Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20313937353337.roa
File:                     3136322e342e3233372e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          1bHqJJ3DE9NMijQ59MuD8OFFyw3UfsZ36yCMVQaeUME=
Subject key identifier:   18:B1:24:8D:6D:F4:81:74:ED:40:87:92:A9:16:E3:7B:40:E7:F4:1B
Certificate issuer:       /CN=4DC8A0E80696AD1A2419ACE881334BE812506228
Certificate serial:       146023B967088D66B06B1D3C0E2D6B96ECBD625A
Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20313937353337.roa
Signing time:             Tue 16 Jun 2026 07:23:49 +0000
ROA not before:           Tue 16 Jun 2026 07:18:49 +0000
ROA not after:            Tue 15 Jun 2027 07:23:49 +0000
asID:                     197537
IP address blocks:        162.4.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl
                          rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 11:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:60:23:b9:67:08:8d:66:b0:6b:1d:3c:0e:2d:6b:96:ec:bd:62:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228
        Validity
            Not Before: Jun 16 07:18:49 2026 GMT
            Not After : Jun 15 07:23:49 2027 GMT
        Subject: CN=18B1248D6DF48174ED408792A916E37B40E7F41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:09:b7:c9:6d:b3:13:9c:34:bc:50:5f:13:
                    79:ad:d6:52:0f:b2:c7:07:ea:a8:54:e8:0a:b1:10:
                    9c:05:c7:4d:91:1b:d7:39:d4:6f:f1:a7:b1:6d:fb:
                    45:56:69:d5:9c:61:66:fc:02:cf:38:13:06:99:e2:
                    47:f7:a5:e6:41:f0:9b:74:24:b9:fe:ae:b4:09:29:
                    42:bd:d2:c3:18:84:f4:7c:cc:aa:ea:9d:c3:b8:07:
                    40:4f:40:84:94:22:57:1f:81:cb:20:84:ed:5a:02:
                    30:4f:4c:12:04:db:05:08:16:44:94:64:16:46:de:
                    76:48:f3:59:ed:d1:dc:5d:0f:1f:6c:ff:a1:67:4c:
                    3b:c0:e1:0b:d7:0e:55:7d:b2:66:d3:7c:7f:46:bd:
                    47:75:d2:50:f6:f3:61:19:6b:26:39:13:b0:6d:f6:
                    de:fa:9f:b3:f0:b2:e3:28:82:f3:f4:3a:a3:54:0f:
                    f2:9f:da:bf:38:cb:14:8a:7e:7b:64:f0:fb:32:f0:
                    e9:f4:c4:56:53:36:68:c2:12:ac:c7:d9:d4:f7:fa:
                    e0:7a:d5:83:f4:45:3c:4a:bf:df:76:f6:48:b8:8f:
                    fa:6a:3e:0e:36:4a:a5:a8:85:84:de:05:de:3e:31:
                    11:9d:8e:d3:68:f4:89:08:4f:37:44:dd:79:62:75:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:24:8D:6D:F4:81:74:ED:40:87:92:A9:16:E3:7B:40:E7:F4:1B
            X509v3 Authority Key Identifier:
                keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d9:16:a7:2b:90:04:d5:e7:fc:fb:1e:e6:9f:d4:6a:9b:3b:
         87:4a:9d:21:58:b1:ad:c8:a0:79:e7:20:25:15:0b:fa:76:be:
         03:4f:33:ca:4d:29:d1:bd:d5:e6:27:ac:75:1e:20:06:9c:cc:
         42:9e:8f:b9:b0:a9:13:52:f3:70:25:ce:c1:6e:b0:c6:40:80:
         50:80:0c:7f:e5:8f:2c:56:e1:27:19:7b:d3:90:4f:65:4c:b1:
         3b:fe:b0:ee:40:0c:e8:6d:b0:27:e2:a1:ed:cb:1e:0d:eb:a4:
         69:8e:fe:c4:56:e4:96:86:72:3e:e4:e5:71:36:1f:bd:78:16:
         ca:b1:e0:17:7e:a2:c9:bf:b7:01:cc:fa:f9:21:94:e5:7d:b4:
         0b:d6:9d:65:27:48:88:9c:c0:bc:8e:a4:b7:b0:09:c9:26:c1:
         b0:43:41:f3:61:e4:d5:21:55:c3:a1:de:d2:e4:59:61:da:fd:
         77:51:60:ee:72:1a:1c:50:78:cf:a2:51:70:46:0b:31:73:51:
         d7:24:2a:ee:06:9e:08:12:ad:9d:c0:10:7f:83:74:e3:28:ab:
         ef:56:a3:b9:cd:34:d2:15:04:e0:cf:21:c9:f1:fd:44:30:30:
         7d:b6:19:d9:85:e4:8e:c5:be:d2:4f:7d:50:51:99:eb:3a:d1:
         1f:bd:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 19:53:52 2026 by rpki-client