8:60:08:57:23:5e:
         f8:73:93:f8:16:56:60:65:3b:fb:03:74:16:fb:29:58:63:51:
         01:e8:b8:4f:51:8a:16:fd:8c:fc:ae:d8:0a:61:91:20:9d:11:
         de:ea:a2:b6:97:80:63:96:85:86:d7:fb:a3:85:4d:a4:22:82:
         a8:f7:35:2a:07:53:df:67:3a:b2:ca:33:c1:8a:19:10:3f:37:
         3c:ae:41:46:7d:c8:de:0f:98:90:e2:bf:e0:8e:9a:c2:1b:4c:
         55:f2:20:a5:32:18:8d:0f:56:37:63:31:a8:e6:c5:b3:0d:a7:
         ef:4a:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:53:10 2026 by rpki-client