Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3135302e3130372e36322e302f32342d3234203d3e20313331363436.roa
File:                     3135302e3130372e36322e302f32342d3234203d3e20313331363436.roa (raw, json)
Hash identifier:          3PcUvyhIdNaPIQXaPs1EFWGQ9t9nv0cdqcFoxmBjeHc=
Subject key identifier:   1D:DF:06:78:47:0E:14:86:6F:84:90:21:08:87:E2:76:57:F7:DD:FE
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       6118F73E646DCD51D94CA7ED75A48BD9948B54CF
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3135302e3130372e36322e302f32342d3234203d3e20313331363436.roa
Signing time:             Tue 12 May 2026 04:00:31 +0000
ROA not before:           Tue 12 May 2026 03:55:31 +0000
ROA not after:            Tue 11 May 2027 04:00:31 +0000
asID:                     131646
IP address blocks:        150.107.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:18:f7:3e:64:6d:cd:51:d9:4c:a7:ed:75:a4:8b:d9:94:8b:54:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 12 03:55:31 2026 GMT
            Not After : May 11 04:00:31 2027 GMT
        Subject: CN=1DDF0678470E14866F8490210887E27657F7DDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:67:61:52:98:bb:b7:a3:78:b9:86:a1:24:
                    6e:b7:26:9b:7b:c4:0a:d7:4b:4e:86:8f:a1:20:06:
                    af:b1:cc:af:d2:30:7d:42:90:77:dd:a8:85:57:90:
                    1b:59:e3:0b:95:ac:3d:71:ab:e5:80:4f:be:1a:4f:
                    5a:25:bc:d9:22:30:18:3c:a4:c2:60:4c:02:6a:4e:
                    d0:41:c2:08:a3:30:52:89:5c:86:a5:f6:07:c4:e4:
                    d8:80:4e:eb:9d:ef:64:6d:d1:80:19:fa:f1:ee:49:
                    b4:ff:e9:70:e5:e9:ce:15:38:9b:b3:c8:c8:48:ac:
                    1c:d1:82:59:4c:bf:cf:ff:f9:d3:10:78:92:b1:a3:
                    2c:b0:3f:8c:51:c9:20:8c:91:04:52:e0:8c:06:7c:
                    e5:02:be:3c:13:79:51:a6:54:bb:57:83:41:eb:ed:
                    88:14:16:ff:ff:4b:a4:2a:b8:94:cc:ea:ab:c6:4b:
                    80:79:bf:08:d0:55:e1:5b:4d:81:8f:42:b0:61:d5:
                    ea:c7:4e:b5:79:a6:88:d5:35:d1:56:dc:68:0f:08:
                    94:98:1b:aa:9c:12:d2:e6:8b:34:da:c9:ea:15:4a:
                    e4:14:d7:8b:ce:d3:38:03:01:d0:69:78:31:54:28:
                    be:90:6d:93:ff:bc:b1:a8:cc:0f:77:27:82:f8:e2:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DF:06:78:47:0E:14:86:6F:84:90:21:08:87:E2:76:57:F7:DD:FE
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3135302e3130372e36322e302f32342d3234203d3e20313331363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d5:94:76:b2:6d:39:65:79:2c:f8:36:92:8f:ac:e5:f3:aa:
         c9:fa:c6:ce:44:2c:26:de:a6:36:49:30:cf:b7:ea:38:45:ff:
         a1:29:bd:bf:6a:ff:74:93:0d:0f:c4:5f:96:a1:ed:8a:0f:33:
         7a:d2:12:ae:ea:65:18:0a:36:70:51:5d:66:9d:bf:52:a5:f4:
         61:6a:e1:57:36:8e:55:79:a6:a7:6d:c3:af:fe:ad:71:dc:70:
         8e:aa:af:d9:c9:05:a8:5a:9c:8f:0c:14:4d:4b:23:d9:1f:72:
         0b:9c:c4:66:ac:1d:ae:56:4f:b5:32:b3:eb:98:53:f9:b9:ab:
         cf:ba:65:72:63:cf:d6:09:40:2b:ff:8c:8b:87:6c:ed:ab:ed:
         45:08:f1:a0:bc:e3:4f:f4:80:d3:55:0b:ec:62:0d:50:74:30:
         6b:19:80:df:c0:c2:68:51:74:27:10:54:cc:6c:39:92:26:ae:
         06:de:8e:23:93:27:e7:3d:1f:45:32:7d:c7:cf:f7:58:10:82:
         92:3e:a4:bc:39:88:c6:bc:1f:d0:c7:a8:8c:da:fb:54:b7:12:
         29:e2:0c:4c:ce:c9:37:8f:ba:cd:78:81:b2:e3:bf:32:11:74:
         7b:b9:b7:57:44:07:5f:fc:44:5f:db:a0:fe:90:9d:d5:f5:51:
         e7:92:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client