Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3231302e36322e3137362e302f32302d3234203d3e2039363736.roa
File:                     3231302e36322e3137362e302f32302d3234203d3e2039363736.roa (raw, json)
Hash identifier:          UYR/A0Hl2vBVIwj3zmtlfojk+iyHfc51sqEVoxJtrOE=
Subject key identifier:   CB:B8:46:73:76:DE:64:DA:5C:B3:1C:59:9F:10:D0:70:72:2C:15:BC
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       5C1F7E44828DA14C3F494D2A3E6ACCDF7C363DBC
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3231302e36322e3137362e302f32302d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 16:51:59 +0000
ROA not before:           Mon 11 May 2026 16:46:59 +0000
ROA not after:            Mon 10 May 2027 16:51:59 +0000
asID:                     9676
IP address blocks:        210.62.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1f:7e:44:82:8d:a1:4c:3f:49:4d:2a:3e:6a:cc:df:7c:36:3d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 11 16:46:59 2026 GMT
            Not After : May 10 16:51:59 2027 GMT
        Subject: CN=CBB8467376DE64DA5CB31C599F10D070722C15BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:ba:d0:ed:d9:39:3b:08:1e:dd:ca:85:0a:
                    76:55:ad:ec:fb:ee:83:83:08:cc:e9:b2:77:3c:96:
                    b2:83:03:0e:b1:b4:24:d2:7e:37:4f:16:c1:3d:46:
                    72:b4:82:88:04:20:5c:7e:37:a3:1e:d5:16:98:2d:
                    e1:0a:5d:9f:10:1a:55:69:c4:54:13:37:47:da:93:
                    3e:e9:88:09:48:9e:e6:2c:60:f5:05:2a:80:a0:89:
                    0e:f8:a3:97:54:c1:1c:97:3d:dd:f1:3d:3c:4f:39:
                    03:6d:b1:4b:97:81:82:96:e4:2e:b3:1f:8d:c9:d4:
                    f4:a5:44:ae:aa:c3:2d:43:1a:c3:43:e1:cf:69:59:
                    08:de:28:1e:0a:32:73:29:b9:7b:63:a8:35:95:95:
                    50:aa:7a:03:6d:71:05:02:be:19:43:da:fb:31:6e:
                    a0:ba:0f:dc:6e:2f:7e:fc:88:a2:e7:7b:ff:00:ed:
                    48:3c:a8:f5:05:1e:29:da:da:a4:cc:92:ca:57:7f:
                    3b:c6:44:88:e9:f5:a3:2f:c2:87:72:2d:6f:f8:64:
                    dd:d1:79:f0:19:a4:a8:bc:f4:0e:d4:0c:b4:d4:dc:
                    ea:f4:8a:93:e1:7c:fc:90:9a:2c:a7:e7:7a:80:d0:
                    c4:fc:66:3b:57:5c:3e:ce:8a:0d:f0:b2:cb:aa:70:
                    d6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:46:73:76:DE:64:DA:5C:B3:1C:59:9F:10:D0:70:72:2C:15:BC
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3231302e36322e3137362e302f32302d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.62.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:de:a7:e5:d2:c0:03:ec:c2:cc:c1:01:32:92:8f:15:28:87:
         be:4b:41:58:a0:47:47:aa:fc:93:3d:00:00:1e:b0:44:57:f8:
         69:bd:91:50:4e:11:5e:0f:03:8e:1b:33:32:7a:04:4d:cd:4d:
         e5:29:27:8d:e9:e1:55:86:26:fa:df:73:72:4c:15:84:da:07:
         c9:6c:a9:6a:e6:c2:5e:21:c6:ed:18:00:10:24:63:e9:b0:a7:
         36:98:63:2a:54:74:65:32:fb:99:e5:62:d0:6a:f1:3a:e1:ed:
         9c:ad:33:d7:a7:a0:fe:f9:9f:54:7b:46:01:5b:90:97:83:e3:
         b3:e2:29:53:bd:21:d1:8a:67:0b:c3:7f:14:6b:10:67:5f:c0:
         78:86:64:bf:2c:b4:c8:e7:c2:e2:33:2b:4f:8a:02:a8:00:8b:
         98:21:54:53:9d:d6:36:3f:01:d0:57:24:60:a9:3d:7b:21:51:
         1a:b5:6d:70:02:75:fc:02:cc:d9:ac:04:af:17:25:eb:af:68:
         37:ec:31:f7:de:34:34:bb:40:28:45:64:09:31:cc:9a:f3:d8:
         fb:69:7d:64:90:62:bc:c7:39:8e:1f:40:3b:6e:ce:8d:be:60:
         0a:e4:33:3b:f7:06:75:a6:f5:c2:4a:13:b6:79:61:22:16:2b:
         2f:7c:5a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client