Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3131382e39392e3132382e302f31372d3234203d3e2039363736.roa
File:                     3131382e39392e3132382e302f31372d3234203d3e2039363736.roa (raw, json)
Hash identifier:          GpDvB7GtFmyv/o+8F1604fNngcAJQZURMAyB3P7owus=
Subject key identifier:   78:64:02:ED:2B:D4:8B:0D:53:3B:F7:CD:77:E1:EE:CE:14:C6:2D:65
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       78C5D38395E71ECEA583E5EDBEEF3EB70399FF52
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3131382e39392e3132382e302f31372d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 16:51:57 +0000
ROA not before:           Mon 11 May 2026 16:46:57 +0000
ROA not after:            Mon 10 May 2027 16:51:57 +0000
asID:                     9676
IP address blocks:        118.99.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:d3:83:95:e7:1e:ce:a5:83:e5:ed:be:ef:3e:b7:03:99:ff:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 11 16:46:57 2026 GMT
            Not After : May 10 16:51:57 2027 GMT
        Subject: CN=786402ED2BD48B0D533BF7CD77E1EECE14C62D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:52:15:dc:ae:d5:f8:65:c9:fd:21:07:f3:
                    ba:d5:b5:05:df:5d:49:fe:2c:c9:29:87:0c:bb:28:
                    a5:85:09:d7:4f:47:91:ae:7a:a0:42:45:23:a0:58:
                    92:56:6b:4c:0d:c0:36:7a:01:4a:fe:c6:51:95:53:
                    07:6c:0f:52:8a:7f:be:a2:67:71:30:37:04:4d:3f:
                    b9:ef:47:d1:d1:6b:d9:85:da:73:1b:cc:b3:86:bc:
                    9a:a3:d2:b0:ae:d2:c4:39:45:26:b1:77:fa:9a:b6:
                    5c:2b:8b:a1:62:07:83:21:76:c3:85:1a:d3:db:40:
                    0f:b4:19:45:ad:a1:72:0e:6c:f9:83:0b:f9:db:b9:
                    3e:d5:6f:b8:17:38:8b:0b:c3:82:b0:22:d7:e9:83:
                    10:ba:7e:d4:2d:29:be:96:90:6f:c4:2d:cf:0d:f9:
                    67:60:90:3e:05:d1:7f:d7:b9:95:07:0f:02:a1:4a:
                    cb:9f:3a:68:21:d1:1b:9c:af:ba:d7:dd:b8:74:fe:
                    80:25:22:9c:6f:2d:7e:a3:7d:55:59:03:5d:8e:bb:
                    5c:4c:1e:f1:c9:b7:27:61:a9:8b:cc:a1:19:cc:97:
                    6f:bf:16:3e:e9:dc:d4:ac:03:e5:45:93:24:d8:4d:
                    a0:52:28:8e:3a:0e:a8:eb:31:7f:65:16:0b:ec:4c:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:64:02:ED:2B:D4:8B:0D:53:3B:F7:CD:77:E1:EE:CE:14:C6:2D:65
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3131382e39392e3132382e302f31372d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5a:da:b2:3c:00:81:5f:53:a5:34:7b:2d:92:56:dc:53:f0:d3:
         05:20:38:46:1e:35:71:1a:6d:73:d5:76:54:3b:09:22:8b:75:
         c6:1d:e6:14:e3:3e:1f:ca:48:30:4f:13:33:d0:60:ac:e9:d7:
         46:e6:32:be:81:d0:97:04:89:ff:aa:5e:8b:74:f0:95:09:b0:
         1a:6d:77:30:a8:93:b6:aa:a7:3d:01:1e:79:71:10:e7:be:04:
         c9:05:9e:9c:29:47:dc:01:ab:5c:d8:d1:e3:d7:ad:a1:dd:bc:
         2c:7b:a0:c1:70:4e:e4:58:62:f8:5a:61:1e:d9:2d:6e:ff:db:
         df:55:70:58:c2:29:41:2d:bb:8b:8b:26:87:da:a3:70:0f:75:
         34:ce:5f:8a:08:aa:8e:9f:ad:e1:cd:0c:36:89:35:3e:ca:0e:
         7a:35:0c:ce:49:53:01:0e:3b:53:d9:5d:33:20:53:36:6b:dc:
         dd:cc:2f:0e:70:09:bd:77:11:23:aa:94:6a:a3:e4:8b:85:d3:
         d9:30:4b:ee:e6:c2:fb:40:10:22:31:ff:c8:a6:7a:a0:fc:77:
         f7:ca:b6:b0:d6:da:2f:25:e4:d5:6d:78:70:fa:10:b3:a0:93:
         5f:e5:f8:d9:cf:5b:c9:4e:fc:67:90:85:9a:21:76:61:d3:9a:
         4c:a3:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client