Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3136302e302f32302d3230203d3e2039323434.roa
File:                     3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (raw, json)
Hash identifier:          zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=
Subject key identifier:   49:49:0E:68:CF:BC:9E:E9:8E:90:5F:7D:3C:C0:29:99:8F:E6:0F:7F
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       44A70BEAE016BD934888B23EC74E08D98ADD0933
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3136302e302f32302d3230203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:39 +0000
ROA not before:           Mon 11 May 2026 16:49:39 +0000
ROA not after:            Mon 10 May 2027 16:54:39 +0000
asID:                     9244
IP address blocks:        113.21.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a7:0b:ea:e0:16:bd:93:48:88:b2:3e:c7:4e:08:d9:8a:dd:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:39 2026 GMT
            Not After : May 10 16:54:39 2027 GMT
        Subject: CN=49490E68CFBC9EE98E905F7D3CC029998FE60F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bb:cd:f2:de:01:33:54:9d:49:73:fd:f5:0d:
                    e5:e7:09:02:a6:ef:ed:43:db:ca:80:b6:88:80:cb:
                    7d:6a:26:1f:40:a9:16:3e:7c:4f:33:65:f8:15:be:
                    92:cf:8e:50:f4:4f:00:bf:34:91:8b:d1:9c:a1:53:
                    76:4e:17:57:39:b7:cd:b0:10:d8:b2:1e:18:fa:c3:
                    df:d2:ff:99:6d:53:69:61:fb:7b:31:f8:b8:a9:1c:
                    03:f2:ec:0c:32:d4:10:6a:a7:ba:66:96:74:f2:eb:
                    d1:06:bb:5b:37:fe:f0:04:6f:61:cf:b5:c2:d8:95:
                    e3:2c:9c:0e:76:49:35:0d:85:01:46:11:cb:e2:29:
                    d8:fb:38:95:fd:17:c3:d4:1c:3e:23:d5:ba:20:6c:
                    c0:d1:b8:38:37:96:b7:43:9d:01:f9:a8:d5:e1:27:
                    a0:10:54:11:45:91:22:32:06:ca:44:d5:48:ab:43:
                    c7:80:f4:3b:6d:cd:8e:8a:b4:fa:8e:e1:ad:97:50:
                    b8:95:5e:cf:5a:e0:5c:62:98:1e:1c:0a:db:2c:16:
                    9f:6b:cc:fb:25:2d:05:91:80:11:ab:07:eb:b4:1f:
                    98:9e:fb:56:6d:d4:9f:66:25:a2:4a:b3:00:c7:9d:
                    77:81:1f:e7:db:0f:35:d4:1d:59:3e:74:70:ec:1a:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:49:0E:68:CF:BC:9E:E9:8E:90:5F:7D:3C:C0:29:99:8F:E6:0F:7F
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3136302e302f32302d3230203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:32:d6:cd:e0:90:66:45:ee:50:55:7d:0b:71:f6:5b:06:
         7f:11:12:43:df:71:60:ff:7d:ae:d7:c8:ab:81:fd:e6:a4:06:
         34:d2:8b:66:84:06:bb:55:4d:75:e8:9c:5c:30:d7:21:17:07:
         2f:52:12:74:14:90:ec:ad:99:07:5a:e4:75:99:bf:3f:2e:7b:
         3e:75:e4:71:dc:31:d0:d7:0d:49:d0:0e:17:28:52:9c:12:ca:
         c4:e8:fd:0e:95:e1:24:07:37:41:35:a5:50:16:12:2c:c3:d3:
         27:3f:30:19:df:78:cf:f6:83:55:1b:9d:a1:f9:b8:3a:55:9f:
         bb:4c:08:43:b4:1f:7f:95:04:6f:a3:ac:52:f9:2a:30:88:0c:
         65:7b:cc:a8:e7:d0:f5:ef:e5:e7:35:bc:55:b7:ef:a1:f6:45:
         f4:31:96:da:c2:b7:e4:c1:21:2b:9b:1d:4d:52:05:63:82:c1:
         4f:0e:04:42:24:85:fb:67:9e:24:b7:62:59:17:79:f5:d0:d3:
         eb:fd:94:29:52:b3:1a:f5:99:d5:5c:4c:0c:69:a9:df:2a:b1:
         b7:3e:29:96:19:d0:7d:b7:47:37:14:28:0e:0e:9b:6c:4a:c6:
         c8:31:8e:69:bc:40:b1:dc:51:e2:80:3a:44:7c:9e:02:f3:98:
         13:8b:01:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:52 2026 by rpki-client