Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/36312e35382e3139322e302f31382d3234203d3e2039363736.roa
File:                     36312e35382e3139322e302f31382d3234203d3e2039363736.roa (raw, json)
Hash identifier:          uckDIrhX0gia7QJNxEAYNt31JsdY2N+zZHtQ9UsKPDw=
Subject key identifier:   6F:91:06:F7:1A:90:EF:62:83:72:3F:BD:8A:B9:1A:97:F2:70:E8:5A
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       069CC0E3EA55C78495AEFC8112D5435E51210B89
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/36312e35382e3139322e302f31382d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 16:52:02 +0000
ROA not before:           Mon 11 May 2026 16:47:02 +0000
ROA not after:            Mon 10 May 2027 16:52:02 +0000
asID:                     9676
IP address blocks:        61.58.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9c:c0:e3:ea:55:c7:84:95:ae:fc:81:12:d5:43:5e:51:21:0b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 11 16:47:02 2026 GMT
            Not After : May 10 16:52:02 2027 GMT
        Subject: CN=6F9106F71A90EF6283723FBD8AB91A97F270E85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:ed:90:0d:46:98:d2:1f:ed:3b:f5:5b:db:
                    3c:c0:4f:cd:47:7e:fc:0b:c9:20:02:22:93:84:ba:
                    f8:2f:e1:ef:3a:61:61:95:0c:ea:7f:09:39:f0:72:
                    76:4a:0b:03:fe:94:2d:fc:b5:66:2d:16:05:5b:91:
                    7c:19:6b:85:8d:36:04:ec:9c:3a:2b:8a:17:c9:7e:
                    96:4a:a9:27:e8:6c:7b:34:38:f3:99:41:1c:75:d9:
                    f5:c2:74:ea:f0:04:fe:5e:9e:39:09:61:b1:ad:3d:
                    37:68:4b:50:51:f1:db:ce:36:e6:07:42:4f:21:38:
                    21:9e:35:c1:0d:f4:ce:4d:34:dc:fe:9b:eb:ac:e3:
                    30:2e:4b:2d:8e:21:68:59:c6:92:e2:8c:26:32:82:
                    48:e0:3b:e0:2c:e7:2e:17:f6:73:e7:42:b2:98:25:
                    c6:52:a5:92:0d:9f:8f:3b:b3:ff:d8:bc:e8:34:b7:
                    41:68:ff:64:cc:0c:4e:c6:98:54:f9:8b:1d:99:c2:
                    24:f2:09:a6:bc:5a:b5:e1:e5:99:b0:85:7d:87:93:
                    d2:2b:3e:c9:0d:31:e8:1c:d8:0c:e8:7a:6a:f1:e2:
                    3d:da:5c:6f:c9:c7:0a:b1:e4:f1:72:7d:2f:07:f9:
                    92:b4:48:c4:27:3b:9e:95:85:c8:e4:68:02:87:64:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:91:06:F7:1A:90:EF:62:83:72:3F:BD:8A:B9:1A:97:F2:70:E8:5A
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/36312e35382e3139322e302f31382d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:bb:c9:fa:8e:f9:0c:e7:f6:90:f3:67:6e:72:a6:f4:d0:
         ce:3e:11:05:62:e6:e5:5a:6c:90:ae:e1:03:b4:6b:c7:22:ab:
         f7:48:e7:47:c7:7b:b0:90:52:ce:25:e8:fa:9e:6c:d4:60:de:
         eb:88:9c:ad:ea:19:8d:20:0d:9a:35:ae:6a:56:bc:51:c3:29:
         8b:83:0e:42:37:31:9a:b7:24:27:18:3c:be:54:31:4a:34:56:
         24:e4:d0:b4:f3:ec:01:6f:32:62:48:e4:94:db:d0:18:57:4b:
         11:62:fc:b9:a9:92:f5:5e:02:15:88:da:b6:2b:b6:7a:6e:36:
         b5:e0:ae:db:5a:a6:84:61:8f:7d:43:5d:8b:f1:df:9a:f6:b5:
         a1:52:b8:a1:a3:cd:88:7d:65:01:cc:b5:8e:a4:db:28:dd:b9:
         c8:21:38:b7:33:0c:15:7c:70:57:ae:87:25:50:ae:b3:fa:67:
         89:1c:97:c9:27:cd:77:84:45:7c:20:2c:0d:30:e2:8c:ff:c8:
         75:ab:bb:cf:7c:0b:dc:8f:e7:7e:f1:c6:07:92:ef:04:4d:f1:
         56:69:a4:04:dd:b9:60:0b:d6:ff:ad:03:35:4e:d2:4e:50:e3:
         a3:e4:76:83:56:65:d9:c0:cc:ad:3e:c3:de:c0:b7:2c:f8:ba:
         28:95:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client