Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MORNMAPLE/0/3136332e36312e3132342e302f32342d3332203d3e20313331363537.roa
File:                     3136332e36312e3132342e302f32342d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          b1tD3mtJg8a6Cb9gSuIyLAio7bXdONJJlJvqcP0/V3s=
Subject key identifier:   CA:29:4A:3F:29:38:75:10:6E:8A:2F:B6:37:E5:D8:3D:7B:4B:92:39
Certificate issuer:       /CN=244C8E99B153753EBDDF52F3AE0D8258D1FE460B
Certificate serial:       4124E8E6AF03120824B076360193CC21A912F2FC
Authority key identifier: 24:4C:8E:99:B1:53:75:3E:BD:DF:52:F3:AE:0D:82:58:D1:FE:46:0B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/3136332e36312e3132342e302f32342d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:39:53 +0000
ROA not before:           Mon 11 May 2026 17:34:53 +0000
ROA not after:            Mon 10 May 2027 17:39:53 +0000
asID:                     131657
IP address blocks:        163.61.124.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.crl
                          rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:24:e8:e6:af:03:12:08:24:b0:76:36:01:93:cc:21:a9:12:f2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244C8E99B153753EBDDF52F3AE0D8258D1FE460B
        Validity
            Not Before: May 11 17:34:53 2026 GMT
            Not After : May 10 17:39:53 2027 GMT
        Subject: CN=CA294A3F293875106E8A2FB637E5D83D7B4B9239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:71:eb:24:11:d5:0b:e6:ce:bb:cb:cd:e9:fc:
                    1a:f3:b1:d8:09:27:34:61:c0:7c:3b:c3:2b:7a:68:
                    76:ca:eb:82:36:cf:ee:c8:1c:a7:49:02:45:ba:db:
                    0a:57:e2:08:52:2c:c5:5b:6b:b6:fd:80:e0:bb:b2:
                    f2:80:bc:3b:12:96:fa:51:0b:60:db:be:b0:92:ab:
                    f1:a1:73:23:cd:d3:05:5a:a7:52:e1:35:c3:d1:fd:
                    b8:8f:7e:1f:4f:2c:9c:de:3b:3b:37:e4:35:97:1a:
                    f7:d6:16:7a:37:2d:d9:f3:b9:05:62:d8:8c:7e:9d:
                    82:15:9c:a9:4f:8b:51:0c:0c:ad:1e:10:a6:a4:d3:
                    22:17:57:e8:bb:b5:05:1d:c6:7e:5b:65:ec:45:41:
                    df:06:e7:57:fc:cf:33:92:b0:61:fc:d0:c5:8b:ff:
                    ad:1e:87:b5:68:56:3a:3b:96:b5:f0:1e:53:0f:52:
                    a5:17:0e:2e:f2:ef:ec:cb:40:43:6c:9b:8e:e2:ce:
                    77:be:c6:d4:d8:07:ab:63:14:59:b3:4e:7a:cb:cc:
                    f8:5b:65:4b:69:a1:21:ab:92:0d:58:2e:63:9c:56:
                    08:70:63:c8:fb:54:b7:8d:bf:81:a5:23:b3:f7:2f:
                    ce:30:de:82:c7:0e:26:61:e9:56:fc:6f:b8:8a:31:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:29:4A:3F:29:38:75:10:6E:8A:2F:B6:37:E5:D8:3D:7B:4B:92:39
            X509v3 Authority Key Identifier:
