Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31382e302f32342d3234203d3e203138343131.roa
File:                     36312e35362e31382e302f32342d3234203d3e203138343131.roa (raw, json)
Hash identifier:          gjwd7BV9O1873cFPhEXU/7D/wbFE9dSEUv4zzhFHYw8=
Subject key identifier:   DE:A9:D0:BE:E6:80:90:51:E8:BF:95:9A:17:00:29:0C:47:83:F8:7C
Certificate issuer:       /CN=D31DE8192962A403BB6809455D9C0776F79CC527
Certificate serial:       432D106BA6527D0CD979F9425B2855965B31639B
Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31382e302f32342d3234203d3e203138343131.roa
Signing time:             Mon 11 May 2026 17:10:15 +0000
ROA not before:           Mon 11 May 2026 17:05:15 +0000
ROA not after:            Mon 10 May 2027 17:10:15 +0000
asID:                     18411
IP address blocks:        61.56.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl
                          rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2d:10:6b:a6:52:7d:0c:d9:79:f9:42:5b:28:55:96:5b:31:63:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527
        Validity
            Not Before: May 11 17:05:15 2026 GMT
            Not After : May 10 17:10:15 2027 GMT
        Subject: CN=DEA9D0BEE6809051E8BF959A1700290C4783F87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:52:d5:e7:2f:a4:42:fe:2b:3d:9a:74:90:
                    6e:60:4f:b4:03:bd:1f:09:4c:4a:31:70:36:c9:68:
                    d1:dd:df:87:cd:cb:15:c9:fc:24:fb:63:ca:59:88:
                    a0:0a:dc:aa:91:ac:d2:30:ad:4f:b3:c9:0a:9b:d6:
                    31:92:ad:94:ed:60:94:2c:26:33:e7:af:c3:68:84:
                    0f:4b:95:be:e4:93:73:a1:a4:d2:e6:80:42:85:6c:
                    e9:9f:75:3f:46:45:d6:b7:d6:31:41:a5:a8:dc:c0:
                    36:49:04:75:de:5e:a5:f3:f4:47:cc:a5:b7:c6:84:
                    72:e9:12:df:7c:1d:c7:55:37:24:ad:ff:dc:dd:0a:
                    71:43:8b:55:90:99:b6:b4:87:b9:82:cf:38:bf:7f:
                    60:a5:a7:91:9b:0a:2d:7a:23:fc:72:b6:b3:33:f9:
                    59:7c:cd:22:5c:75:10:44:89:5d:f2:37:0b:f9:e5:
                    83:bf:2d:8a:18:bf:26:7c:7b:48:7f:5e:08:f7:02:
                    05:1c:6e:03:a4:67:48:f4:9d:fc:cd:eb:b2:ed:08:
                    5d:3a:9c:0b:d2:95:2c:05:cd:0a:6e:f9:b1:e6:bd:
                    df:75:26:18:b6:5b:91:be:a8:7d:4e:24:bd:51:6f:
                    00:9e:8e:86:cd:53:92:9a:cf:ff:10:78:cb:b2:da:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A9:D0:BE:E6:80:90:51:E8:BF:95:9A:17:00:29:0C:47:83:F8:7C
            X509v3 Authority Key Identifier:
                keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31382e302f32342d3234203d3e203138343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.56.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:95:72:0c:e4:16:77:33:46:4c:1d:5f:07:b9:52:ff:ea:6e:
         6b:c0:cd:50:19:f7:00:9c:eb:c2:0d:a3:b1:ce:36:e5:10:c2:
         44:30:88:14:ed:55:ca:43:74:78:ac:c5:f1:dc:86:4e:3e:85:
         5f:38:6a:5e:d0:6e:2d:a4:7a:02:ef:90:b2:3b:75:24:f7:b1:
         79:34:63:10:50:2f:a0:ba:f6:ed:87:a0:68:59:e6:b7:94:23:
         42:c4:42:c0:3c:47:d0:d1:dc:a3:03:f9:a0:0a:f6:51:73:cd:
         cf:31:19:2b:18:5e:3a:9b:14:99:02:d5:cd:06:a8:2b:7b:f4:
         7f:3c:1e:6a:f9:ef:fd:93:99:b1:88:b0:4b:77:55:46:53:92:
         fc:4b:e5:c2:b1:f0:c8:54:bf:66:37:7d:f9:31:e4:82:5b:c8:
         18:32:46:af:7e:da:94:8c:20:d8:bd:91:73:fc:a9:6b:1d:ff:
         d2:65:68:d5:34:23:b9:e8:40:ac:a3:d6:02:18:e4:f8:a2:4c:
         12:1a:b5:dc:ec:2e:f0:ae:e1:ab:24:1d:ae:df:9b:10:73:0c:
         2b:f4:f0:cc:cf:0e:84:d9:07:73:1c:f2:d1:0b:29:31:8a:bd:
         35:5e:e6:b6:13:8b:cb:f8:04:72:67:1c:83:71:38:cc:7d:cb:
         11:de:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:24 2026 by rpki-client