Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38362e302f32342d3234203d3e2039323434.roa
File:                     36312e35362e38362e302f32342d3234203d3e2039323434.roa (raw, json)
Hash identifier:          DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=
Subject key identifier:   E5:72:C6:07:E3:1C:EB:1E:F0:0D:9C:62:65:04:ED:95:4A:E2:FC:F7
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       3FF2C44F5E23B6F67D1BCEC5F31AABC22760256D
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38362e302f32342d3234203d3e2039323434.roa
Signing time:             Mon 11 May 2026 16:54:37 +0000
ROA not before:           Mon 11 May 2026 16:49:37 +0000
ROA not after:            Mon 10 May 2027 16:54:37 +0000
asID:                     9244
IP address blocks:        61.56.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f2:c4:4f:5e:23:b6:f6:7d:1b:ce:c5:f3:1a:ab:c2:27:60:25:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: May 11 16:49:37 2026 GMT
            Not After : May 10 16:54:37 2027 GMT
        Subject: CN=E572C607E31CEB1EF00D9C626504ED954AE2FCF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:11:50:b0:f7:b6:2b:fb:5c:6b:da:06:e6:
                    bd:7d:e4:3e:fa:97:77:f4:b2:44:e0:ed:74:85:0c:
                    b1:ce:05:39:4c:6c:b4:ae:06:18:b8:08:68:c2:a9:
                    0a:55:ea:51:c3:1f:8f:65:c2:16:15:f6:03:e1:b5:
                    95:63:6a:4d:9c:61:92:11:99:6a:17:d9:96:e2:31:
                    27:a4:64:18:8c:97:09:46:7d:ea:36:2a:ed:80:a6:
                    db:04:d9:e4:53:70:88:c6:d9:da:8b:e4:bb:ea:c0:
                    11:14:ed:ea:1e:23:c1:46:62:6c:ac:6c:f0:86:b6:
                    77:9f:bf:7a:ab:b7:56:b5:9e:bd:f8:3f:f9:b6:19:
                    77:33:31:83:ae:cd:7c:5d:7e:7f:27:1b:c3:9d:f6:
                    af:9b:ab:e1:90:a1:e9:a6:0b:72:30:f8:c7:34:37:
                    1f:b9:28:95:d0:18:c3:5a:c8:ef:5c:81:f6:cc:fe:
                    51:f5:7d:96:69:90:2e:1d:f6:32:05:58:3a:44:a0:
                    6d:8f:05:e1:8f:bf:88:ec:0d:31:18:d7:78:4b:2e:
                    08:d4:9a:f7:61:49:31:3d:82:8b:1e:83:f8:86:ee:
                    7e:a6:0d:bb:24:c2:8f:4c:45:90:ff:a2:f5:0e:a3:
                    7f:54:5d:f2:2c:74:fe:a5:32:1b:6c:2d:aa:80:4f:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:72:C6:07:E3:1C:EB:1E:F0:0D:9C:62:65:04:ED:95:4A:E2:FC:F7
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/36312e35362e38362e302f32342d3234203d3e2039323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:d5:cb:2c:1c:81:39:d7:fb:97:ee:12:2a:bc:ca:98:76:
         e5:39:03:48:36:2e:00:bf:83:0d:9e:f1:de:0f:0b:5b:c7:3d:
         e1:2e:79:65:c8:98:9a:3c:26:09:a8:f9:9a:84:1b:3f:d6:56:
         6e:02:a5:82:56:b0:3f:f4:ab:d2:dd:95:89:43:99:44:41:47:
         44:88:13:72:32:0a:da:47:20:6e:84:bf:b1:6c:ba:b8:8b:2c:
         21:e8:de:95:25:89:29:b8:b2:30:01:2e:08:bd:2f:c8:7b:88:
         d5:54:38:c0:5a:d4:7e:ec:3c:9d:bf:54:e9:14:cf:67:34:42:
         a6:1f:ea:88:60:10:e8:ff:83:f2:38:62:fc:06:c9:a4:72:74:
         83:58:5f:7c:d9:0b:55:d9:23:90:77:0e:5f:8b:cf:07:c5:5c:
         fd:d8:66:bf:29:95:7a:47:f2:37:cd:7b:a1:6f:9a:dc:63:64:
         1f:30:97:3d:3b:f1:7c:50:54:d0:3c:af:63:66:ca:57:8f:79:
         e5:51:01:e5:1d:59:2f:dd:75:43:b0:92:df:a3:30:ee:83:79:
         cf:78:ac:84:23:cb:76:4c:6d:77:05:67:ea:86:b4:e3:6f:5d:
         6d:46:01:06:65:a1:04:c1:b3:50:6e:56:2d:84:a9:07:1e:29:
         83:8a:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:50 2026 by rpki-client