Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e36332e36342e302f31392d3234203d3e203138303432.roa
File:                     36312e36332e36342e302f31392d3234203d3e203138303432.roa (raw, json)
Hash identifier:          o8lP6wN1YoXlc135dAR+pjKDRDFMUY9ed02kJcD94DU=
Subject key identifier:   42:8C:40:D0:E1:9E:C5:D3:E0:7D:3D:59:93:E0:56:37:E7:3C:3A:49
Certificate issuer:       /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
Certificate serial:       6097BF1BC4A104BD20BFC7E10EFCA37017B42838
Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KBT/0/36312e36332e36342e302f31392d3234203d3e203138303432.roa
Signing time:             Tue 12 May 2026 01:29:18 +0000
ROA not before:           Tue 12 May 2026 01:24:18 +0000
ROA not after:            Tue 11 May 2027 01:29:18 +0000
asID:                     18042
IP address blocks:        61.63.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl
                          rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:97:bf:1b:c4:a1:04:bd:20:bf:c7:e1:0e:fc:a3:70:17:b4:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589
        Validity
            Not Before: May 12 01:24:18 2026 GMT
            Not After : May 11 01:29:18 2027 GMT
        Subject: CN=428C40D0E19EC5D3E07D3D5993E05637E73C3A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:88:83:76:ad:c8:c5:bb:b0:b1:1f:95:f9:
                    78:9c:11:ab:85:d2:89:0d:65:7c:0b:c9:04:05:b8:
                    10:8c:6a:b7:11:4c:6e:79:b9:8a:9a:51:60:20:0f:
                    ed:d9:34:41:06:48:ed:7c:63:c9:66:04:f6:96:54:
                    42:10:cb:69:43:71:e0:dd:39:f8:89:aa:d2:5c:a5:
                    ac:12:6e:67:4e:5a:2d:82:0a:99:85:94:ee:1d:8f:
                    1c:81:d4:0a:1b:78:da:a3:48:5a:61:af:b6:6e:13:
                    46:1b:01:93:43:0b:0e:d5:d8:64:fd:71:8b:a9:d9:
                    23:52:f4:0d:12:4a:e2:8a:3c:0e:65:7e:e7:54:7e:
                    50:eb:d4:6d:52:47:44:1e:6b:3c:25:d8:73:48:46:
                    83:04:6a:e7:65:5c:09:f8:09:03:07:2b:f1:ec:70:
                    68:cf:d6:de:08:21:f2:05:88:2a:2b:73:ab:74:0e:
                    e9:d6:9a:d4:42:8c:d5:de:61:01:b6:89:f6:6a:b2:
                    82:43:96:78:7a:f1:c6:6a:06:e4:8e:c0:f8:e7:5d:
                    cc:fd:16:f3:46:7e:3e:7d:a4:08:d6:04:9a:3f:87:
                    35:f6:d6:2d:3f:45:06:fc:8b:21:cc:72:79:de:56:
                    3f:59:ac:51:74:9b:28:2a:ac:f2:a1:1d:8c:30:53:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8C:40:D0:E1:9E:C5:D3:E0:7D:3D:59:93:E0:56:37:E7:3C:3A:49
            X509v3 Authority Key Identifier:
                keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e36332e36342e302f31392d3234203d3e203138303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:b1:0d:7b:2c:8c:10:47:91:79:df:06:0b:ce:63:9e:a1:fe:
         ce:e0:d7:6c:67:55:cb:fc:4b:6e:60:6d:d2:5c:8e:45:e5:9f:
         5c:ad:d5:8f:f7:e0:5c:33:bf:d6:7e:24:63:b8:c1:83:34:a0:
         4f:96:af:04:fe:14:8f:64:1f:bd:55:1d:0f:da:19:81:84:45:
         ae:e6:be:38:7c:83:87:9e:05:e2:19:5d:d9:a3:80:8a:d5:40:
         26:2f:5d:73:a6:75:c2:6f:b5:3e:eb:0b:ad:b6:da:76:12:0c:
         ca:75:13:c1:4e:ac:d6:5a:cf:26:62:11:02:dd:8f:b1:3e:1e:
         9b:33:81:ed:a7:34:1c:ea:61:10:17:be:13:f1:3a:d5:9c:c9:
         a8:bf:af:69:ff:31:65:36:c8:b3:0b:12:84:e7:91:6b:c5:b8:
         ef:fa:75:99:fd:38:73:c0:5d:47:55:c5:c0:6d:68:57:01:66:
         ac:88:29:dc:51:e1:e7:e7:76:43:ac:cc:16:8f:66:06:e8:03:
         53:67:60:15:2a:ee:97:56:04:df:9d:f2:81:79:51:11:1f:ba:
         6a:fe:aa:90:61:8f:d0:d6:c3:1b:2f:6e:6f:80:5e:bf:c6:90:
         a0:75:06:85:ec:6e:0a:e0:56:e7:ba:37:c0:00:96:6b:e7:0d:
         ce:df:e7:2a
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIUYJe/G8ShBL0gv8fhDvyjcBe0KDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC
N0VBMTU4OTAeFw0yNjA1MTIwMTI0MThaFw0yNzA1MTEwMTI5MThaMDMxMTAvBgNV
BAMTKDQyOEM0MEQwRTE5RUM1RDNFMDdEM0Q1OTkzRTA1NjM3RTczQzNBNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrc4iDdq3IxbuwsR+V+XicEauF
0okNZXwLyQQFuBCMarcRTG55uYqaUWAgD+3ZNEEGSO18Y8lmBPaWVEIQy2lDceDd
OfiJqtJcpawSbmdOWi2CCpmFlO4djxyB1AobeNqjSFphr7ZuE0YbAZNDCw7V2GT9
cYup2SNS9A0SSuKKPA5lfudUflDr1G1SR0Qeazwl2HNIRoMEaudlXAn4CQMHK/Hs
cGjP1t4IIfIFiCorc6t0DunWmtRCjNXeYQG2ifZqsoJDlnh68cZqBuSOwPjnXcz9
FvNGfj59pAjWBJo/hzX21i0/RQb8iyHMcnneVj9ZrFF0mygqrPKhHYwwU3W7AgMB
AAGjggHZMIIB1TAdBgNVHQ4EFgQUQoxA0OGexdPgfT1Zk+BWN+c8OkkwHwYDVR0j
BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv
OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0
QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzYzMTJlMzYzMzJlMzYzNDJl
MzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9P0Aw
DQYJKoZIhvcNAQELBQADggEBAISxDXssjBBHkXnfBgvOY56h/s7g12xnVcv8S25g
bdJcjkXln1yt1Y/34Fwzv9Z+JGO4wYM0oE+WrwT+FI9kH71VHQ/aGYGERa7mvjh8
g4eeBeIZXdmjgIrVQCYvXXOmdcJvtT7rC6222nYSDMp1E8FOrNZazyZiEQLdj7E+
Hpszge2nNBzqYRAXvhPxOtWcyai/r2n/MWU2yLMLEoTnkWvFuO/6dZn9OHPAXUdV
xcBtaFcBZqyIKdxR4efndkOszBaPZgboA1NnYBUq7pdWBN+d8oF5UREfumr+qpBh
j9DWwxsvbm+AXr/GkKB1BoXsbgrgVue6N8AAlmvnDc7f5yo=
-----END CERTIFICATE-----
Generated at Wed May 13 21:08:54 2026 by rpki-client