Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa
File:                     3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa (raw, json)
Hash identifier:          RcOnXMAI5zB/DCWGD2VqU4hiopUTsHbdPmPIHSfzOFQ=
Subject key identifier:   0B:FB:2B:AA:FA:D9:DF:2E:5C:85:45:13:06:36:31:79:E2:29:5D:AF
Certificate issuer:       /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
Certificate serial:       661F9E362D320B45BAA679555258B8836B900761
Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa
Signing time:             Mon 11 May 2026 17:08:21 +0000
ROA not before:           Mon 11 May 2026 17:03:21 +0000
ROA not after:            Mon 10 May 2027 17:08:21 +0000
asID:                     38843
IP address blocks:        124.150.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl
                          rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:1f:9e:36:2d:32:0b:45:ba:a6:79:55:52:58:b8:83:6b:90:07:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791
        Validity
            Not Before: May 11 17:03:21 2026 GMT
            Not After : May 10 17:08:21 2027 GMT
        Subject: CN=0BFB2BAAFAD9DF2E5C85451306363179E2295DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:db:c4:1c:b6:9a:c5:29:20:3a:5e:d3:50:5b:
                    67:61:5f:23:65:7b:df:a1:c0:3f:41:33:8f:ad:c7:
                    68:59:b8:55:0c:6c:d1:b9:c9:43:c3:cd:a8:ad:59:
                    3b:a4:8f:cd:65:a1:f9:2f:13:ff:b5:19:c9:23:e7:
                    36:e1:a2:ff:f5:ff:42:27:2b:14:78:2c:ed:95:b3:
                    4c:4a:94:40:ee:78:9f:63:26:08:4f:b6:bd:3f:97:
                    99:a0:ac:76:d6:8d:74:a6:6b:a2:ef:9b:1b:30:3b:
                    e7:1c:4d:17:4b:21:ab:2a:37:9c:67:6c:d8:47:0f:
                    00:e2:6b:bf:26:39:a4:0b:25:09:ad:01:f4:c0:da:
                    1c:ed:d3:f8:75:62:08:74:31:9f:ef:1b:4a:3e:cd:
                    f4:c0:04:1c:47:ad:0b:80:46:02:ed:39:7a:da:1c:
                    89:5f:64:e3:4c:1f:6d:cd:a7:40:05:40:65:a4:f0:
                    51:9d:50:67:6d:5e:12:d3:66:8c:87:6c:0c:b2:92:
                    49:dd:e3:65:a6:40:97:c2:cb:4c:01:18:e3:0a:f0:
                    6f:20:62:8e:ac:69:bc:05:58:f0:17:71:56:96:86:
                    51:62:7e:22:20:23:79:f5:73:67:30:a0:5c:15:29:
                    5d:e1:a6:8e:2a:da:a5:6d:5a:8e:a5:e2:a9:d8:90:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:2B:AA:FA:D9:DF:2E:5C:85:45:13:06:36:31:79:E2:29:5D:AF
            X509v3 Authority Key Identifier:
                keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133352e302f32342d3234203d3e203338383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:d3:7a:51:c7:fb:ed:ab:81:9a:8a:d7:01:7f:e0:f4:2f:
         70:c5:18:a5:67:8f:77:0c:b7:a3:21:17:12:26:59:cc:19:40:
         fe:fa:c0:01:35:78:a6:01:09:c9:97:e5:1f:a6:18:dc:25:e3:
         67:30:f7:5d:1e:54:7e:24:47:f6:a7:37:0d:39:ef:95:9e:d5:
         0f:00:97:2f:67:de:1f:cf:e3:df:2f:83:60:a3:23:92:00:c1:
         ab:a3:7b:c0:cd:11:ff:99:13:ee:6a:50:8b:48:e6:23:8f:24:
         fa:25:90:b9:27:89:50:2c:c2:0e:12:63:0f:87:ac:76:fd:2b:
         82:d9:6f:f2:17:81:6c:66:ba:20:34:3c:78:e6:42:0a:3b:2f:
         1d:b7:07:6b:37:a6:1f:61:be:a4:a5:da:a9:fd:fa:4c:ce:a6:
         ae:88:a6:06:ee:2b:e4:65:8c:06:67:3c:0b:4a:9a:a8:54:77:
         3a:0f:da:5c:33:41:7d:4c:e1:c0:90:5f:2e:dd:14:96:e3:a2:
         c4:36:33:fd:d8:ac:ef:c5:92:57:d1:61:17:79:90:13:a8:2b:
         e0:7e:91:ef:1e:15:03:77:36:b4:c7:d1:09:83:4f:4e:23:8d:
         ea:f7:95:d5:f3:40:ec:10:08:3c:e3:75:2b:c0:de:41:da:08:
         02:64:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:32 2026 by rpki-client