Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/EASPNET/0/3230322e3136382e3139322e302f32302d3234203d3e203130313335.roa
File:                     3230322e3136382e3139322e302f32302d3234203d3e203130313335.roa (raw, json)
Hash identifier:          5Plc2vJqBG/x4tWys5cjLeyBGMdcqP++DqVZj92Uh2E=
Subject key identifier:   88:AA:63:50:5A:66:C2:8C:8D:EA:23:23:05:34:BB:31:5A:67:CF:64
Certificate issuer:       /CN=26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B
Certificate serial:       7CBF6F3F27A9A76DF5E7F52EF12A7A0479AD52B3
Authority key identifier: 26:AF:7E:02:E7:E3:AA:97:EA:8F:02:F7:FA:0A:3B:DD:4C:9A:08:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EASPNET/0/3230322e3136382e3139322e302f32302d3234203d3e203130313335.roa
Signing time:             Mon 11 May 2026 16:48:56 +0000
ROA not before:           Mon 11 May 2026 16:43:56 +0000
ROA not after:            Mon 10 May 2027 16:48:56 +0000
asID:                     10135
IP address blocks:        202.168.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.crl
                          rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bf:6f:3f:27:a9:a7:6d:f5:e7:f5:2e:f1:2a:7a:04:79:ad:52:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B
        Validity
            Not Before: May 11 16:43:56 2026 GMT
            Not After : May 10 16:48:56 2027 GMT
        Subject: CN=88AA63505A66C28C8DEA23230534BB315A67CF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:75:ee:f3:e7:82:6c:b7:da:13:ca:f4:04:
                    a6:cf:85:51:b3:93:7f:f0:b6:69:f6:da:e1:dd:70:
                    fa:71:2a:29:1c:6a:a3:48:a7:29:17:5c:f2:3c:c2:
                    dc:e9:d9:34:31:a8:3d:03:77:25:42:e3:27:1e:76:
                    4e:b8:a8:9a:67:61:f5:40:4c:df:46:8e:c2:2b:f9:
                    cb:2f:4e:3d:6a:10:45:db:0b:92:d4:9c:78:e8:cb:
                    2f:9a:3b:a5:dc:be:c6:09:78:b8:9c:90:63:02:89:
                    5c:e1:31:ee:eb:c6:0b:48:5b:66:7f:b5:eb:18:81:
                    d1:62:a2:85:c3:17:61:df:4e:5b:e7:84:dd:96:ec:
                    2e:1d:88:ac:69:09:48:70:d2:08:0c:91:3d:b8:a4:
                    f1:fd:a5:4d:e4:9d:b9:04:34:48:bf:ad:bc:75:bd:
                    e6:5f:10:57:63:70:f5:ed:a6:29:91:60:8d:4d:fe:
                    9a:a8:49:26:52:7e:91:d9:d1:ce:8e:06:27:c1:e4:
                    71:82:74:73:78:ad:1d:d2:7b:82:c4:6c:67:5e:93:
                    da:a1:a0:d4:43:c4:ce:71:67:a0:17:33:a1:12:69:
                    f6:fa:2c:0a:e5:2a:c1:e6:15:a7:e5:66:66:2c:3c:
                    5b:57:d0:30:e2:8a:07:c3:23:80:f1:22:02:93:34:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AA:63:50:5A:66:C2:8C:8D:EA:23:23:05:34:BB:31:5A:67:CF:64
            X509v3 Authority Key Identifier:
                keyid:26:AF:7E:02:E7:E3:AA:97:EA:8F:02:F7:FA:0A:3B:DD:4C:9A:08:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EASPNET/0/3230322e3136382e3139322e302f32302d3234203d3e203130313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:a6:47:c1:db:9a:0f:4c:2c:54:d5:ae:95:f9:3c:a3:f0:
         d6:70:40:eb:1f:f7:7f:37:19:e2:74:3c:92:ad:0e:52:69:9a:
         e9:e3:93:d3:40:1a:b2:61:f9:cb:80:d0:76:3d:33:eb:c1:46:
         a8:51:85:04:49:c7:3c:f9:be:a9:f4:aa:54:a1:62:82:0b:b2:
         84:a1:f7:df:09:15:90:78:55:64:25:b6:f5:77:2a:ec:a8:0b:
         a0:7d:59:88:75:d7:b7:75:6b:25:b7:0a:86:88:b7:f3:fc:69:
         9e:4f:1a:03:43:5b:0d:2d:85:33:e4:a5:ef:ef:38:b7:60:78:
         4b:3c:b3:b7:d4:de:97:ce:2b:13:ad:d8:a7:45:e3:32:ec:89:
         ff:d5:bc:d8:43:86:47:35:d2:f9:6c:ba:b0:96:de:91:c3:f3:
         73:9e:89:5e:34:4a:d6:37:3c:26:5e:08:5b:ba:70:4e:4f:11:
         cf:db:b4:b4:05:de:3c:60:ba:ed:1f:38:23:82:aa:8f:75:a9:
         c6:e5:f0:c4:db:80:56:17:75:5c:63:04:63:21:b6:b9:bb:0e:
         f9:91:b9:de:13:d0:63:c1:56:fa:27:f0:b6:c6:33:95:ff:61:
         a9:59:71:e5:d6:f0:6a:ff:69:5b:5a:7a:43:6b:50:22:1d:e8:
         c5:b9:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:39 2026 by rpki-client