Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e203138303432.roa
File:                     3132332e3235322e302e302f31372d3234203d3e203138303432.roa (raw, json)
Hash identifier:          eh2WLuFL8JfqsgGPL8GnRsMff9j5TtrpXmSa0C/O+SY=
Subject key identifier:   E6:2B:4E:77:A1:A7:D1:9A:80:01:F2:32:39:00:B3:AD:54:B0:B3:92
Certificate issuer:       /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
Certificate serial:       0F2F352617FAFCDDEFBF9BAC22861E56D9EF75D1
Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e203138303432.roa
Signing time:             Mon 11 May 2026 17:09:16 +0000
ROA not before:           Mon 11 May 2026 17:04:16 +0000
ROA not after:            Mon 10 May 2027 17:09:16 +0000
asID:                     18042
IP address blocks:        123.252.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl
                          rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2f:35:26:17:fa:fc:dd:ef:bf:9b:ac:22:86:1e:56:d9:ef:75:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B
        Validity
            Not Before: May 11 17:04:16 2026 GMT
            Not After : May 10 17:09:16 2027 GMT
        Subject: CN=E62B4E77A1A7D19A8001F2323900B3AD54B0B392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:f1:52:d5:18:06:8f:3d:ad:40:14:7e:e3:
                    ba:82:46:8d:94:eb:b7:f3:c7:6f:49:48:74:12:9a:
                    72:1e:66:9d:0f:fe:71:b0:da:45:a9:da:4d:df:0c:
                    28:ca:d2:11:2f:2a:42:5d:d5:93:f2:00:cd:59:f0:
                    c2:c2:99:27:29:63:df:7e:82:b3:d7:7c:26:f4:46:
                    1b:aa:0d:b3:66:f5:38:07:a2:77:ab:84:0b:35:13:
                    6e:b6:f0:b3:4a:97:f1:37:df:73:4e:cf:88:1f:75:
                    91:ec:6d:55:8d:6f:3f:3f:e8:2d:27:ee:2c:91:a7:
                    6d:01:fd:01:d7:f9:4b:71:ee:8f:3e:4b:0e:34:9c:
                    77:c3:39:94:0e:f2:c2:85:6e:c6:42:cc:37:3e:bd:
                    94:be:9c:bb:3d:b0:c9:ae:3f:5b:10:12:bc:0e:f3:
                    41:b6:77:5b:db:7e:7e:56:2c:35:c0:27:a0:1b:2a:
                    f0:33:0c:49:4a:1e:96:bb:6d:b5:a5:1e:f2:a2:8a:
                    a8:df:ff:f3:5c:54:93:f0:93:5f:f6:66:5a:5d:03:
                    12:3f:79:da:c0:a7:1a:cc:5e:06:29:21:d7:9c:20:
                    7e:82:9b:86:ca:a4:5f:75:bb:66:c3:d5:51:8e:ae:
                    a7:69:19:b3:00:ed:c8:9e:ce:9c:10:8b:6f:14:ce:
                    0f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2B:4E:77:A1:A7:D1:9A:80:01:F2:32:39:00:B3:AD:54:B0:B3:92
            X509v3 Authority Key Identifier:
                keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31372d3234203d3e203138303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.252.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:dc:17:eb:09:e2:40:53:75:89:8d:81:36:20:e2:06:70:
         3a:41:86:98:81:ea:ea:d8:35:56:c4:7e:df:39:13:59:a8:8c:
         9a:4f:b9:c0:5f:49:23:1e:eb:3c:47:be:f7:07:b1:f6:e1:e0:
         20:6c:1b:fb:83:38:b3:d6:83:7f:83:c9:c5:16:59:3a:cb:27:
         db:24:56:43:eb:36:55:eb:e7:03:29:16:1d:86:b2:72:ea:5f:
         94:0d:90:bf:e9:61:35:51:c6:2e:9b:4b:7c:8c:c7:08:cc:87:
         99:48:bc:94:8e:2f:18:f7:44:80:f6:ef:44:de:34:b8:f4:a1:
         b4:d0:73:8b:d3:69:c1:5e:1c:f1:07:04:00:e1:26:45:b9:90:
         d2:36:88:b2:36:22:59:8b:3c:b4:4e:0d:86:44:3c:c0:5a:17:
         93:80:01:e2:d8:9f:90:1e:cc:99:90:fe:48:ba:0e:aa:90:34:
         73:33:f4:bd:5c:26:c2:7d:06:a0:35:2e:ca:0e:2f:24:14:7f:
         e7:b2:05:a8:b1:14:97:72:14:88:63:c2:5d:74:93:c1:6c:6d:
         63:c0:2d:4b:18:c8:77:dd:14:be:10:98:ba:09:6e:8a:17:a6:
         2b:56:bb:a4:84:be:5e:d8:6c:ba:a6:09:81:48:eb:b2:d1:93:
         dd:7a:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:08 2026 by rpki-client