Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/3231312e37392e3131302e302f32332d3234203d3e2039333034.roa
File:                     3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (raw, json)
Hash identifier:          vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=
Subject key identifier:   05:38:26:F4:20:E1:3A:D5:34:F0:9C:27:F2:2E:84:E8:E0:52:71:3F
Certificate issuer:       /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial:       6759A745D558DE521A30647C5F87E58B42A350F4
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEOLCY/0/3231312e37392e3131302e302f32332d3234203d3e2039333034.roa
Signing time:             Wed 24 Jun 2026 08:23:49 +0000
ROA not before:           Wed 24 Jun 2026 08:18:49 +0000
ROA not after:            Wed 23 Jun 2027 08:23:49 +0000
asID:                     9304
IP address blocks:        211.79.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
                          rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 13:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:a7:45:d5:58:de:52:1a:30:64:7c:5f:87:e5:8b:42:a3:50:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
        Validity
            Not Before: Jun 24 08:18:49 2026 GMT
            Not After : Jun 23 08:23:49 2027 GMT
        Subject: CN=053826F420E13AD534F09C27F22E84E8E052713F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:30:e7:a3:c3:f8:c2:e6:2b:6a:8a:55:7c:
                    a0:1a:83:92:ce:42:1b:98:38:53:a7:fe:95:a1:d5:
                    05:75:fc:34:33:85:7d:6e:dc:c5:33:b9:ce:77:95:
                    90:98:be:54:c4:04:f2:02:a0:a9:37:04:06:a3:ac:
                    31:b1:98:5c:3b:be:7a:c9:a8:0d:ff:78:02:b5:76:
                    73:0f:89:79:8f:ed:1a:df:49:3d:1a:17:06:4a:60:
                    9e:23:24:83:35:e7:96:c5:4d:6b:ed:93:e3:2c:b3:
                    0f:9b:e5:75:64:44:ce:02:6d:56:7a:cf:67:dc:84:
                    88:52:57:78:2e:17:fd:c1:d3:38:7f:60:55:19:a5:
                    11:b7:de:6c:01:29:1e:77:b2:4b:58:17:68:66:fa:
                    06:9e:f3:0d:97:ee:12:5d:10:ac:0b:cf:7b:e9:03:
                    b7:95:b7:db:b3:cb:5e:dd:28:ff:ac:1b:23:3c:d6:
                    47:dc:d0:ff:28:09:35:30:24:9d:55:39:e9:4c:9a:
                    78:75:d7:90:ce:f7:d1:a2:b9:5c:f8:4d:90:83:03:
                    44:2e:3f:53:04:32:02:dc:c1:c6:58:2e:d4:11:57:
                    78:2b:71:d7:75:96:b2:1e:9f:40:4e:89:6e:87:02:
                    1e:6d:c9:4d:5e:a0:03:ed:c5:b9:4d:04:1d:fd:a8:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:26:F4:20:E1:3A:D5:34:F0:9C:27:F2:2E:84:E8:E0:52:71:3F
            X509v3 Authority Key Identifier:
                keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/3231312e37392e3131302e302f32332d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:0d:4f:96:ef:0e:f3:9d:7e:3a:cd:09:df:3a:17:16:c1:19:
         d4:43:b1:a7:08:53:65:be:61:b4:16:fa:88:a4:4b:f4:71:e0:
         df:d5:b5:19:9a:24:78:86:63:74:5e:f3:57:aa:de:d9:f2:d7:
         6d:42:92:a8:2e:a5:c3:f0:a7:e2:c3:64:fa:6c:fa:65:10:0c:
         b0:1f:a6:9b:01:18:e1:2e:a7:15:43:d4:87:7c:dc:b1:95:e6:
         93:1f:22:b8:d2:bd:ee:30:ba:9d:db:bb:cc:67:7a:8e:ff:07:
         68:da:3f:78:d3:98:36:c6:e7:73:0e:b7:c1:8a:2d:7c:7a:a1:
         85:af:2d:83:a9:b1:56:d9:1d:af:5c:82:b6:9d:37:d9:3f:e2:
         f4:65:d1:3b:32:d2:68:53:8f:94:0b:d1:69:11:48:3a:d6:87:
         05:2c:3d:39:63:14:15:30:5f:97:af:00:75:3f:96:0f:11:e1:
         2d:12:a3:61:0d:7b:b6:35:67:17:13:c0:40:af:20:a0:f8:1f:
         d1:91:5b:4e:1c:28:38:d6:c9:b7:ae:84:11:9d:19:d4:43:1f:
         10:17:f2:51:20:9d:41:56:07:86:f2:0e:f6:4b:74:fb:61:ce:
         e6:04:8d:98:b4:85:d9:05:c3:ab:2f:f9:33:ca:c8:2b:f9:b9:
         62:93:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:13:02 2026 by rpki-client