Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3231312e37392e36342e302f31392d3234203d3e2039363736.roa
File:                     3231312e37392e36342e302f31392d3234203d3e2039363736.roa (raw, json)
Hash identifier:          N3tL9+ZdLX+KslNSKP2nWNAdrx6qicxdFuQrfSxWsJc=
Subject key identifier:   4B:8D:E6:15:32:EE:D4:92:A2:54:D7:29:31:7B:E1:D6:8E:EB:E6:87
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       5F778682F55BDD8846F7E99214BD3F3FFF3EACFD
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3231312e37392e36342e302f31392d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 16:52:00 +0000
ROA not before:           Mon 11 May 2026 16:47:00 +0000
ROA not after:            Mon 10 May 2027 16:52:00 +0000
asID:                     9676
IP address blocks:        211.79.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:77:86:82:f5:5b:dd:88:46:f7:e9:92:14:bd:3f:3f:ff:3e:ac:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 11 16:47:00 2026 GMT
            Not After : May 10 16:52:00 2027 GMT
        Subject: CN=4B8DE61532EED492A254D729317BE1D68EEBE687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:55:3b:49:d5:75:b3:1f:25:6d:7b:c4:e9:
                    21:a6:91:46:4b:a5:50:a4:3e:c8:e8:1a:9f:53:d8:
                    bc:a0:6c:30:f6:c5:35:ca:3a:9d:8e:a8:23:4c:7a:
                    f0:6c:e6:39:85:2c:2e:4e:16:79:e8:8c:65:2c:90:
                    b3:74:6f:c6:34:48:b7:37:52:c0:96:17:9d:7a:e0:
                    bb:b1:64:47:ee:4f:a8:49:cb:3a:d4:28:c6:6d:cc:
                    ef:26:51:fc:cd:a4:24:49:7c:1d:6a:26:68:12:7b:
                    45:02:f8:85:65:19:b5:aa:e2:af:b8:2b:b2:f3:43:
                    ea:b7:0b:ce:f2:aa:c4:0c:35:1f:1c:6b:5d:3a:30:
                    57:ba:a6:8f:8d:c4:e7:0b:18:bf:3e:5e:cc:0e:d6:
                    05:e7:cf:e6:48:4a:6e:8d:57:f5:ea:63:70:3e:42:
                    42:ef:2f:88:55:bf:eb:6a:bd:3e:b0:7b:09:31:d9:
                    6d:f3:d5:f1:6c:8f:8e:5e:7f:c0:e4:17:1a:9d:4a:
                    16:d5:17:42:4e:47:21:f4:de:56:2f:a5:7b:39:ce:
                    ab:2a:bd:24:f1:c2:0b:db:4a:60:81:1f:a1:62:1b:
                    e4:34:4b:7e:e7:b1:b0:d3:e4:36:44:6d:ba:da:ce:
                    c3:a4:ae:bb:f7:35:22:55:1a:6d:bf:e7:cf:24:6b:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:E6:15:32:EE:D4:92:A2:54:D7:29:31:7B:E1:D6:8E:EB:E6:87
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3231312e37392e36342e302f31392d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:d5:f0:9a:6c:ce:26:e4:57:b3:30:c2:b1:54:93:13:72:
         35:0d:42:ed:5a:87:95:99:6c:22:0b:86:4a:f1:b2:9d:06:17:
         bb:4b:ab:70:90:d7:8c:b6:3e:ca:a4:55:79:1b:f6:b0:4e:18:
         87:a9:bd:15:c8:03:28:e8:c5:89:d1:97:2f:c9:31:47:8d:78:
         cf:20:a9:e0:cb:9a:c0:88:75:38:c9:d0:26:e0:b4:fb:1e:d8:
         7b:40:6a:bf:ea:a2:b4:85:67:29:4d:d5:a2:22:9d:5d:d2:6b:
         f0:c5:6f:99:22:f3:29:ad:96:bc:d5:55:a4:e7:0b:5c:81:45:
         b6:c0:70:1d:cf:e7:32:0c:b7:f1:da:42:ac:fd:c1:c2:c1:2c:
         86:1b:3b:a9:11:5f:ac:cf:2f:df:b5:a4:61:24:99:e1:db:1a:
         21:5c:0d:69:f6:02:8e:40:39:19:16:0f:5a:fd:2b:fc:f5:28:
         93:14:0f:3e:75:1a:a4:c8:c3:64:3d:1c:5c:9d:6e:0c:7b:4c:
         cf:1a:f5:b0:33:76:37:4b:43:e2:2a:b7:48:2b:d2:4e:a9:d0:
         7b:0e:e6:ae:73:fe:bb:1a:b2:35:74:58:0c:69:33:b8:f6:de:
         ee:4e:d0:58:8c:ac:7a:1e:91:6a:97:9d:6a:19:53:39:55:08:
         08:fd:33:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:54 2026 by rpki-client