Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HLCATV/0/3231312e37362e38302e302f32302d3234203d3e2039363736.roa
File:                     3231312e37362e38302e302f32302d3234203d3e2039363736.roa (raw, json)
Hash identifier:          AiC/2M7/KcT6YdGXOX1G1ZVfe40bTAPtyjVWy0ffZmA=
Subject key identifier:   37:1F:6E:A3:9C:94:B0:F0:E7:13:94:4C:A0:62:95:91:CE:B4:FD:0A
Certificate issuer:       /CN=EED0E4E138A33B7827F8D6020B736557137C89A1
Certificate serial:       0DF4EAE7E758530CD7D0D2214B66AB0F9CDB77A8
Authority key identifier: EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HLCATV/0/3231312e37362e38302e302f32302d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 17:18:43 +0000
ROA not before:           Mon 11 May 2026 17:13:43 +0000
ROA not after:            Mon 10 May 2027 17:18:43 +0000
asID:                     9676
IP address blocks:        211.76.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl
                          rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f4:ea:e7:e7:58:53:0c:d7:d0:d2:21:4b:66:ab:0f:9c:db:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED0E4E138A33B7827F8D6020B736557137C89A1
        Validity
            Not Before: May 11 17:13:43 2026 GMT
            Not After : May 10 17:18:43 2027 GMT
        Subject: CN=371F6EA39C94B0F0E713944CA0629591CEB4FD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:da:3b:33:c2:80:4e:5d:dd:0f:2e:97:af:49:
                    7d:ca:6a:2d:c8:23:90:d1:d0:69:42:1d:29:d7:3c:
                    f3:83:2b:04:b0:c1:b3:22:74:43:0a:68:d5:1c:f1:
                    55:f9:be:f9:25:7c:da:d0:b8:63:f8:f4:77:4e:77:
                    a5:1b:50:56:32:0a:2e:1c:eb:14:5e:45:87:8e:5d:
                    7c:9a:4d:ae:d4:48:f6:84:46:cb:7b:44:55:31:dd:
                    e8:97:7d:e6:42:70:64:85:60:d3:e1:3d:bc:56:2a:
                    d5:f1:dc:2a:f0:41:53:26:ac:68:71:b1:ca:3d:8f:
                    37:cd:da:28:e8:af:52:fe:62:d0:95:e9:09:32:88:
                    54:8a:f6:2c:37:96:c0:98:b7:71:8b:ed:dd:8d:7e:
                    fd:9f:7d:46:5d:25:f1:0f:ab:21:9a:cc:94:b8:30:
                    29:43:ba:7f:cb:60:1a:08:43:50:aa:e9:be:6e:26:
                    bb:97:a7:52:12:cb:52:5e:f2:f0:2b:42:15:36:8a:
                    d4:30:c2:b3:fa:fd:de:4e:c6:52:e7:e4:f6:36:a0:
                    c9:f5:ff:13:c9:11:54:33:92:fb:4d:59:77:11:26:
                    f0:de:ab:f3:87:6e:f0:e6:6f:2d:57:90:53:d1:81:
                    0f:1e:07:b1:49:5f:1a:68:31:05:05:4f:6b:d0:44:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1F:6E:A3:9C:94:B0:F0:E7:13:94:4C:A0:62:95:91:CE:B4:FD:0A
            X509v3 Authority Key Identifier:
                keyid:EE:D0:E4:E1:38:A3:3B:78:27:F8:D6:02:0B:73:65:57:13:7C:89:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/EED0E4E138A33B7827F8D6020B736557137C89A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EED0E4E138A33B7827F8D6020B736557137C89A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HLCATV/0/3231312e37362e38302e302f32302d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:8c:93:90:b1:fb:dd:16:37:82:8f:de:12:fe:2b:2a:76:ca:
         4e:8a:59:fa:f7:e3:79:d6:83:e1:b4:4b:2f:0b:a6:a2:08:56:
         95:8d:63:f1:ee:91:6a:78:ce:65:1f:09:47:5a:c8:64:ce:3d:
         57:f3:4a:f1:31:ea:c6:f0:89:e1:98:5a:d4:71:9e:d7:85:0f:
         f2:12:d1:33:d2:51:87:3c:d0:12:16:be:41:22:8e:1d:7e:d9:
         54:a2:c5:e9:9e:76:d1:96:7f:37:99:25:21:a4:43:cf:9c:7d:
         de:d9:f2:2b:84:6d:6b:4c:b4:f1:08:13:f2:bd:3c:44:10:4b:
         52:aa:7e:c7:b9:da:e6:9a:b5:83:9d:63:03:2d:6f:a1:42:4d:
         a7:64:55:f3:4f:8a:3f:53:ca:0f:93:c6:59:ce:7d:d0:8c:34:
         c6:d9:e2:b7:bd:41:ea:a1:12:3b:c6:78:c6:a5:3f:62:5a:d7:
         0d:82:33:2f:22:c1:1d:89:b8:50:65:78:c4:e8:1c:12:81:1c:
         07:54:12:1a:89:26:2c:38:db:93:7b:c3:c9:c9:44:a2:6d:f2:
         55:1c:97:6a:22:74:53:e6:f8:bf:56:ed:d4:59:1d:0d:db:9e:
         e1:5b:cd:9c:a0:eb:fd:48:ee:0b:ca:9c:61:34:ff:3b:29:01:
         53:d2:85:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:38:01 2026 by rpki-client