Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36342e302f32312d3231203d3e2039323434.roa
File:                     36312e35362e36342e302f32312d3231203d3e2039323434.roa (raw, json)
Hash identifier:          oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=
Subject key identifier:   91:9B:09:D9:27:0B:E6:E9:FB:F2:00:B1:00:19:09:0A:92:00:43:B7
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       34E8E5309C9813CD84C660FDECB9DF6451DFBC16
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36342e302f32312d3231203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:34 +0000
ROA not before:           Mon 11 May 2026 16:49:34 +0000
ROA not after:            Mon 10 May 2027 16:54:34 +0000
asID:                     9244
IP address blocks:        61.56.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e8:e5:30:9c:98:13:cd:84:c6:60:fd:ec:b9:df:64:51:df:bc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:34 2026 GMT
            Not After : May 10 16:54:34 2027 GMT
        Subject: CN=919B09D9270BE6E9FBF200B10019090A920043B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:3b:e5:7c:4e:73:3e:1a:ba:a9:d5:be:0a:
                    98:aa:fd:ce:c8:0d:3a:8d:28:29:96:1c:c9:8d:73:
                    12:17:06:64:01:02:e3:57:d1:88:fb:4b:6b:c1:ab:
                    26:1e:6d:20:de:5e:0d:82:72:07:82:77:a0:74:af:
                    b9:8b:9d:e8:4d:db:24:39:78:44:73:7c:fb:37:0e:
                    0c:11:f1:e5:58:ed:07:01:b1:6d:d5:8e:ec:66:b6:
                    89:a3:0c:46:52:e1:d3:fd:39:25:af:8e:4a:31:a0:
                    28:36:d9:86:83:62:4f:f4:9d:83:8c:06:f6:2e:21:
                    f7:bd:2a:b2:95:c7:c5:34:7d:c4:7f:f5:b9:c7:c0:
                    1b:0b:44:f5:74:5a:92:c4:e2:f7:63:a6:8e:0d:8f:
                    ba:5a:0a:51:49:f5:c7:d2:42:17:36:ad:b2:f1:7d:
                    f6:f9:02:0d:66:70:1d:a0:9a:60:45:f6:67:58:b4:
                    e4:0d:e6:3f:ee:86:f9:a2:70:fa:b2:bf:c1:7e:c1:
                    00:68:05:8e:b2:c1:a3:41:99:b2:1b:28:bd:6c:0b:
                    08:d1:a7:48:58:6a:b2:ae:5f:cf:64:74:ad:44:e0:
                    5f:46:17:f3:25:7b:89:b1:ea:e4:93:ea:b9:50:94:
                    23:88:ed:2f:10:20:5b:61:6d:20:9c:26:56:46:56:
                    ce:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:09:D9:27:0B:E6:E9:FB:F2:00:B1:00:19:09:0A:92:00:43:B7
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e36342e302f32312d3231203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:6c:50:53:9b:f5:c0:a8:49:bb:e0:3a:2f:5b:cb:a8:7b:
         2a:23:bd:c3:d7:8b:d6:90:ba:49:49:16:03:4b:02:80:b8:75:
         e4:4f:50:46:a2:f4:46:42:72:1a:20:04:f2:ec:50:c7:ad:6f:
         ea:e0:6f:62:bf:46:f7:89:ee:e2:0b:b9:ab:16:29:2c:fe:84:
         fd:b7:63:aa:79:56:7b:64:fa:94:37:33:35:5f:11:ba:ca:31:
         e2:8d:54:26:7f:2d:fc:68:37:b0:f0:1e:00:e9:d8:99:90:f3:
         1b:06:ef:3c:e5:b9:fa:f8:1e:6b:84:cb:f8:b5:4c:af:94:22:
         67:fe:d8:9a:fb:53:a8:96:76:53:8d:d6:b8:e9:8b:95:9e:02:
         da:fa:04:99:26:e7:c1:2c:e1:b7:de:9b:01:5f:32:ba:27:15:
         13:cc:74:c7:d2:dd:ac:79:18:ad:ec:ee:a1:e2:17:e4:e1:c7:
         ee:87:f9:3d:21:d9:22:ea:02:cf:63:0e:b5:b0:c0:f4:c3:51:
         ec:b3:c7:c4:a9:9f:57:c6:62:66:52:01:f6:8d:48:85:c7:ba:
         18:d9:ca:93:b8:5d:ef:ed:84:90:7f:4d:b6:e5:f6:e6:1a:d3:
         13:97:b1:b1:ed:52:93:56:a4:c6:64:b1:c4:a7:c9:f9:9b:b1:
         b9:03:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:51 2026 by rpki-client