Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131352e34382e302f32312d3234203d3e203338383531.roa
File:                     35382e3131352e34382e302f32312d3234203d3e203338383531.roa (raw, json)
Hash identifier:          757FtIUpqt3HLb8EpEp2C2CrIdmYtddAWrLx10xuX1Q=
Subject key identifier:   E0:EC:C9:C3:EC:72:6B:DD:E9:20:48:08:DA:B9:A3:58:0B:19:9D:9D
Certificate issuer:       /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Certificate serial:       1809AB5D201CFEF35613E908AB20EEF97E2393F0
Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e34382e302f32312d3234203d3e203338383531.roa
Signing time:             Mon 22 Jun 2026 03:43:50 +0000
ROA not before:           Mon 22 Jun 2026 03:38:50 +0000
ROA not after:            Mon 21 Jun 2027 03:43:50 +0000
asID:                     38851
IP address blocks:        58.115.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl
                          rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 08:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:09:ab:5d:20:1c:fe:f3:56:13:e9:08:ab:20:ee:f9:7e:23:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
        Validity
            Not Before: Jun 22 03:38:50 2026 GMT
            Not After : Jun 21 03:43:50 2027 GMT
        Subject: CN=E0ECC9C3EC726BDDE9204808DAB9A3580B199D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:0b:44:87:51:66:d4:3d:1f:c2:75:34:00:
                    89:89:5f:7d:0a:8b:f0:7b:e7:1b:6e:1d:e9:00:2c:
                    5d:20:df:8d:80:08:5e:59:6a:e0:4a:4f:68:48:8a:
                    3b:c9:68:b9:a6:b2:2b:18:bd:a3:2f:a5:d0:69:fc:
                    36:02:51:01:72:52:77:05:6e:a1:aa:2b:cc:a5:72:
                    64:8d:69:40:6e:5c:3c:5e:53:95:4a:ab:d6:59:5e:
                    61:6b:2a:76:42:aa:6c:13:14:b2:df:de:c1:9e:b3:
                    b3:2a:8e:e1:67:2a:66:4a:ee:67:04:69:26:97:c7:
                    97:50:96:2d:28:f1:24:6b:e2:2e:6e:76:de:69:5f:
                    7f:01:22:06:09:b7:11:cb:c9:2b:9e:3b:b7:87:31:
                    2e:5d:a3:dd:a6:60:5a:09:9a:b6:4f:f9:cb:dc:fd:
                    12:9c:b4:0f:92:72:4a:1f:ef:d2:59:70:b3:34:21:
                    03:16:45:62:15:06:b1:db:05:20:1b:7e:c1:3c:8d:
                    e3:a9:15:94:d2:72:03:5d:e8:62:b6:4a:bd:af:23:
                    c3:6c:8e:d5:c9:3e:37:4b:92:4a:f3:8a:6e:c8:c3:
                    0f:5a:93:48:ca:ef:23:fa:24:ff:3a:0e:9f:16:b8:
                    cd:6b:94:1c:44:16:01:b5:eb:1d:a6:ed:2a:a6:bc:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EC:C9:C3:EC:72:6B:DD:E9:20:48:08:DA:B9:A3:58:0B:19:9D:9D
            X509v3 Authority Key Identifier:
                keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e34382e302f32312d3234203d3e203338383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.115.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:9a:46:dd:b4:39:0d:99:13:0c:65:c9:67:86:c9:27:ec:0c:
         63:6d:39:4a:6c:41:cc:5d:e6:da:52:b2:99:fc:6f:da:76:1e:
         9d:52:17:fb:bb:d9:77:e6:56:d5:de:b8:8c:37:ca:3e:1b:e4:
         a7:2a:f7:28:eb:17:df:74:7c:3d:d1:31:6e:bb:18:19:e1:69:
         ea:03:91:2e:97:43:0a:bd:19:21:1d:0d:05:de:e0:78:5a:d8:
         ca:29:27:d3:73:a3:43:12:9f:98:ad:b8:84:e3:96:3b:b0:19:
         4c:94:14:53:f3:fe:f3:71:08:0a:20:3b:09:fe:e0:ca:0e:e4:
         cf:31:b3:f8:8a:d0:fc:aa:4e:ae:79:f3:e8:c8:4d:3f:b3:7a:
         0f:7f:1f:e2:01:63:aa:ee:f5:3e:0b:9c:92:a5:72:a8:df:12:
         b8:d6:d6:cf:cf:43:18:f9:c7:70:65:75:2b:11:bd:0b:54:08:
         ea:d1:68:e4:10:20:4f:e3:15:47:98:9b:ca:1c:1b:c2:b8:21:
         e6:e2:35:2f:f8:25:84:2f:fc:60:10:0c:fc:5e:fc:c6:2e:a3:
         9f:5b:f4:60:ed:d1:2c:1f:4c:85:6c:5a:8d:11:aa:33:23:a4:
         f3:67:af:89:42:43:c2:42:0d:6c:a4:46:ef:3e:e3:9e:49:6a:
         f8:22:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:12:57 2026 by rpki-client