Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa
File:                     3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa (raw, json)
Hash identifier:          NOssyf0cVbehU0NIrpbuxzGDevbFBHHPuCiEoYJfVaI=
Subject key identifier:   CE:D9:12:16:AF:47:71:4D:54:84:58:D6:1E:B2:BC:1D:C6:6A:62:32
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       62A6AC74527153989FC035948BD6168A8D2A05FF
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa
Signing time:             Sat 10 Oct 2026 15:44:02 +0000
ROA not before:           Sat 10 Oct 2026 15:39:02 +0000
ROA not after:            Sat 09 Oct 2027 15:44:02 +0000
asID:                     207550
IP address blocks:        187.79.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 18:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a6:ac:74:52:71:53:98:9f:c0:35:94:8b:d6:16:8a:8d:2a:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Oct 10 15:39:02 2026 GMT
            Not After : Oct  9 15:44:02 2027 GMT
        Subject: CN=CED91216AF47714D548458D61EB2BC1DC66A6232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7a:54:84:4b:eb:35:d5:0f:6a:f1:79:d4:4d:
                    7e:3c:1f:b6:c0:11:38:80:be:de:29:61:1f:5b:2f:
                    4d:61:72:00:69:98:af:61:28:6c:7d:a5:a8:2c:a8:
                    4c:14:8b:ce:7f:ec:2b:69:26:7d:d3:50:12:52:9f:
                    17:c6:44:ba:35:10:ea:f2:c0:bd:5f:03:ec:86:55:
                    09:6f:8e:2c:ab:37:a6:a6:4c:45:ea:97:4d:c6:a4:
                    98:d9:9a:f9:bc:4f:35:79:2b:36:cd:6e:a3:ea:29:
                    4d:01:08:45:a4:88:51:a7:b6:d8:7c:92:60:20:0c:
                    86:a3:73:e8:34:b0:4c:0f:54:98:18:fb:9f:1e:72:
                    46:7c:d2:1d:c0:5e:a9:1e:07:b8:1a:97:62:2c:3b:
                    47:9f:a3:6d:f6:16:bc:4c:4c:63:e1:b7:67:b0:05:
                    49:fe:12:2a:85:d3:13:e7:3d:68:0d:5e:25:86:c8:
                    43:b4:33:6a:a6:aa:79:2e:1b:65:1d:f7:aa:9b:61:
                    4d:b9:8d:ef:df:b8:f0:c8:ca:73:dd:5e:db:ed:b4:
                    e0:62:ca:03:9e:7a:08:67:54:18:77:d8:8b:77:75:
                    40:b3:93:25:72:62:aa:a5:5f:f5:c5:b4:bd:e0:be:
                    c9:7c:d0:8d:b3:2b:cc:51:c2:c8:0d:dc:39:b2:80:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D9:12:16:AF:47:71:4D:54:84:58:D6:1E:B2:BC:1D:C6:6A:62:32
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230322e302f32332d3234203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:34:37:00:1b:ee:d7:a5:53:cf:53:b5:51:c2:91:3a:14:fd:
         cc:05:4a:3f:5a:98:97:b6:0a:6d:90:4d:9c:d9:49:2e:09:40:
         f7:0f:01:92:e0:17:7e:c7:eb:f4:45:be:96:69:1b:dc:64:b6:
         fd:95:c0:81:1d:59:8f:0f:c8:1b:b5:97:9a:cb:f8:f7:a2:5e:
         dc:aa:31:76:e7:e7:9a:e1:ba:cb:63:a4:21:88:9a:7c:45:8a:
         03:da:de:74:6a:9b:e6:cd:dd:da:6d:cf:d4:1b:64:0d:26:fe:
         56:32:25:00:73:31:a9:15:53:ab:c8:15:13:32:9e:fa:14:a2:
         fb:31:cc:d3:d7:fd:f6:e8:51:80:8f:4d:9b:87:db:14:cf:8f:
         fa:d4:90:d0:ee:54:b0:0d:03:ad:b8:62:14:3c:7f:8f:51:02:
         d1:d5:88:28:23:15:96:d8:2c:6f:00:4e:1b:a0:cc:4e:23:42:
         79:aa:85:90:d0:e6:0c:e6:5d:df:b9:15:f7:b9:65:a3:34:55:
         76:e3:32:b4:08:d7:95:22:b6:b0:46:fc:56:db:88:31:e8:3f:
         f2:3b:a4:f6:69:a9:9a:c1:10:e6:e4:1f:84:a7:ba:52:80:5b:
         42:2a:95:d0:02:5c:81:03:a5:74:c4:d8:9f:a6:79:62:88:67:
         71:16:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:15 2026 by rpki-client