Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/JGZ/0/3138302e39342e33302e302f32332d3233203d3e203139353531.roa
File:                     3138302e39342e33302e302f32332d3233203d3e203139353531.roa (raw, json)
Hash identifier:          1dGSwf6J4VcyADpI0W1MqTQLF5KD5bTH4vYg7j9oZjM=
Subject key identifier:   98:16:20:35:41:2B:28:73:72:37:62:D3:CB:97:52:3C:26:29:16:CF
Certificate issuer:       /CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
Certificate serial:       7A06DD470DCEBA82D52D0588F10C217BC9C95D92
Authority key identifier: 71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JGZ/0/3138302e39342e33302e302f32332d3233203d3e203139353531.roa
Signing time:             Mon 11 May 2026 17:39:50 +0000
ROA not before:           Mon 11 May 2026 17:34:50 +0000
ROA not after:            Mon 10 May 2027 17:39:50 +0000
asID:                     19551
IP address blocks:        180.94.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl
                          rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:06:dd:47:0d:ce:ba:82:d5:2d:05:88:f1:0c:21:7b:c9:c9:5d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7198602C0FFFDBCD1689380B05AC4CD694FAF839
        Validity
            Not Before: May 11 17:34:50 2026 GMT
            Not After : May 10 17:39:50 2027 GMT
        Subject: CN=98162035412B2873723762D3CB97523C262916CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:87:70:4d:7f:d5:b2:db:8b:83:6a:d1:40:
                    51:27:cb:89:17:51:78:33:d4:91:9d:a0:3a:51:af:
                    ac:1f:1b:d8:b9:11:fd:e5:be:04:c9:5b:54:bd:14:
                    57:98:f4:86:f4:10:1a:c8:a2:78:65:38:31:c7:97:
                    cc:c3:f7:71:de:ae:b4:78:8b:1d:35:0d:46:8a:79:
                    ab:d7:b5:f3:95:16:2b:bb:36:01:f7:36:e7:56:fe:
                    84:8b:2c:8e:f9:d0:6a:2a:90:a0:2a:cb:9a:16:b0:
                    ce:ca:5e:47:b3:80:26:b0:07:f8:61:90:5d:44:8b:
                    79:71:c9:a3:07:5b:61:11:ca:87:42:63:37:f2:4d:
                    5a:d7:92:7c:a3:0b:40:52:71:a4:66:c5:97:c8:a8:
                    60:5b:ad:a3:6a:2c:35:ca:92:41:92:5e:a2:7e:85:
                    de:1c:7a:30:9c:16:95:a6:03:74:6d:2a:8c:7c:fa:
                    9e:ca:4f:36:e5:41:96:94:d5:67:67:4d:a1:ce:50:
                    1e:04:bb:83:14:47:93:eb:79:42:89:a3:5a:d6:d9:
                    2a:d7:6f:0a:29:1a:8f:3d:26:83:7a:aa:ee:1a:9b:
                    9c:81:b5:2b:85:16:e3:09:7c:26:cf:2a:1e:58:9f:
                    35:5c:2d:50:f2:9f:a3:6d:2b:b5:1e:b0:b7:c7:20:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:20:35:41:2B:28:73:72:37:62:D3:CB:97:52:3C:26:29:16:CF
            X509v3 Authority Key Identifier:
                keyid:71:98:60:2C:0F:FF:DB:CD:16:89:38:0B:05:AC:4C:D6:94:FA:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/7198602C0FFFDBCD1689380B05AC4CD694FAF839.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7198602C0FFFDBCD1689380B05AC4CD694FAF839.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JGZ/0/3138302e39342e33302e302f32332d3233203d3e203139353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:88:24:18:50:93:05:0d:8a:1d:8b:fc:98:3f:17:39:62:9d:
         a2:bc:c0:9c:53:f2:73:8a:6b:f1:1f:0f:3a:a8:6d:e6:2b:ae:
         d6:40:fd:31:e8:9a:8a:22:99:32:28:59:41:58:77:80:56:0c:
         a4:b7:14:47:2b:27:25:8f:3f:5b:cc:3e:7d:9e:e6:21:bd:e2:
         c0:57:aa:c9:33:43:35:7b:42:b8:56:67:d2:37:d3:0f:2b:81:
         dd:40:e9:d0:88:8a:3e:e0:0f:6e:26:9b:2a:a3:bc:75:65:86:
         20:91:8b:06:5f:5f:ac:80:33:77:90:40:8d:c1:59:b6:bf:e3:
         da:7d:bf:53:da:0b:f5:80:89:45:c7:9a:4d:4b:00:75:c3:84:
         4e:52:70:8c:56:d5:a4:1c:68:9d:4f:d5:3a:23:62:c2:75:d6:
         cc:1f:71:1d:3a:d4:36:43:0c:34:de:91:36:6a:36:7b:2b:16:
         8b:97:2c:ab:d0:eb:da:2d:45:72:98:c0:f1:96:a8:33:d5:ae:
         ae:f1:93:46:9d:b3:0a:c3:62:7d:f7:4d:e3:32:99:d2:1b:76:
         01:9e:55:a7:68:9c:1f:7d:41:25:0e:53:d1:e6:b7:31:e1:a2:
         80:da:b6:b5:6b:f4:1d:c8:fb:28:75:c0:85:44:00:a1:da:2d:
         8e:e1:6a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:07 2026 by rpki-client