Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3231312e37332e302e302f31392d3234203d3e2039363736.roa
File:                     3231312e37332e302e302f31392d3234203d3e2039363736.roa (raw, json)
Hash identifier:          6qNO14wWt6lhEqFC7VwR3PWicRRF8mzrB+KtGG3P5rE=
Subject key identifier:   63:3B:9D:0E:B2:98:97:A8:39:4A:96:48:02:EB:5E:5E:3B:85:F2:DB
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       597CAC0BF862DECAEA7DDCD8191F9F1BA60F501C
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3231312e37332e302e302f31392d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 16:52:00 +0000
ROA not before:           Mon 11 May 2026 16:47:00 +0000
ROA not after:            Mon 10 May 2027 16:52:00 +0000
asID:                     9676
IP address blocks:        211.73.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7c:ac:0b:f8:62:de:ca:ea:7d:dc:d8:19:1f:9f:1b:a6:0f:50:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 11 16:47:00 2026 GMT
            Not After : May 10 16:52:00 2027 GMT
        Subject: CN=633B9D0EB29897A8394A964802EB5E5E3B85F2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:dd:e4:97:74:56:af:37:8c:c8:1a:a9:22:
                    7f:a2:ed:d9:a0:0e:de:ae:51:8e:2a:d8:f7:fd:82:
                    81:3d:30:db:66:72:6d:07:b1:78:6e:b7:4a:38:49:
                    83:6e:f3:f9:a6:b4:1c:0c:b2:3e:83:ba:90:e3:79:
                    dd:0a:d0:13:7e:f2:76:73:83:99:b8:f2:05:4c:e9:
                    c3:aa:e5:a8:9b:15:12:69:4d:b0:de:b8:cc:ba:96:
                    32:3f:5a:52:75:b7:c6:10:dd:0f:e8:df:d8:1d:79:
                    31:99:14:74:c9:cf:69:01:b0:32:e0:67:8d:77:b6:
                    5b:ba:8c:75:77:6e:49:e1:d2:6b:42:ef:c2:a0:42:
                    78:a0:d7:18:66:e8:4e:da:e9:8e:85:17:f2:2b:93:
                    49:cf:f9:21:98:ff:fc:e1:3c:8b:73:d4:f6:21:6e:
                    13:b1:35:da:12:f5:54:6b:ca:8a:be:95:3d:9d:62:
                    c1:96:b2:8f:11:7a:99:cc:84:ac:02:35:2c:18:38:
                    49:56:52:82:e0:6c:ae:b3:38:8f:e7:db:ea:0f:ca:
                    32:58:00:10:a5:8b:93:72:17:36:2a:5a:72:7f:ad:
                    bd:b3:14:28:f2:ac:4d:36:72:91:8f:9c:c0:8c:03:
                    42:88:8f:19:7d:b2:f4:95:f8:5c:69:09:83:98:6e:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3B:9D:0E:B2:98:97:A8:39:4A:96:48:02:EB:5E:5E:3B:85:F2:DB
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3231312e37332e302e302f31392d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.73.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:26:b7:76:c5:d9:d6:bb:9b:88:db:74:31:50:cd:4b:09:ac:
         c9:fe:1a:0a:84:bf:d1:59:86:ab:0f:d0:22:01:64:65:17:7b:
         80:a6:63:d3:14:52:1b:0d:5d:5d:13:51:66:e0:10:5e:73:7f:
         0f:05:ac:2b:30:58:6e:3b:7b:e9:8d:d6:87:0e:7d:cc:c0:15:
         61:35:bc:71:3c:1d:f7:2f:5f:90:e4:a7:22:21:4d:d4:07:1b:
         64:c2:05:bc:94:ca:53:19:79:e1:1d:2b:6f:a5:ed:b9:cd:1d:
         19:e7:23:7f:8a:01:be:f5:24:a9:ab:15:4b:0b:f9:cd:d5:b7:
         b5:5e:fc:a2:82:e8:3f:eb:31:d0:9a:d6:01:ef:3a:c1:85:67:
         10:1f:d4:5a:fc:d2:8e:fb:a0:0e:86:88:2c:bc:30:d9:71:3d:
         0b:2d:d2:98:1f:1b:59:e8:4d:60:ae:a3:42:c5:2f:5d:07:88:
         74:ce:84:5a:2b:3d:c6:5d:f5:36:16:28:02:e2:11:01:e8:ea:
         37:13:dd:67:2b:79:ff:da:67:7d:71:f5:2d:ef:2b:b4:64:85:
         58:b0:30:a8:8a:8f:68:fc:9d:0b:f5:f4:29:4c:d8:f8:8c:80:
         55:28:1c:9d:dc:9a:ea:f5:b5:0a:5a:55:66:f4:6a:3b:05:0a:
         70:d9:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:54 2026 by rpki-client