Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3132322e3230312e3132382e302f31372d3137203d3e2039363736.roa
File:                     3132322e3230312e3132382e302f31372d3137203d3e2039363736.roa (raw, json)
Hash identifier:          MVNcTpN9AZGPbbX1swZySbtU3QKxq+2L38jRFmmk8Ag=
Subject key identifier:   29:D3:D2:81:76:E3:0E:22:D5:EA:06:6D:91:D1:ED:12:37:8C:3D:7F
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       104557BE88908209AD105CB18675EC0E5C9E7C07
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3132322e3230312e3132382e302f31372d3137203d3e2039363736.roa
Signing time:             Mon 11 May 2026 17:18:58 +0000
ROA not before:           Mon 11 May 2026 17:13:58 +0000
ROA not after:            Mon 10 May 2027 17:18:58 +0000
asID:                     9676
IP address blocks:        122.201.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:45:57:be:88:90:82:09:ad:10:5c:b1:86:75:ec:0e:5c:9e:7c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 11 17:13:58 2026 GMT
            Not After : May 10 17:18:58 2027 GMT
        Subject: CN=29D3D28176E30E22D5EA066D91D1ED12378C3D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:17:ef:8d:b4:50:89:f3:52:85:af:70:69:
                    4a:8d:a6:11:bf:13:1f:82:df:e7:73:20:44:57:59:
                    68:97:b5:9b:18:8c:ce:b8:34:ad:f4:89:e9:15:8b:
                    77:08:47:df:1c:d8:18:14:88:a6:de:44:c6:e1:71:
                    b3:65:e6:d8:8f:92:a3:39:32:40:10:99:c3:17:20:
                    47:06:59:27:16:20:be:f9:9d:d7:ca:9f:ee:b3:54:
                    69:e7:a9:cb:4b:3c:2d:95:09:69:dc:63:99:a8:32:
                    d1:ad:5c:1c:c7:b2:a5:bc:81:9d:93:06:45:ce:9b:
                    b6:81:0a:be:e1:9e:18:52:2e:2a:18:b6:4f:d5:73:
                    44:0f:42:43:b0:9a:1a:c4:9c:ca:31:14:39:ec:93:
                    34:b5:d5:a1:01:1a:b3:73:f0:76:f8:f3:19:5d:cc:
                    16:c3:b3:b4:82:ed:9b:20:b2:83:67:b7:50:d5:7a:
                    46:87:d7:d8:c8:56:0f:88:a3:f2:49:22:0d:07:5c:
                    ad:2b:d4:f7:59:f6:d1:83:5e:c0:e1:69:b4:c3:5a:
                    0b:73:eb:79:aa:95:13:4c:a0:c2:b8:e4:0d:fc:60:
                    47:8b:20:ae:50:63:01:4b:9b:b7:30:7d:22:da:1e:
                    46:43:bc:21:23:5e:ff:62:2f:63:e6:ce:9f:92:75:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D3:D2:81:76:E3:0E:22:D5:EA:06:6D:91:D1:ED:12:37:8C:3D:7F
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3132322e3230312e3132382e302f31372d3137203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:3e:e1:1b:92:90:b3:4d:74:72:08:02:6f:81:ed:e9:c0:
         d2:ec:78:82:eb:57:4f:cc:5d:2a:2f:f4:70:dc:3a:67:1f:31:
         79:af:98:32:2f:91:8c:ec:d3:fa:ed:20:3e:a0:1d:9e:da:9e:
         7e:5d:ef:6f:5a:7a:34:43:45:a2:98:50:63:ee:72:e4:42:58:
         db:96:7a:c9:83:eb:14:9a:d9:2d:94:2f:3d:d9:04:d4:0b:1a:
         70:1e:a4:64:06:19:f3:22:2f:e0:3b:06:19:e3:08:65:81:bb:
         74:ad:ee:a3:d6:95:4d:22:b8:5c:41:73:00:63:37:5b:cb:ec:
         28:d8:52:d1:62:12:ba:87:ab:95:58:c6:c0:0f:6f:e5:3c:21:
         ed:cb:5d:93:21:0b:e1:00:d8:a1:91:5f:97:a2:af:de:7b:ba:
         87:b5:0f:68:5a:f6:99:37:55:29:7a:74:c6:41:4a:aa:7f:26:
         01:3d:93:17:f8:3a:a5:55:62:30:72:23:cd:37:ce:2c:47:b8:
         87:03:4a:38:d7:80:91:fd:8b:82:28:b6:65:93:9e:8b:f7:8b:
         c4:ad:be:ab:5f:b0:32:71:4c:f4:be:18:56:a4:c0:23:9c:89:
         9d:33:dd:15:d8:35:52:3e:17:a0:a4:a4:9c:22:9b:29:c9:95:
         06:c4:aa:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client