Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa
File:                     3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          frrJ9Ax263gLZQyLPtTtkUx1W9FWOWmh3CFY/OBqnQA=
Subject key identifier:   1F:5B:EE:7F:C2:2B:79:78:82:1D:34:8D:52:BB:3B:F4:1C:08:92:80
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       5A580C50BFA220B48D5DC483C8E0E0171F798B7A
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:40:34 +0000
ROA not before:           Mon 11 May 2026 17:35:34 +0000
ROA not after:            Mon 10 May 2027 17:40:34 +0000
asID:                     134823
IP address blocks:        211.76.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:58:0c:50:bf:a2:20:b4:8d:5d:c4:83:c8:e0:e0:17:1f:79:8b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: May 11 17:35:34 2026 GMT
            Not After : May 10 17:40:34 2027 GMT
        Subject: CN=1F5BEE7FC22B7978821D348D52BB3BF41C089280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:3b:d8:71:18:d8:a5:10:74:36:6a:24:ad:
                    c8:43:66:8c:ab:52:be:a2:d8:4b:1d:ff:0c:fc:6f:
                    cd:74:23:a4:c9:15:d5:33:a5:e5:03:6a:16:26:e2:
                    4d:d7:15:65:37:66:d6:5a:89:b4:c7:60:95:1b:c9:
                    84:d3:73:8b:99:03:a0:f8:55:ba:40:83:9a:4f:18:
                    ad:79:a8:eb:2b:6f:94:4e:95:8e:01:17:56:f6:75:
                    c4:87:ee:10:bb:c6:e2:87:c8:84:d4:cf:b3:4e:f2:
                    be:ef:63:e1:44:83:59:55:1e:89:ed:d9:54:8a:bf:
                    f0:ab:99:9b:88:2c:2c:ae:7a:46:91:31:6b:bb:d9:
                    da:77:c5:6d:68:f0:8f:13:17:73:cf:6e:2d:ec:30:
                    6a:89:8c:94:92:46:4e:18:2d:c5:1e:a6:26:4d:06:
                    cf:1c:d8:cb:1c:71:40:dd:53:df:e7:7d:b2:91:f2:
                    69:f8:fd:a4:1d:8a:ff:9f:7a:dd:40:c6:e0:01:1b:
                    10:71:b4:96:57:eb:08:5a:84:ca:f1:05:6a:ef:99:
                    d2:46:d4:c0:be:25:f9:fe:e1:e9:52:2c:79:b9:b7:
                    a3:2d:f8:04:b7:e7:b6:9b:12:a0:2a:83:3a:02:a8:
                    eb:be:ea:e1:c4:a0:55:1e:74:57:b9:67:94:1d:09:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5B:EE:7F:C2:2B:79:78:82:1D:34:8D:52:BB:3B:F4:1C:08:92:80
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3231312e37362e3138362e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:fc:a7:f1:9f:4e:40:69:a2:00:05:b9:b5:c7:72:2a:d4:aa:
         40:20:1f:d9:d7:da:44:af:0a:f4:95:d3:e8:ae:94:b7:77:c0:
         e0:85:a5:02:61:58:d7:e2:49:a1:44:28:7a:7f:49:b8:15:47:
         f3:7a:b7:fc:19:e0:52:18:0b:ce:0d:cc:b0:9f:7f:35:a5:f8:
         de:49:bd:89:50:b4:ae:c4:d3:f3:09:de:05:d4:37:e2:06:66:
         0e:e1:a0:2d:2c:5b:bc:0e:b5:5f:1e:f1:a1:91:4a:38:59:ca:
         29:5e:a3:96:79:d2:29:38:f8:f9:8a:f5:64:fe:a6:3a:ac:85:
         e9:8a:e2:26:ba:da:06:5a:d7:96:8a:ef:af:85:60:28:ff:26:
         fb:92:01:9a:63:e4:08:2d:80:b7:61:37:b2:bf:fd:16:aa:d3:
         89:5d:a6:49:12:12:30:57:f8:64:e0:d5:d0:d7:28:7e:db:d7:
         d6:fe:b9:ea:82:d8:50:b4:61:fe:20:d8:12:49:0e:23:46:08:
         3a:b7:2f:d4:99:57:a9:28:e9:51:8a:91:44:0a:5c:81:a5:76:
         d4:06:a9:d1:92:4a:f3:7c:a8:49:92:bf:79:0e:75:23:e6:8a:
         94:40:d5:d4:f0:9d:69:f4:04:0b:b8:72:21:68:f9:7a:ca:c6:
         a3:9a:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:17 2026 by rpki-client