Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PPTECH/0/3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa
File:                     3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa (raw, json)
Hash identifier:          M9aoM6gw7bRmaDPFcfOHzvO0XW597LcSAb+GMFBXN0s=
Subject key identifier:   73:84:EA:D2:85:61:42:A0:85:62:E2:2E:62:F5:8E:EB:6F:74:99:35
Certificate issuer:       /CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
Certificate serial:       2B09EDBDE70D8819158250B92C071C11C6583FD8
Authority key identifier: C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PPTECH/0/3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa
Signing time:             Mon 11 May 2026 17:52:49 +0000
ROA not before:           Mon 11 May 2026 17:47:49 +0000
ROA not after:            Mon 10 May 2027 17:52:49 +0000
asID:                     152617
IP address blocks:        203.18.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl
                          rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:09:ed:bd:e7:0d:88:19:15:82:50:b9:2c:07:1c:11:c6:58:3f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C999B8723445B4125EE5DBE81A6066BA1C38037B
        Validity
            Not Before: May 11 17:47:49 2026 GMT
            Not After : May 10 17:52:49 2027 GMT
        Subject: CN=7384EAD2856142A08562E22E62F58EEB6F749935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:46:1f:8c:0f:64:c7:87:37:85:d7:94:ab:
                    23:f5:dc:4d:c5:f0:39:a6:de:a4:cd:54:59:d8:d8:
                    e4:81:85:1f:e8:b7:e8:a6:21:04:4c:d9:c8:bd:a1:
                    f0:1b:50:d4:ba:7b:e1:85:3e:b9:d6:3c:0d:f6:49:
                    ab:3c:33:16:9c:67:30:c1:63:b6:44:9f:e5:eb:ad:
                    1b:4f:cf:46:60:28:f7:93:50:03:f3:f4:73:2d:d4:
                    22:fa:f4:6c:2a:45:33:0f:6e:59:af:4d:be:06:3e:
                    3a:4c:8f:cf:ba:ee:96:34:a5:c2:ee:75:d4:5d:bc:
                    f8:97:40:90:58:f1:9f:cc:0b:c3:52:6c:47:91:4f:
                    6f:f7:49:89:38:ff:5b:ef:af:e9:4f:f5:ad:f3:74:
                    fa:be:a8:d9:2d:7e:d8:1c:ef:f1:af:7c:19:e5:d8:
                    a8:c3:ca:61:e8:3b:5b:c1:31:da:1a:0e:a3:e4:de:
                    17:c9:6a:23:34:ac:87:2d:08:72:5e:83:7c:00:53:
                    db:98:f0:ab:ba:1d:7a:d8:d4:60:e8:8f:0b:91:9a:
                    30:cb:db:fb:87:e4:08:4a:ac:d6:b7:d6:a6:f2:2d:
                    fa:a5:ec:d5:af:89:b7:02:80:22:ba:c3:8a:cc:42:
                    7e:34:ed:b5:65:97:dc:74:f8:b8:21:29:bc:20:d1:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:EA:D2:85:61:42:A0:85:62:E2:2E:62:F5:8E:EB:6F:74:99:35
            X509v3 Authority Key Identifier:
                keyid:C9:99:B8:72:34:45:B4:12:5E:E5:DB:E8:1A:60:66:BA:1C:38:03:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/C999B8723445B4125EE5DBE81A6066BA1C38037B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C999B8723445B4125EE5DBE81A6066BA1C38037B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PPTECH/0/3230332e31382e3135362e302f32332d3234203d3e20313532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.18.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:cd:82:94:ab:e3:de:c4:ea:3c:4a:ec:31:0d:36:92:ca:
         48:25:4f:84:19:07:51:f7:1e:09:09:85:e6:4c:3a:53:43:1f:
         6b:17:be:94:5a:e5:4c:63:7a:aa:fb:47:65:8f:96:47:13:e4:
         19:8b:82:15:c8:37:21:26:e6:b2:97:3d:d4:1d:ec:a1:15:70:
         77:11:58:f3:db:77:57:d4:72:0b:56:07:0c:80:47:f3:d2:de:
         ab:95:46:0b:d6:52:94:2c:fa:62:c4:8f:03:a8:fa:f8:59:4b:
         60:ff:5c:ae:8c:bf:ae:fb:43:10:eb:e7:ba:e4:e2:ff:4c:58:
         5e:31:32:93:4e:e8:a3:d7:5a:ac:e5:e1:e8:a9:0a:ee:0e:06:
         bf:01:9e:79:f8:fe:e8:f6:6c:dc:28:7f:43:a3:3c:16:e6:a4:
         d4:b8:b6:dc:11:be:18:6c:e6:ac:ca:30:47:4f:71:9d:22:7b:
         58:e2:af:e7:24:96:ed:73:3b:d6:b7:d3:bf:34:3e:d5:60:e7:
         19:39:99:69:b0:4e:66:59:af:f3:4e:89:c4:58:b1:fc:34:79:
         dc:fe:68:94:34:12:b2:2a:d4:56:2a:25:51:84:e8:d6:21:ec:
         d9:ce:89:e4:6d:e5:f4:98:92:df:8c:f0:84:a2:16:9b:4f:1d:
         6c:35:ad:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:29 2026 by rpki-client