Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3136302e302f31392d3234203d3e2039323434.roa
File:                     3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (raw, json)
Hash identifier:          Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=
Subject key identifier:   D6:7D:7E:46:15:F1:E1:34:81:BC:68:7B:D4:DE:89:71:34:C8:A7:B2
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       20B1108DE5D305520703750504A77D86B6D4FBF5
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3136302e302f31392d3234203d3e2039323434.roa
Signing time:             Mon 11 May 2026 17:32:36 +0000
ROA not before:           Mon 11 May 2026 17:27:36 +0000
ROA not after:            Mon 10 May 2027 17:32:36 +0000
asID:                     9244
IP address blocks:        113.21.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b1:10:8d:e5:d3:05:52:07:03:75:05:04:a7:7d:86:b6:d4:fb:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 17:27:36 2026 GMT
            Not After : May 10 17:32:36 2027 GMT
        Subject: CN=D67D7E4615F1E13481BC687BD4DE897134C8A7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:e3:d3:35:ba:4a:3a:55:8c:af:4e:5f:5a:
                    ba:6f:61:e3:1b:92:1b:00:ba:ca:5c:2c:bf:b1:d1:
                    d2:c0:3a:0e:74:03:4c:24:3d:7f:a6:1c:16:86:e3:
                    2e:0f:f9:ed:5c:e8:5a:4f:90:a1:cf:d4:7b:d0:ef:
                    a3:24:da:74:9a:1f:f5:5f:9b:46:4a:7a:92:e0:5f:
                    62:73:e1:ec:48:ec:6c:cf:d8:a4:5c:1e:11:26:02:
                    a8:fa:f3:7a:e2:e5:33:5b:8a:b4:8e:3f:39:0a:6f:
                    c6:5b:8f:32:29:8e:01:c4:7e:f3:ab:e7:d9:e7:b2:
                    21:a6:05:9c:10:ea:fd:39:5b:b9:f4:02:d8:4e:36:
                    b9:13:bc:67:2d:3d:8e:3e:76:05:3f:a4:99:97:40:
                    19:a4:1b:2a:1d:c4:08:0f:70:87:c0:40:6e:07:fc:
                    ca:40:b9:f4:a9:57:96:42:7c:fd:c4:6a:24:f3:cc:
                    1a:a5:55:be:70:68:64:07:5d:4f:df:a6:d4:50:8f:
                    4f:69:71:58:09:22:f1:21:35:5b:11:3e:4e:dd:28:
                    81:f4:c4:6e:1a:61:c8:37:12:9b:02:fd:0e:ae:48:
                    76:e2:4d:7d:21:62:bb:97:aa:49:bd:e3:36:04:a9:
                    b4:5d:15:65:7f:29:e4:b8:79:5b:9c:0d:0f:47:89:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:7E:46:15:F1:E1:34:81:BC:68:7B:D4:DE:89:71:34:C8:A7:B2
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3136302e302f31392d3234203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:08:24:fb:43:3b:7f:04:b8:a6:b1:1c:ed:18:29:21:cd:3d:
         d9:82:d5:61:84:44:4d:42:01:cb:16:e0:4b:cb:fb:df:cc:42:
         0f:bb:b7:18:41:6d:60:5e:0d:e5:14:36:5c:b0:f7:e6:91:6f:
         00:fc:20:58:ac:14:1b:23:39:b5:0c:06:a3:e1:7b:93:aa:4b:
         ec:a1:09:86:96:8f:16:65:f0:59:5f:75:27:25:d2:9f:74:e1:
         d7:f3:5b:de:cb:6d:26:1f:a6:18:e6:c2:03:73:79:23:e4:63:
         82:17:f9:f9:91:d0:bd:91:99:f8:73:28:e1:12:76:28:4c:7d:
         83:02:f3:62:d8:63:5e:d7:3a:b2:1c:14:2c:c0:50:5d:4e:d9:
         dd:2f:49:22:0a:1f:5b:2f:4e:28:84:be:1e:5b:c0:c2:9f:70:
         3b:ab:6b:8b:ff:13:b2:5c:12:58:34:d1:bd:12:08:8d:50:42:
         57:20:9b:b0:eb:5a:75:43:e6:1f:e5:57:0e:6f:c1:ab:e9:0d:
         4b:33:d8:52:45:22:b7:9c:30:33:d1:f3:37:90:eb:9b:6b:cc:
         7a:f3:54:a2:57:15:cd:8e:c8:73:ce:02:57:6a:91:25:5c:56:
         0b:39:2e:58:89:22:8c:96:f8:e8:a4:73:df:40:af:0e:14:8d:
         83:af:1a:87
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUILEQjeXTBVIHA3UFBKd9hrbU+/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA1MTExNzI3MzZaFw0yNzA1MTAxNzMyMzZaMDMxMTAvBgNV
BAMTKEQ2N0Q3RTQ2MTVGMUUxMzQ4MUJDNjg3QkQ0REU4OTcxMzRDOEE3QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfePTNbpKOlWMr05fWrpvYeMb
khsAuspcLL+x0dLAOg50A0wkPX+mHBaG4y4P+e1c6FpPkKHP1HvQ76Mk2nSaH/Vf
m0ZKepLgX2Jz4exI7GzP2KRcHhEmAqj683ri5TNbirSOPzkKb8ZbjzIpjgHEfvOr
59nnsiGmBZwQ6v05W7n0AthONrkTvGctPY4+dgU/pJmXQBmkGyodxAgPcIfAQG4H
/MpAufSpV5ZCfP3EaiTzzBqlVb5waGQHXU/fptRQj09pcVgJIvEhNVsRPk7dKIH0
xG4aYcg3EpsC/Q6uSHbiTX0hYruXqkm94zYEqbRdFWV/KeS4eVucDQ9HiX19AgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQU1n1+RhXx4TSBvGh71N6JcTTIp7IwHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMzEzMTMzMmUzMjMx
MmUzMTM2MzAyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzOTMyMzQzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXEVoDANBgkqhkiG9w0BAQsFAAOCAQEAPQgk+0M7fwS4prEc7RgpIc092YLV
YYRETUIByxbgS8v738xCD7u3GEFtYF4N5RQ2XLD35pFvAPwgWKwUGyM5tQwGo+F7
k6pL7KEJhpaPFmXwWV91JyXSn3Th1/Nb3sttJh+mGObCA3N5I+Rjghf5+ZHQvZGZ
+HMo4RJ2KEx9gwLzYthjXtc6shwULMBQXU7Z3S9JIgofWy9OKIS+HlvAwp9wO6tr
i/8TslwSWDTRvRIIjVBCVyCbsOtadUPmH+VXDm/Bq+kNSzPYUkUit5wwM9HzN5Dr
m2vMevNUolcVzY7Ic84CV2qRJVxWCzkuWIkijJb46KRz30CvDhSNg68ahw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:10:49 2026 by rpki-client