Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/3231312e37392e3136302e302f31392d3139203d3e2034373832.roa
File:                     3231312e37392e3136302e302f31392d3139203d3e2034373832.roa (raw, json)
Hash identifier:          1/SOl/bxT6+nXe2zhXDM2dmH5RkEj7//86PgvjmPKFQ=
Subject key identifier:   D8:BD:1D:45:BF:A2:15:01:74:81:1F:FA:78:8A:B6:81:E8:8B:E1:9A
Certificate issuer:       /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
Certificate serial:       268AEA778D9CCAE1FE26C26570B4958AF82B72A6
Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GSN/0/3231312e37392e3136302e302f31392d3139203d3e2034373832.roa
Signing time:             Mon 11 May 2026 16:45:59 +0000
ROA not before:           Mon 11 May 2026 16:40:59 +0000
ROA not after:            Mon 10 May 2027 16:45:59 +0000
asID:                     4782
IP address blocks:        211.79.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl
                          rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8a:ea:77:8d:9c:ca:e1:fe:26:c2:65:70:b4:95:8a:f8:2b:72:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351
        Validity
            Not Before: May 11 16:40:59 2026 GMT
            Not After : May 10 16:45:59 2027 GMT
        Subject: CN=D8BD1D45BFA2150174811FFA788AB681E88BE19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:65:0e:66:03:a9:42:4c:45:f1:6c:13:0b:49:
                    40:e5:bd:8a:58:4b:47:e9:f5:a7:a3:88:62:65:85:
                    96:5c:11:49:70:66:34:2b:89:12:96:13:7a:9f:2e:
                    ee:e6:e5:0a:b9:93:04:60:24:1f:9f:64:95:39:ae:
                    02:e2:60:ef:ee:cd:b1:4b:4d:ae:88:24:69:9b:64:
                    fb:7f:6b:f9:29:a8:ee:2e:ef:2d:8c:41:85:7b:b3:
                    46:f0:e8:9b:45:75:a9:9f:80:a4:c1:9b:55:02:65:
                    bf:c9:c9:7d:78:44:b2:d8:f4:43:f0:43:fc:4c:1a:
                    c8:2a:d2:d6:45:ca:5d:88:fe:2c:c8:24:c1:fc:1c:
                    d7:04:86:79:db:aa:f9:d9:f2:2c:71:67:b9:23:9b:
                    dd:59:43:7d:d0:a9:1a:13:0c:f1:ef:fc:8f:2d:d7:
                    8f:b8:43:35:83:53:4a:c6:0e:1a:56:54:5a:fe:88:
                    70:e1:81:06:0f:c8:a8:a9:54:f9:c9:fd:6b:7f:f5:
                    09:12:b1:d1:57:e9:2a:9d:66:8f:62:3d:82:75:2b:
                    c0:2a:e1:76:75:7b:bd:4e:13:74:f5:ed:ac:24:cb:
                    50:ed:96:58:0d:91:8a:14:53:29:f9:40:37:01:a6:
                    28:bf:b2:f3:24:54:1a:a1:33:00:33:08:75:cf:94:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BD:1D:45:BF:A2:15:01:74:81:1F:FA:78:8A:B6:81:E8:8B:E1:9A
            X509v3 Authority Key Identifier:
                keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/3231312e37392e3136302e302f31392d3139203d3e2034373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:44:8e:92:c3:63:c9:a2:07:21:b0:0b:a2:07:77:d1:07:b6:
         f0:b6:2d:c7:73:28:be:aa:c4:17:75:70:7d:51:57:2f:ff:e2:
         fd:94:31:3e:7a:c1:52:18:aa:58:76:fc:45:f2:7d:2c:1f:d8:
         dd:8a:96:d8:6b:40:82:e2:6f:a5:8c:da:48:2c:be:c7:07:50:
         a7:be:2b:f6:0e:fe:97:4b:3a:f5:5d:b8:2f:62:31:50:5f:f1:
         63:44:1d:99:02:69:1d:3a:16:87:63:18:fc:69:58:12:9f:46:
         e6:31:f4:d9:08:24:49:10:b7:e4:12:2a:59:45:23:b6:89:b6:
         3f:e9:26:08:6c:92:19:dc:c8:26:4c:f3:43:c6:7c:82:73:f9:
         80:3b:9c:92:26:48:fb:e8:11:50:08:1d:c8:22:57:b2:01:56:
         6a:40:23:4b:3d:9f:ed:4c:85:6a:28:43:d5:77:48:7d:cf:b3:
         55:d8:28:76:6b:c5:41:19:b1:d7:c9:97:9b:66:a5:a3:1c:d8:
         be:c7:1a:9b:1c:3d:3d:b6:12:e3:79:ef:58:11:00:35:50:00:
         ee:ce:62:09:46:1a:66:98:cb:55:0e:06:1b:d7:32:71:32:d9:
         89:88:15:0f:f3:56:34:1e:85:b8:d6:e0:d2:ca:49:3a:fd:24:
         a3:64:72:df
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUJorqd42cyuH+JsJlcLSVivgrcqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2
QUZEQzM1MTAeFw0yNjA1MTExNjQwNTlaFw0yNzA1MTAxNjQ1NTlaMDMxMTAvBgNV
BAMTKEQ4QkQxRDQ1QkZBMjE1MDE3NDgxMUZGQTc4OEFCNjgxRTg4QkUxOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKZQ5mA6lCTEXxbBMLSUDlvYpY
S0fp9aejiGJlhZZcEUlwZjQriRKWE3qfLu7m5Qq5kwRgJB+fZJU5rgLiYO/uzbFL
Ta6IJGmbZPt/a/kpqO4u7y2MQYV7s0bw6JtFdamfgKTBm1UCZb/JyX14RLLY9EPw
Q/xMGsgq0tZFyl2I/izIJMH8HNcEhnnbqvnZ8ixxZ7kjm91ZQ33QqRoTDPHv/I8t
14+4QzWDU0rGDhpWVFr+iHDhgQYPyKipVPnJ/Wt/9QkSsdFX6SqdZo9iPYJ1K8Aq
4XZ1e71OE3T17awky1DtllgNkYoUUyn5QDcBpii/svMkVBqhMwAzCHXPlAwFAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQU2L0dRb+iFQF0gR/6eIq2geiL4ZowHwYDVR0j
BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv
QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE
MDZBRkRDMzUxLmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvMzIzMTMxMmUzNzM5MmUzMTM2
MzAyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM3MzgzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNP
oDANBgkqhkiG9w0BAQsFAAOCAQEARkSOksNjyaIHIbALogd30Qe28LYtx3MovqrE
F3VwfVFXL//i/ZQxPnrBUhiqWHb8RfJ9LB/Y3YqW2GtAguJvpYzaSCy+xwdQp74r
9g7+l0s69V24L2IxUF/xY0QdmQJpHToWh2MY/GlYEp9G5jH02QgkSRC35BIqWUUj
tom2P+kmCGySGdzIJkzzQ8Z8gnP5gDuckiZI++gRUAgdyCJXsgFWakAjSz2f7UyF
aihD1XdIfc+zVdgodmvFQRmx18mXm2aloxzYvscamxw9PbYS43nvWBEANVAA7s5i
CUYaZpjLVQ4GG9cycTLZiYgVD/NWNB6FuNbg0spJOv0ko2Ry3w==
-----END CERTIFICATE-----
Generated at Wed May 13 21:48:40 2026 by rpki-client