Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/JDA/0/3231302e37392e3135342e302f32332d3234203d3e203338313336.roa
File:                     3231302e37392e3135342e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier:          dBOQT7bQagPeeSG1nSOxtcaQ3wS6JFXvLy9ydXd5jHY=
Subject key identifier:   88:F4:55:E8:85:8A:CF:D1:2E:2A:D8:6E:F6:A7:A0:CA:A6:DE:8E:30
Certificate issuer:       /CN=3E0842CB09173FD62797099AF95D837AFF05C8C1
Certificate serial:       1E7411505AFAEE3ADCC1EF930EB9FB2279244FD3
Authority key identifier: 3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JDA/0/3231302e37392e3135342e302f32332d3234203d3e203338313336.roa
Signing time:             Mon 11 May 2026 17:32:43 +0000
ROA not before:           Mon 11 May 2026 17:27:43 +0000
ROA not after:            Mon 10 May 2027 17:32:43 +0000
asID:                     38136
IP address blocks:        210.79.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl
                          rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:74:11:50:5a:fa:ee:3a:dc:c1:ef:93:0e:b9:fb:22:79:24:4f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0842CB09173FD62797099AF95D837AFF05C8C1
        Validity
            Not Before: May 11 17:27:43 2026 GMT
            Not After : May 10 17:32:43 2027 GMT
        Subject: CN=88F455E8858ACFD12E2AD86EF6A7A0CAA6DE8E30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:47:8b:09:d2:b2:10:df:bd:bb:d5:da:89:
                    a6:34:e3:f9:2f:8c:ff:d3:7c:25:08:38:5c:05:74:
                    53:5d:7a:75:20:8e:42:c4:54:df:b6:1e:2b:91:93:
                    77:a9:7b:39:f3:ea:7b:36:d9:92:47:f9:40:ec:44:
                    11:9a:5e:16:c0:86:a1:9c:75:9d:e9:d2:b2:33:94:
                    0e:9b:08:1d:a8:87:46:95:14:f2:4e:9b:ea:98:b0:
                    73:4b:6c:1f:eb:9f:a8:7c:00:3a:af:e8:4d:46:38:
                    6f:b2:3e:02:96:0a:47:bf:3d:33:3c:9a:6f:37:f0:
                    80:44:91:1d:6b:53:b1:9c:d4:78:52:96:fa:e0:11:
                    4f:b1:7b:5e:7a:47:fa:83:1e:5b:27:7b:ae:f7:19:
                    18:a7:2a:15:7a:9b:1c:9a:10:b3:dd:b9:ac:51:f0:
                    33:d3:11:ad:55:55:d8:49:9f:f3:0d:6e:51:fe:62:
                    35:ee:48:b1:c1:3e:27:1f:93:9d:51:58:af:ee:fd:
                    bd:0a:86:b4:2c:ba:8e:14:be:1e:2b:23:e5:ba:73:
                    63:94:84:20:91:6d:4f:b2:87:c3:da:b5:a9:a9:40:
                    42:15:4f:16:47:42:3c:77:83:83:81:06:3e:b5:58:
                    df:e2:bf:49:51:81:42:e1:e8:e2:c1:2d:88:f1:4f:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:55:E8:85:8A:CF:D1:2E:2A:D8:6E:F6:A7:A0:CA:A6:DE:8E:30
            X509v3 Authority Key Identifier:
                keyid:3E:08:42:CB:09:17:3F:D6:27:97:09:9A:F9:5D:83:7A:FF:05:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3E0842CB09173FD62797099AF95D837AFF05C8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3E0842CB09173FD62797099AF95D837AFF05C8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JDA/0/3231302e37392e3135342e302f32332d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:a9:cf:ba:57:55:4e:2d:2e:ed:3a:6b:da:31:70:12:09:1a:
         c2:dc:f2:aa:84:09:98:df:03:f6:2c:e2:0b:fc:c6:6b:75:0c:
         bf:3a:83:b6:fd:9c:7d:06:8a:b7:8a:30:f6:ea:77:6e:70:e0:
         d8:bb:f8:f9:a0:7b:8f:13:74:13:37:ba:f3:b7:bd:27:ba:68:
         d6:2c:e4:fb:06:b8:77:42:82:e2:6e:c1:fa:23:66:30:2b:eb:
         38:56:e0:bc:55:ca:c5:5e:0b:21:53:d9:8b:94:2d:f8:bd:52:
         4a:e1:bb:41:93:db:bc:66:60:29:04:09:fc:73:9a:ba:71:88:
         50:dc:52:17:34:d2:c0:7e:ba:0d:dc:ab:06:62:8c:91:60:9f:
         e7:d4:ec:33:f2:b0:ef:a7:94:e9:0e:cb:5f:96:b0:f7:fb:3f:
         0b:80:d6:8d:d3:50:52:08:74:8f:d6:d7:b1:27:50:60:9a:fc:
         ba:a6:87:e7:47:33:7b:1a:8a:0d:6d:7a:0b:fc:84:12:5d:fc:
         e1:dd:c5:b5:67:df:ca:d3:0a:b4:a3:f0:6a:2e:28:75:c8:8c:
         d4:b8:b5:cf:1f:72:9f:ff:77:ef:6d:cb:5d:4c:71:90:be:79:
         eb:b6:bf:96:6d:cc:f2:eb:72:97:4a:a2:79:37:ff:c4:0d:9b:
         b4:de:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:47 2026 by rpki-client