Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa
File:                     3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa (raw, json)
Hash identifier:          cCL36gaY6VKRx/mME3OGV/Yfx4TD3+GXXjH4C5/aA74=
Subject key identifier:   E5:83:F1:94:FF:C2:32:B9:72:1C:FE:70:A5:40:51:59:CF:A7:4B:5B
Certificate issuer:       /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial:       5BC19A0A85F9AF161DA7FF11E92BF2420C450BD7
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa
Signing time:             Mon 11 May 2026 17:11:16 +0000
ROA not before:           Mon 11 May 2026 17:06:16 +0000
ROA not after:            Mon 10 May 2027 17:11:16 +0000
asID:                     38843
IP address blocks:        124.150.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
                          rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:9a:0a:85:f9:af:16:1d:a7:ff:11:e9:2b:f2:42:0c:45:0b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
        Validity
            Not Before: May 11 17:06:16 2026 GMT
            Not After : May 10 17:11:16 2027 GMT
        Subject: CN=E583F194FFC232B9721CFE70A5405159CFA74B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:6d:21:00:fb:1f:1b:d5:3e:e6:f0:c0:e1:
                    da:44:87:51:05:5e:21:d7:fe:a9:87:ec:c7:50:26:
                    9d:a8:94:d6:17:4c:5a:df:7d:39:09:ca:6c:93:57:
                    e5:4e:c4:90:57:8e:2c:1e:85:0f:7b:b2:9d:f7:e4:
                    06:61:57:28:7c:d9:6f:09:de:3c:b3:e4:09:47:70:
                    6c:f5:a2:b9:7c:e2:0b:22:ea:65:50:7b:13:ea:0a:
                    16:38:7a:48:90:22:9d:ba:23:cc:c0:3d:cb:85:09:
                    6f:c6:53:60:7f:44:62:e0:3e:5c:02:23:43:f8:2e:
                    4f:7e:2d:c9:ac:98:27:ea:37:64:2d:44:76:96:dd:
                    91:d4:a9:55:be:fd:fc:6b:30:c1:21:10:34:39:de:
                    11:d0:ca:6c:6d:ba:59:a4:c2:c7:4f:1e:43:0d:07:
                    3c:ec:06:d2:9b:f4:57:61:14:8f:29:73:f8:e0:2d:
                    e4:41:81:ed:57:cc:a4:65:d9:02:a3:b4:81:dc:50:
                    09:3e:0b:82:f8:92:51:65:1e:f7:ac:40:68:47:1e:
                    5a:94:a9:3a:59:33:40:6a:e9:cb:75:6c:e0:6f:c6:
                    4e:a7:5c:5e:d5:61:63:6a:91:65:de:ea:0d:67:9e:
                    bc:47:4a:56:52:73:5a:80:d0:66:c1:a0:aa:0e:ef:
                    f4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:83:F1:94:FF:C2:32:B9:72:1C:FE:70:A5:40:51:59:CF:A7:4B:5B
            X509v3 Authority Key Identifier:
                keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133322e302f32322d3234203d3e203338383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:24:e4:ee:e6:1b:c3:ce:72:14:5c:a6:5c:46:93:1f:1c:
         49:2f:ef:71:6c:95:6a:7a:c1:f3:17:2e:36:9a:b0:b8:03:19:
         b6:38:97:ef:f6:63:7b:77:64:6c:a4:ff:3e:3e:7d:02:f8:71:
         e4:37:ae:6f:47:2f:0b:8c:0b:f3:db:74:9b:e9:96:49:dd:03:
         fe:61:cc:90:0a:27:ea:3b:e0:e7:20:17:80:ca:e0:b4:91:8a:
         7c:47:58:b6:72:c5:60:c0:fb:db:cb:1a:9c:46:46:78:3e:7f:
         82:d5:60:f8:68:20:96:88:da:39:8f:3d:e4:e6:0e:fc:14:fa:
         39:d4:a5:76:b8:2b:13:8f:ba:ca:10:5e:1a:11:87:cf:25:cc:
         4d:79:d0:77:e3:c1:49:e2:6f:6a:d8:10:7c:bd:b6:5f:7e:9c:
         10:2f:d8:b1:11:fa:c4:60:89:d7:fb:6c:5c:11:ab:75:ac:6b:
         a9:6a:1c:8b:47:4e:73:d5:a0:6f:b5:de:aa:5d:91:05:c1:5c:
         4e:99:9f:d3:77:e8:5c:80:39:fe:c8:f4:9a:0d:9e:ef:94:1a:
         cc:ce:4a:87:fa:fb:c3:59:cc:5e:a4:cd:c0:76:9f:16:fc:6c:
         b8:2f:16:d0:36:bc:a0:9c:c3:10:ef:64:f9:a6:de:7d:62:c0:
         de:3d:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:50 2026 by rpki-client