Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa
File:                     3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa (raw, json)
Hash identifier:          AecfZvbYsfuauKIcssxsMVDFnJB/KY/arLkgaP766g8=
Subject key identifier:   D4:9F:35:65:E7:47:11:82:87:E9:6F:14:6A:A2:91:58:E4:CE:EB:CD
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       7BE14EB4DB849767F495612A348D0FF221A60E56
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa
Signing time:             Thu 06 Aug 2026 09:44:00 +0000
ROA not before:           Thu 06 Aug 2026 09:39:00 +0000
ROA not after:            Thu 05 Aug 2027 09:44:00 +0000
asID:                     207550
IP address blocks:        187.79.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 13:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e1:4e:b4:db:84:97:67:f4:95:61:2a:34:8d:0f:f2:21:a6:0e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Aug  6 09:39:00 2026 GMT
            Not After : Aug  5 09:44:00 2027 GMT
        Subject: CN=D49F3565E747118287E96F146AA29158E4CEEBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7f:7c:31:b3:e5:4f:4e:ee:27:00:98:92:82:
                    e6:04:32:16:1f:84:10:c8:c5:18:99:ba:0d:74:28:
                    1a:ef:6c:92:21:2d:ca:33:f3:da:66:e9:0d:7b:8f:
                    4d:21:2d:ab:c7:bc:c3:93:20:2e:1f:c8:69:80:af:
                    05:6e:05:ae:a7:0e:b3:60:96:a0:42:a2:83:c2:bc:
                    f0:3e:3f:a3:09:40:db:8b:99:ca:b7:a3:e5:07:b7:
                    f6:61:ae:a9:61:94:38:18:20:ef:77:2e:dc:d9:0e:
                    78:db:71:e7:ac:52:4a:17:fa:70:16:14:a9:ad:4d:
                    ab:bc:7b:06:ef:a2:be:e7:84:84:4b:ec:70:da:57:
                    9c:a3:df:03:eb:65:50:6a:5c:16:f7:e5:df:52:e6:
                    47:b2:91:63:4a:e3:70:20:dd:a2:1a:a2:4e:b3:ff:
                    b6:6f:08:fc:17:96:8e:04:9e:1f:5b:f1:a6:0c:03:
                    48:40:d7:8d:5d:72:12:54:de:08:ea:4a:8d:1b:ae:
                    8f:9d:2e:9a:e6:dc:40:40:82:18:23:19:d0:55:59:
                    d1:1c:7a:1d:0a:64:f8:9c:a0:14:fb:4c:4d:39:18:
                    57:c3:cd:7e:2f:0e:c4:48:dc:16:e0:3b:04:e2:f7:
                    5d:2a:41:01:69:12:88:01:7d:23:e9:7a:2d:c3:cd:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:35:65:E7:47:11:82:87:E9:6F:14:6A:A2:91:58:E4:CE:EB:CD
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3139362e302f32322d3332203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:99:1d:7e:1b:a2:8c:3d:34:a6:25:c8:4d:14:c7:9c:9d:0b:
         61:ac:2f:5a:4a:2a:5f:b6:95:4d:65:3a:eb:53:46:0b:06:c0:
         f9:e4:1f:75:2d:85:78:cb:15:4d:70:bc:56:1c:7b:75:cc:57:
         42:98:4f:16:a3:51:93:26:9a:d9:90:6d:bf:c7:a0:3b:55:93:
         96:10:5f:3b:e9:3b:15:de:25:5d:b4:e4:c9:7a:4a:03:e8:4f:
         c2:9c:68:ed:47:b7:f8:4b:04:5f:7b:b2:03:c0:ae:7f:17:be:
         f3:83:84:4a:96:11:f6:33:8e:8a:0e:7f:9a:88:d7:7f:e1:f5:
         ce:32:18:da:c1:9b:ed:82:2a:75:b2:92:75:11:fa:90:20:98:
         15:60:04:38:0a:0a:da:7e:49:58:cb:5c:be:69:17:8f:c7:66:
         a0:e8:08:5a:bc:b4:aa:7c:5e:6f:c6:62:62:07:b7:92:f0:eb:
         5b:9c:37:b5:a7:4d:0f:78:2e:38:9d:6d:ef:99:b9:e7:7a:8d:
         84:bc:29:d0:9f:57:26:8c:aa:14:6b:f0:a2:f8:4b:f1:0e:c1:
         e7:f8:93:5d:1d:ba:88:a3:94:dc:3c:69:e5:d4:5c:77:83:5d:
         5c:67:27:3a:43:d9:1b:7b:ff:a5:77:f9:88:e1:fd:26:4b:d4:
         4d:bd:c9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:13 2026 by rpki-client