Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FLOPPY/0/3230332e39392e3134372e302f32342d3234203d3e20313530373536.roa
File:                     3230332e39392e3134372e302f32342d3234203d3e20313530373536.roa (raw, json)
Hash identifier:          kBqzHoM9yVuaeAKWj85ztpSA5nEMtL1hcA1SNhlfG4A=
Subject key identifier:   F7:F5:30:1B:16:0F:A3:BA:C7:9A:D8:0A:85:7D:C9:D0:7B:A4:28:A9
Certificate issuer:       /CN=50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93
Certificate serial:       22A31053C8CBFD7B385097D01E92B6A8BA091F75
Authority key identifier: 50:A5:85:8B:F7:6C:23:B2:BE:C3:AD:C7:4D:B8:B3:40:1C:A3:ED:93
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FLOPPY/0/3230332e39392e3134372e302f32342d3234203d3e20313530373536.roa
Signing time:             Mon 11 May 2026 17:40:11 +0000
ROA not before:           Mon 11 May 2026 17:35:11 +0000
ROA not after:            Mon 10 May 2027 17:40:11 +0000
asID:                     150756
IP address blocks:        203.99.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.crl
                          rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a3:10:53:c8:cb:fd:7b:38:50:97:d0:1e:92:b6:a8:ba:09:1f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93
        Validity
            Not Before: May 11 17:35:11 2026 GMT
            Not After : May 10 17:40:11 2027 GMT
        Subject: CN=F7F5301B160FA3BAC79AD80A857DC9D07BA428A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:99:1e:a0:2e:26:bd:97:65:6e:a2:06:74:
                    fe:bc:11:80:e5:f7:6e:75:1f:48:58:13:32:78:8f:
                    a1:e2:a7:65:8e:eb:40:53:5e:eb:ba:85:03:95:3b:
                    7f:82:97:b4:a3:89:d6:d7:73:cf:14:d8:10:4f:a9:
                    13:24:d2:70:b8:0b:b7:c7:df:ff:a2:08:af:ee:03:
                    82:61:95:25:1e:47:96:8e:9d:eb:de:64:18:a6:dd:
                    99:94:ae:f7:99:d1:c6:a0:e8:1c:11:31:72:a1:22:
                    f4:07:76:16:73:20:02:74:e3:4e:c1:81:8b:c3:b3:
                    2b:87:62:10:2c:5f:0d:de:60:46:23:d9:a0:5c:7d:
                    f6:56:40:65:b6:80:2a:8b:63:e2:f5:b8:93:31:4e:
                    fe:9f:50:b6:8e:9c:13:ff:74:4d:da:f0:aa:4f:23:
                    ae:13:26:2f:59:94:f1:b3:14:82:1f:db:31:24:9a:
                    32:7a:4b:2f:b5:ba:18:7b:4d:fc:d1:03:70:7f:bc:
                    2b:f4:ee:70:4c:97:49:63:d4:a3:2b:b0:e9:c1:d8:
                    42:44:e2:d2:cf:20:31:dc:aa:fd:55:03:7d:1f:6d:
                    9b:f7:7e:1a:12:b1:97:f6:06:fc:79:17:6e:88:1a:
                    da:99:ad:13:86:da:93:59:4f:07:87:eb:80:88:a0:
                    c0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:30:1B:16:0F:A3:BA:C7:9A:D8:0A:85:7D:C9:D0:7B:A4:28:A9
            X509v3 Authority Key Identifier:
                keyid:50:A5:85:8B:F7:6C:23:B2:BE:C3:AD:C7:4D:B8:B3:40:1C:A3:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FLOPPY/0/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/50A5858BF76C23B2BEC3ADC74DB8B3401CA3ED93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FLOPPY/0/3230332e39392e3134372e302f32342d3234203d3e20313530373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:41:9c:3a:17:14:e5:6b:a7:20:ea:78:f5:ca:7e:83:10:dd:
         f2:0d:45:9d:24:c7:11:ff:ba:15:09:fc:89:22:a5:66:54:b7:
         21:72:7d:76:a7:9d:dc:e7:87:57:b9:cd:b7:c4:28:d8:9f:56:
         d3:3c:b9:e2:03:ce:c2:47:f3:7d:03:4f:bb:86:c2:67:ac:0e:
         f7:0e:5e:5b:3b:3b:89:b2:af:65:e2:f0:56:ff:60:bb:b3:e0:
         da:2e:2f:cd:bd:e6:c2:55:5b:88:ef:f5:78:d4:93:0e:a1:33:
         a6:8a:13:c4:20:ae:2b:45:24:54:b0:02:a3:a7:47:db:a4:15:
         97:b3:1e:0f:97:b6:7f:9b:b8:64:1f:92:56:cf:6f:d9:57:6f:
         e8:90:a0:3c:a7:2a:01:56:94:48:f4:b6:7a:5b:a8:d3:ab:8c:
         1e:53:7c:df:2e:96:31:8b:33:d8:28:4c:fe:f0:48:a5:75:14:
         46:f1:a3:a8:de:fd:11:5a:79:93:5b:fe:c3:b4:9f:34:73:bf:
         3a:27:1b:e9:5f:93:0b:4d:bd:46:d3:39:b8:61:d4:28:50:1b:
         98:a2:3c:af:50:ab:aa:ac:a9:5c:60:2d:f4:37:ee:8e:99:79:
         77:f4:d1:98:e0:c8:fe:6e:f7:cb:08:3e:00:9c:0f:f3:b5:a4:
         3b:21:9d:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:51:57 2026 by rpki-client