                keyid:24:4C:8E:99:B1:53:75:3E:BD:DF:52:F3:AE:0D:82:58:D1:FE:46:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/244C8E99B153753EBDDF52F3AE0D8258D1FE460B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MORNMAPLE/0/3136332e36312e3132342e302f32342d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:21:66:b6:97:ce:f8:b1:d6:13:ce:08:55:81:02:24:ae:0c:
         c9:a1:a0:9a:b9:55:5e:39:90:03:fe:ce:05:53:d8:dc:b7:6c:
         e4:15:fe:f4:bc:6f:08:b6:9b:d2:69:af:99:db:04:65:be:20:
         fc:b1:1c:62:12:a3:64:0a:f2:cc:26:b2:4e:a0:bc:e5:6e:ce:
         80:72:78:3e:a1:fc:08:16:97:18:11:85:a6:73:08:2e:93:2f:
         fb:36:f1:e8:60:3d:fd:94:bc:98:93:4f:31:9f:6f:f0:41:4e:
         7b:9a:c2:7a:f3:4d:cb:7c:3a:e8:2f:a0:a3:06:52:51:9d:fc:
         ff:9a:3b:43:cb:a4:f6:19:69:92:b0:d7:92:b5:57:2d:14:78:
         8d:00:7a:cb:05:e5:b1:c4:e7:95:40:07:16:14:7c:9a:af:c5:
         c0:16:c5:8d:db:47:49:ec:cb:3a:3c:b1:c5:bf:a6:85:7a:da:
         b1:56:47:43:f0:e7:4a:17:59:92:af:bd:90:1a:7e:3d:67:96:
         7a:e1:69:60:b8:0c:91:42:b6:df:31:88:ea:aa:c3:37:0d:1d:
         f7:dd:74:c1:d0:90:71:19:af:30:dd:bd:9e:6a:aa:a1:7d:6e:
         b5:8a:2e:c2:a6:f7:40:a4:7b:dc:7d:a7:9b:7c:69:03:d7:be:
         e8:50:98:cb
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUQSTo5q8DEggksHY2AZPMIakS8vwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ0QzhFOTlCMTUzNzUzRUJEREY1MkYzQUUwRDgyNThE
MUZFNDYwQjAeFw0yNjA1MTExNzM0NTNaFw0yNzA1MTAxNzM5NTNaMDMxMTAvBgNV
BAMTKENBMjk0QTNGMjkzODc1MTA2RThBMkZCNjM3RTVEODNEN0I0QjkyMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTceskEdUL5s67y83p/BrzsdgJ
JzRhwHw7wyt6aHbK64I2z+7IHKdJAkW62wpX4ghSLMVba7b9gOC7svKAvDsSlvpR
C2DbvrCSq/GhcyPN0wVap1LhNcPR/biPfh9PLJzeOzs35DWXGvfWFno3LdnzuQVi
2Ix+nYIVnKlPi1EMDK0eEKak0yIXV+i7tQUdxn5bZexFQd8G51f8zzOSsGH80MWL
/60eh7VoVjo7lrXwHlMPUqUXDi7y7+zLQENsm47izne+xtTYB6tjFFmzTnrLzPhb
ZUtpoSGrkg1YLmOcVghwY8j7VLeNv4GlI7P3L84w3oLHDiZh6Vb8b7iKMY8TAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUyilKPyk4dRBuii+2N+XYPXtLkjkwHwYDVR0j
BBgwFoAUJEyOmbFTdT6931Lzrg2CWNH+RgswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTU9STk1B
UExFLzAvMjQ0QzhFOTlCMTUzNzUzRUJEREY1MkYzQUUwRDgyNThEMUZFNDYwQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNDRDOEU5OUIxNTM3NTNFQkRERjUyRjNB
RTBEODI1OEQxRkU0NjBCLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01PUk5NQVBMRS8wLzMxMzYz
MzJlMzYzMTJlMzEzMjM0MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzMxMzYz
NTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAoz18MA0GCSqGSIb3DQEBCwUAA4IBAQBKIWa2l874sdYT
zghVgQIkrgzJoaCauVVeOZAD/s4FU9jct2zkFf70vG8ItpvSaa+Z2wRlviD8sRxi
EqNkCvLMJrJOoLzlbs6Acng+ofwIFpcYEYWmcwguky/7NvHoYD39lLyYk08xn2/w
QU57msJ6803LfDroL6CjBlJRnfz/mjtDy6T2GWmSsNeStVctFHiNAHrLBeWxxOeV
QAcWFHyar8XAFsWN20dJ7Ms6PLHFv6aFetqxVkdD8OdKF1mSr72QGn49Z5Z64Wlg
uAyRQrbfMYjqqsM3DR333XTB0JBxGa8w3b2eaqqhfW61ii7CpvdApHvcfaebfGkD
177oUJjL
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:02 2026 by rpki-client