Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/36312e36332e3139322e302f31382d3234203d3e2039363736.roa
File:                     36312e36332e3139322e302f31382d3234203d3e2039363736.roa (raw, json)
Hash identifier:          p/WRuxyb2qwSYNp5jiF6j4JiThb4ksY4vSv4iwOdCQY=
Subject key identifier:   39:F5:BF:F6:A0:07:E5:7A:7B:F1:05:34:85:51:B8:59:03:2A:E1:3F
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       29EC095B12F99B3D709509CE9C236945CF6599AA
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/36312e36332e3139322e302f31382d3234203d3e2039363736.roa
Signing time:             Tue 12 May 2026 01:29:32 +0000
ROA not before:           Tue 12 May 2026 01:24:32 +0000
ROA not after:            Tue 11 May 2027 01:29:32 +0000
asID:                     9676
IP address blocks:        61.63.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:09:5b:12:f9:9b:3d:70:95:09:ce:9c:23:69:45:cf:65:99:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: May 12 01:24:32 2026 GMT
            Not After : May 11 01:29:32 2027 GMT
        Subject: CN=39F5BFF6A007E57A7BF105348551B859032AE13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:4e:c8:8f:68:bb:5c:ad:15:c7:65:f6:64:
                    35:ad:a5:fe:bc:88:a9:cb:c5:d0:8d:c3:bd:e6:cf:
                    e8:bb:66:13:34:54:39:bb:5d:47:80:ff:95:f1:5b:
                    8c:d8:0a:de:c1:75:8a:61:f7:be:d3:6f:27:d3:c9:
                    52:12:eb:3a:89:09:07:dd:80:dc:2b:ba:76:17:81:
                    34:ad:fc:2f:3e:97:11:44:cf:f4:98:87:77:0c:3d:
                    b2:d3:8c:8f:2c:a8:85:62:e4:ba:f3:52:5f:17:a1:
                    d4:6b:d8:c2:a4:af:51:7f:f6:73:9b:9e:0a:83:12:
                    15:31:7d:a7:d1:70:cb:2d:d9:63:a3:d7:eb:12:35:
                    19:c9:c8:58:43:e5:37:79:90:98:5f:d9:e2:3a:db:
                    0b:04:84:fa:09:64:3c:cf:15:ea:7c:93:cb:e2:82:
                    0c:d5:a6:f1:fd:a3:8c:82:b8:c3:cb:30:73:b5:32:
                    07:ca:21:c2:69:a8:00:2c:4c:66:db:e5:f1:b0:be:
                    d6:62:5e:23:b2:34:81:54:b4:23:99:70:08:86:5f:
                    5c:1c:80:83:17:18:a8:66:b1:1f:fe:24:f1:c7:f4:
                    36:7b:13:3d:f6:17:08:e2:49:29:e5:13:ff:25:8c:
                    56:e0:aa:b2:7e:eb:9a:ba:11:97:64:f7:17:aa:b3:
                    e5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:BF:F6:A0:07:E5:7A:7B:F1:05:34:85:51:B8:59:03:2A:E1:3F
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/36312e36332e3139322e302f31382d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.63.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:01:f8:fc:bc:74:92:7d:b7:07:be:15:06:be:16:df:4b:
         d1:56:f3:1e:b2:c2:c4:95:68:10:35:dc:13:79:1f:c8:ab:49:
         c9:21:7e:a0:7a:a7:e2:45:28:53:5d:e7:f1:4a:60:55:a6:3a:
         f2:48:92:98:81:2f:0e:aa:ce:89:71:cf:9d:7b:f2:30:9d:70:
         e9:5e:49:df:45:ce:f0:d8:36:58:f4:dc:e4:c5:9b:e6:c6:60:
         37:55:82:68:9a:2d:51:12:6c:3b:e8:53:c2:c9:a3:04:15:24:
         7d:77:65:57:fc:e9:67:55:a4:7e:3c:50:71:11:db:7e:ed:51:
         e9:1b:d5:7a:8a:69:d2:46:47:79:b9:14:a4:84:72:30:a4:0c:
         4e:17:d5:5a:87:3d:cd:5d:11:94:69:24:06:39:1d:ae:76:49:
         ac:63:b1:6b:d6:7d:cc:4b:5e:94:e3:ab:30:24:ea:11:e3:29:
         e8:21:39:9a:f3:c8:9d:74:08:83:15:f4:22:63:76:fd:c9:50:
         ce:8a:a8:1d:3f:4e:af:fc:b6:cc:8b:8b:7f:85:b0:c4:1d:f8:
         44:93:1d:25:0a:01:49:8d:6b:a0:92:de:95:82:9e:8f:e9:8b:
         59:9e:0e:e0:54:d1:6a:ce:e9:05:65:ed:cf:12:8b:25:a7:4d:
         4c:2c:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:17:53 2026 by rpki-client