Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3137352e302f32342d3234203d3e2039323434.roa
File:                     3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier:          whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=
Subject key identifier:   80:54:0E:99:BF:94:DE:72:7F:69:C0:10:D0:ED:B2:0D:20:42:BF:10
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       5315BE5F878C86A74BFA84C8FE270E2E77F08A09
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3137352e302f32342d3234203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:41 +0000
ROA not before:           Mon 11 May 2026 16:49:41 +0000
ROA not after:            Mon 10 May 2027 16:54:41 +0000
asID:                     9244
IP address blocks:        113.21.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:15:be:5f:87:8c:86:a7:4b:fa:84:c8:fe:27:0e:2e:77:f0:8a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:41 2026 GMT
            Not After : May 10 16:54:41 2027 GMT
        Subject: CN=80540E99BF94DE727F69C010D0EDB20D2042BF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:99:0d:25:54:29:5b:2f:89:47:57:54:a2:
                    df:6b:a4:90:7b:c5:34:0c:ca:63:71:70:d8:8a:75:
                    b2:29:cb:85:70:ac:b0:4b:b0:eb:be:00:eb:54:be:
                    05:1c:94:a3:71:a5:d0:a2:3c:50:0a:9b:db:f0:74:
                    ec:8c:06:23:6f:fe:50:e2:e5:9a:b5:52:87:43:58:
                    f1:95:73:26:1f:b1:40:25:d1:e9:0b:d2:c6:8d:b4:
                    fd:14:25:44:a5:ed:2b:8d:0a:74:a3:38:d6:14:ec:
                    73:5a:5f:84:d0:cb:93:8c:b4:5c:3f:c5:80:84:c2:
                    23:95:0b:81:fd:c4:58:e3:f2:36:e3:bf:ce:a6:b6:
                    60:08:80:c6:f7:fe:17:95:a9:47:ac:98:07:54:62:
                    4c:e5:00:9a:53:b5:97:4d:f8:f8:70:d0:4c:3a:cf:
                    1c:24:a8:5e:a7:b1:bd:d3:82:a4:6b:62:8e:d3:ec:
                    2c:7b:2f:1c:00:c1:ab:f6:4a:f2:88:56:2c:5a:6f:
                    48:40:48:36:2c:f1:4f:9e:2b:8e:25:78:0a:60:fc:
                    00:fa:80:7f:87:07:ff:28:56:a3:32:27:e0:df:36:
                    0e:2c:99:45:81:fb:f1:1f:6e:7f:ef:b6:0a:d9:45:
                    61:c4:68:66:6e:35:2c:d4:ab:a2:48:5d:0d:4a:6f:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:0E:99:BF:94:DE:72:7F:69:C0:10:D0:ED:B2:0D:20:42:BF:10
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/3131332e32312e3137352e302f32342d3234203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.21.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ca:84:bc:cc:37:15:c9:8d:d2:df:02:1e:0a:d1:2d:68:0d:
         d2:26:e1:ac:33:7a:98:52:da:1f:ba:24:07:cd:d8:08:8d:2a:
         e5:b4:53:a4:74:6d:ab:f3:72:44:7e:e4:84:8a:2d:9d:4b:1e:
         50:ee:28:90:82:8d:94:c7:af:ac:bc:9a:49:25:04:58:96:e8:
         db:1b:98:cb:27:aa:25:83:f0:e5:1c:82:c1:78:24:8a:93:2a:
         a0:75:96:1c:54:f9:d9:cd:b3:3e:10:3c:d8:65:e5:3e:82:27:
         9e:84:5a:34:76:a6:55:aa:96:93:20:48:55:13:79:96:24:60:
         bc:96:24:b9:35:93:8a:6f:c3:1e:cc:75:f0:80:01:9b:cf:49:
         23:03:8a:26:0c:6b:96:76:a1:20:03:af:58:66:f4:34:a2:89:
         c2:08:d6:ef:a5:cf:7a:fa:ea:1f:aa:0b:ba:6d:8a:cb:20:13:
         d8:f9:2b:c1:d6:17:8d:cc:ea:eb:2d:04:73:5d:64:95:95:92:
         bf:73:4f:74:e2:ff:a8:10:2a:1a:21:a6:52:c5:45:c0:85:e4:
         05:23:63:2d:b2:db:1a:ae:07:0f:25:3f:5b:2c:17:32:55:b7:
         ea:a5:96:72:0d:99:10:70:9a:5f:99:8d:96:ec:06:ef:f2:37:
         d1:cd:0c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:47 2026 by rpki-client