Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LINGUANG/0/3136332e3132382e3139322e302f32332d3234203d3e20313334383233.roa
File:                     3136332e3132382e3139322e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          7l48mtCdHaTDCZdUNLnGd6WBTLdRorg+wIzg3cUP9lA=
Subject key identifier:   4A:9C:A9:E8:B5:97:A2:E2:56:28:BD:CE:DA:A2:47:90:87:17:08:E4
Certificate issuer:       /CN=C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD
Certificate serial:       7F7445136E28409D22BFBDC7CFCDE3653B0A8CB3
Authority key identifier: C1:3F:78:7F:1B:CF:6F:D5:B9:14:E1:E4:3A:92:2C:7C:E0:CC:A8:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LINGUANG/0/3136332e3132382e3139322e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:58:53 +0000
ROA not before:           Mon 11 May 2026 17:53:53 +0000
ROA not after:            Mon 10 May 2027 17:58:53 +0000
asID:                     134823
IP address blocks:        163.128.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LINGUANG/0/C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD.crl
                          rsync://rpkica.twnic.tw/rpki/LINGUANG/0/C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:74:45:13:6e:28:40:9d:22:bf:bd:c7:cf:cd:e3:65:3b:0a:8c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD
        Validity
            Not Before: May 11 17:53:53 2026 GMT
            Not After : May 10 17:58:53 2027 GMT
        Subject: CN=4A9CA9E8B597A2E25628BDCEDAA24790871708E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:36:21:93:fb:93:b0:00:8a:39:7d:aa:98:
                    8d:bf:7b:a3:35:b2:f6:2e:ba:ba:b9:25:27:04:66:
                    4e:e5:13:60:7c:54:33:13:e9:92:16:9f:42:2a:fd:
                    ca:9b:ec:a9:d4:d6:b7:eb:67:9c:57:db:51:ad:40:
                    aa:7e:46:c3:ed:c5:9e:71:de:94:8f:5d:ee:68:a0:
                    02:a5:7d:8a:35:46:9b:44:31:c7:f0:68:af:df:5a:
                    2c:5b:d5:d6:6d:c9:a0:4b:e7:ca:df:96:64:f7:28:
                    52:27:2b:d7:23:de:1c:0e:74:d7:76:22:bd:c8:68:
                    e8:36:3a:98:f4:c3:e5:0f:57:a6:cc:58:b5:66:e1:
                    a0:69:a8:60:c1:a3:aa:34:f4:f1:99:ec:11:c2:60:
                    5e:79:9f:35:cd:7a:49:33:12:dc:50:04:ee:a0:fb:
                    97:e8:cf:a0:1e:a8:9d:1d:f2:d5:0a:c4:25:96:c5:
                    c5:4b:a5:18:9f:2b:1a:07:08:dd:62:0c:52:16:4e:
                    3c:13:f9:24:ef:ea:e8:a1:79:e1:59:c9:b0:5f:1a:
                    cc:0f:08:ed:b5:52:0a:50:df:b9:57:d2:2b:02:e0:
                    bc:39:31:05:0e:a5:54:87:98:a7:7e:f2:ac:99:07:
                    5d:21:b2:b5:9b:a5:ad:22:2d:55:6e:fb:93:71:61:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9C:A9:E8:B5:97:A2:E2:56:28:BD:CE:DA:A2:47:90:87:17:08:E4
            X509v3 Authority Key Identifier:
                keyid:C1:3F:78:7F:1B:CF:6F:D5:B9:14:E1:E4:3A:92:2C:7C:E0:CC:A8:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LINGUANG/0/C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C13F787F1BCF6FD5B914E1E43A922C7CE0CCA8BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LINGUANG/0/3136332e3132382e3139322e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:25:25:f2:c3:30:64:a7:d7:0c:75:c4:04:fa:73:f2:6e:11:
         9f:a9:c4:eb:00:4e:70:fa:1e:f7:36:9c:5b:51:48:1a:61:b0:
         32:2a:9f:b2:eb:1a:cb:28:8e:57:44:33:bd:21:53:10:35:cb:
         b9:95:64:b6:8a:b8:62:2a:24:ea:cd:4e:be:f4:f6:6a:b1:ce:
         d4:92:bb:a6:56:19:2b:ac:06:34:c8:6b:af:b7:eb:85:20:9d:
         4d:4d:95:8c:0e:8f:7e:a3:33:b8:c1:8e:72:30:70:2b:bb:30:
         a0:69:99:c9:f1:63:56:b8:df:d7:2c:93:0a:8e:41:d8:0a:0b:
         f2:da:1f:b2:cf:68:8a:21:93:cc:03:9a:e2:ca:78:48:c4:49:
         16:8f:7c:c8:34:a3:95:96:5b:d1:99:d1:d2:6e:87:a6:1d:ef:
         d0:06:dc:4e:7b:97:61:88:a3:d3:7d:07:3f:62:c4:53:cb:cc:
         a2:01:90:a4:04:22:3e:ac:c3:00:27:eb:02:90:15:04:74:09:
         1b:d8:49:d5:64:17:e7:f5:ed:13:5e:75:c2:fc:9c:26:e9:ad:
         22:60:8f:de:2b:4e:df:84:2a:d9:ec:18:a4:b4:31:59:72:8a:
         ff:de:38:f3:0e:37:b5:b9:81:98:30:3f:83:0a:73:7a:6c:e8:
         af:61:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:58 2026 by rpki-client