Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/POWERHOUSE/0/3136332e36312e36302e302f32332d3234203d3e20313532363232.roa
File:                     3136332e36312e36302e302f32332d3234203d3e20313532363232.roa (raw, json)
Hash identifier:          fCwyscEgrvjXMp337Q3oR9jgOSuagg7YXLxdjlpei1s=
Subject key identifier:   F8:60:E4:B6:70:08:83:83:31:29:D8:E1:81:B7:FD:C5:3E:82:26:8A
Certificate issuer:       /CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
Certificate serial:       1E74E42CF77B550AC98476B2DF0BE1E4C9D48092
Authority key identifier: B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/3136332e36312e36302e302f32332d3234203d3e20313532363232.roa
Signing time:             Mon 11 May 2026 17:39:49 +0000
ROA not before:           Mon 11 May 2026 17:34:49 +0000
ROA not after:            Mon 10 May 2027 17:39:49 +0000
asID:                     152622
IP address blocks:        163.61.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl
                          rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:23:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:74:e4:2c:f7:7b:55:0a:c9:84:76:b2:df:0b:e1:e4:c9:d4:80:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7
        Validity
            Not Before: May 11 17:34:49 2026 GMT
            Not After : May 10 17:39:49 2027 GMT
        Subject: CN=F860E4B6700883833129D8E181B7FDC53E82268A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:57:e5:b7:eb:22:a7:9b:9e:f6:c8:a5:64:
                    59:00:65:f4:9c:13:10:b3:69:ad:65:25:38:3d:2b:
                    27:77:ed:cf:4a:0e:4a:ca:c8:12:a3:8f:f9:ed:a3:
                    74:a8:bb:d9:86:76:e2:22:d1:64:64:82:d8:de:1d:
                    5d:0d:49:f5:51:5a:2f:bc:80:6e:88:c8:fe:e1:12:
                    a6:da:97:76:c8:47:a8:94:01:64:ed:f7:52:27:d4:
                    e7:94:7a:4f:84:d5:40:7d:fc:84:22:a6:d3:1c:df:
                    a1:ca:98:a8:33:23:c8:23:bf:2e:2d:d9:71:c0:cd:
                    d7:ce:c2:2e:da:0d:9b:5d:68:2d:7e:61:4a:49:0f:
                    6b:4f:63:f2:c7:3c:24:59:d8:68:6f:0c:6f:ee:ae:
                    f3:61:05:ba:18:7d:05:04:37:c3:29:33:3a:49:47:
                    52:25:88:e3:30:5a:fb:0b:f3:8f:4a:50:74:a8:57:
                    15:45:99:db:c7:71:d6:ce:7c:c3:9d:67:37:f6:c5:
                    d5:ea:11:af:77:d9:96:f1:1a:00:30:6f:22:86:09:
                    fc:f8:0a:e2:de:cc:c4:2e:4e:0f:49:0e:80:79:1a:
                    b2:04:8d:dd:8b:7b:29:30:a6:59:2b:d1:67:fb:c9:
                    99:d3:9e:01:39:13:32:55:b7:0d:3a:88:83:6f:21:
                    3f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:E4:B6:70:08:83:83:31:29:D8:E1:81:B7:FD:C5:3E:82:26:8A
            X509v3 Authority Key Identifier:
                keyid:B9:40:1D:6D:32:61:C0:0D:EC:A3:36:18:EC:F6:D9:D8:CE:AA:41:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B9401D6D3261C00DECA33618ECF6D9D8CEAA41B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/POWERHOUSE/0/3136332e36312e36302e302f32332d3234203d3e20313532363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:0e:4e:7f:59:b2:90:a3:a3:a8:f4:4b:ec:e2:d4:74:a4:
         af:0e:39:9e:36:db:31:88:e5:bd:58:b4:c3:e4:da:b2:b6:8b:
         40:aa:5c:f3:24:0b:ba:0e:8f:f5:da:4b:7b:9d:56:9a:2c:fa:
         52:3f:67:b1:b1:f6:02:c0:2d:0b:a2:3e:fb:93:6d:5a:01:0b:
         50:fd:06:ee:29:5a:4a:1e:ad:6a:f7:a1:94:79:f0:24:f7:6f:
         cd:14:eb:77:94:4e:8b:08:54:be:51:23:15:38:0e:f1:9e:d6:
         c5:34:3d:f0:55:dc:bb:5f:ac:fa:b3:84:0c:27:82:44:14:39:
         3e:c2:8c:d6:7c:54:b6:6e:4b:b8:4f:2b:57:46:92:50:65:9d:
         be:1a:9c:6d:5a:b4:db:39:b6:46:9e:76:98:1c:15:4a:a7:b1:
         ee:88:12:93:dc:10:0f:ff:23:56:d0:ce:69:cc:b4:ea:13:fb:
         e6:e4:15:77:3e:c9:80:b3:4c:1d:24:c6:73:fa:e4:50:24:e2:
         8f:e4:3a:1c:7b:75:d6:81:64:7c:a0:ac:e5:28:a1:44:32:de:
         f5:ee:91:17:c2:5f:45:ad:47:08:01:a9:4e:7d:92:fb:4f:5b:
         39:c1:de:02:f7:2c:2f:68:82:8e:30:39:90:63:d1:50:bb:d0:
         1a:1e:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:23 2026 by rpki-client