Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3130312e302e3139322e302f31392d3234203d3e2039363736.roa
File:                     3130312e302e3139322e302f31392d3234203d3e2039363736.roa (raw, json)
Hash identifier:          /XFsrbLtl4a7Jxr0CLhxtvAVEXy82vJNnBOOVF7khLI=
Subject key identifier:   6B:70:55:3B:63:AA:12:D9:17:E5:B4:D3:6B:4D:76:13:8F:45:0A:1B
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       05D11C9C04CB5092808A66E60FF24432B3009505
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3130312e302e3139322e302f31392d3234203d3e2039363736.roa
Signing time:             Tue 12 May 2026 01:29:30 +0000
ROA not before:           Tue 12 May 2026 01:24:30 +0000
ROA not after:            Tue 11 May 2027 01:29:30 +0000
asID:                     9676
IP address blocks:        101.0.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d1:1c:9c:04:cb:50:92:80:8a:66:e6:0f:f2:44:32:b3:00:95:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 12 01:24:30 2026 GMT
            Not After : May 11 01:29:30 2027 GMT
        Subject: CN=6B70553B63AA12D917E5B4D36B4D76138F450A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:1d:b5:e2:09:3e:91:0e:28:cb:ff:83:b9:
                    b2:00:d9:c9:61:38:d8:10:41:89:85:09:ff:f6:a3:
                    c3:5b:aa:f7:23:63:c3:51:17:4a:30:16:68:6d:a8:
                    37:73:11:c3:ca:96:94:c6:15:dd:83:af:9d:f6:63:
                    8e:8f:cf:c5:46:d0:a3:61:6c:15:08:c3:50:5d:c4:
                    9f:bc:b0:ba:65:d3:a0:32:5c:31:d1:07:53:a0:a2:
                    d3:55:c3:3f:fc:1d:10:e0:ea:ca:3a:cf:b8:78:01:
                    b3:fe:03:3e:d9:bf:a9:27:61:2f:d8:54:00:7c:c0:
                    0f:ef:9f:31:e4:03:d5:eb:97:03:c9:2e:08:92:b7:
                    d4:a5:8e:85:35:99:65:ee:c8:22:8b:ea:09:db:ad:
                    49:de:9d:4a:13:07:dd:c9:86:cc:94:90:f1:0f:fe:
                    85:1a:2b:03:53:36:f6:fb:9f:1e:1a:e5:83:9a:74:
                    3a:18:2b:b5:67:eb:c0:bd:a3:f2:06:f8:e9:97:df:
                    5b:83:eb:c9:c6:e8:f9:88:56:78:a4:64:dd:3f:fb:
                    73:3f:1f:d4:9b:41:35:25:71:31:dc:83:e6:9c:c1:
                    ca:d0:31:8d:b4:5e:89:1a:ff:70:4b:60:99:d7:86:
                    af:a3:8e:0b:e5:2e:52:6d:32:ce:a0:44:e8:ca:b4:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:70:55:3B:63:AA:12:D9:17:E5:B4:D3:6B:4D:76:13:8F:45:0A:1B
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3130312e302e3139322e302f31392d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:60:0f:c5:69:ce:05:b9:cb:4c:ff:25:a0:cc:8c:15:67:3b:
         b6:40:ea:d1:61:54:31:1d:28:f2:51:b3:6f:eb:50:07:f1:eb:
         c6:9c:9c:4a:7d:c1:8e:37:03:fe:b1:d1:28:81:4a:6f:60:8a:
         5a:0f:50:86:4e:96:51:93:44:28:f9:c3:88:40:30:8f:26:f1:
         a3:27:ad:3e:02:e8:25:5a:d5:96:00:58:57:c1:c6:3f:ff:a8:
         52:92:83:e3:71:26:81:fd:f0:8a:17:78:f8:9c:3d:56:22:32:
         14:4e:ee:37:9e:b0:c2:9f:1e:d8:fd:99:43:29:8f:95:c5:77:
         55:1d:7a:1d:49:c2:10:f3:a7:97:a2:76:26:32:1c:ec:fc:58:
         3e:90:f5:10:01:19:d6:dd:85:1c:08:2d:ed:e9:b1:ab:21:03:
         6c:8b:be:13:37:6a:cb:56:37:9f:b2:0e:03:38:a7:8b:31:75:
         a5:0f:5b:45:7e:b5:1d:a0:b1:81:5e:4b:6f:1e:5c:c5:98:1e:
         94:69:da:a5:b8:76:26:6a:70:8f:e0:b3:9a:60:fa:27:1d:2a:
         0c:34:65:67:49:7b:be:9b:78:ba:ab:f5:cd:22:ca:fd:c2:a1:
         02:a8:0b:82:9f:26:46:00:02:43:41:b6:1f:a0:71:38:c8:95:
         2b:27:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client