Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa
File:                     3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa (raw, json)
Hash identifier:          /oZGuwPpFGcw768MWvS17zp/YymCcKVkmo9U2+1EqUw=
Subject key identifier:   82:EE:E1:EB:7C:3F:B0:A7:2D:50:DC:F6:AC:F2:6C:32:62:FE:60:C8
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       1F9B439B4F457C071FF268299254DCEE90E0D905
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa
Signing time:             Fri 04 Sep 2026 13:44:00 +0000
ROA not before:           Fri 04 Sep 2026 13:39:00 +0000
ROA not after:            Fri 03 Sep 2027 13:44:00 +0000
asID:                     207550
IP address blocks:        187.79.204.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 13:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9b:43:9b:4f:45:7c:07:1f:f2:68:29:92:54:dc:ee:90:e0:d9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Sep  4 13:39:00 2026 GMT
            Not After : Sep  3 13:44:00 2027 GMT
        Subject: CN=82EEE1EB7C3FB0A72D50DCF6ACF26C3262FE60C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:08:23:8d:a6:b7:a3:fd:92:e9:cf:0d:8d:
                    90:88:c3:13:38:14:d6:57:2f:0a:b9:02:54:a5:a2:
                    b9:10:d2:3c:a7:46:c1:d5:3f:43:8a:a8:23:a8:f1:
                    95:63:1b:cd:88:36:36:e7:1a:c7:56:3b:c4:38:0a:
                    35:c5:97:aa:e7:92:53:99:d3:71:28:68:95:64:88:
                    66:98:b4:5d:98:ea:14:fc:47:98:ff:92:5c:dc:3f:
                    70:4f:63:0f:b0:2c:65:a8:31:25:46:c8:98:13:68:
                    26:96:86:a6:64:25:00:b1:b2:df:4d:06:eb:18:8c:
                    43:28:a1:11:80:58:26:6a:75:e5:65:b0:d6:39:39:
                    a1:9f:43:fc:5d:e7:5e:d7:bc:20:91:6a:63:b3:f3:
                    ce:6c:65:d4:d5:3c:12:7e:97:3b:62:0c:cd:67:79:
                    a5:c2:7e:72:43:20:76:fd:7b:55:38:15:b4:03:b4:
                    bc:74:cc:ac:bd:29:a5:5b:96:f7:55:95:ce:9e:34:
                    45:e5:82:17:8f:60:6d:92:57:e4:ba:58:11:50:93:
                    f0:d9:86:0a:87:83:5d:c2:9a:60:10:3c:fe:6b:71:
                    ca:b0:58:91:e6:c2:1b:3e:14:fd:49:8b:80:91:64:
                    5a:38:35:ba:ee:94:ab:77:7b:c5:6d:77:67:fe:06:
                    d1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EE:E1:EB:7C:3F:B0:A7:2D:50:DC:F6:AC:F2:6C:32:62:FE:60:C8
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230342e302f32322d3332203d3e20323037353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:00:a7:2a:de:0d:35:9e:53:4e:18:4e:8a:7a:f3:37:f3:a9:
         de:bd:d8:4b:1d:04:9c:69:0e:ab:73:75:81:6a:b3:13:00:2b:
         37:c7:f0:d4:90:66:b3:3d:77:56:a1:c7:b4:66:42:23:7b:3d:
         f8:5e:7b:e7:20:2c:53:06:49:75:6a:30:04:d8:04:50:00:99:
         8a:3d:76:fa:4e:c7:8a:1d:49:7a:2f:e0:2e:16:d2:c0:9e:b2:
         70:a5:e4:34:b2:a1:52:40:7e:0f:7b:c0:f6:3e:3b:5f:f1:58:
         45:c6:2f:68:7c:c6:d2:36:c0:12:fb:c9:4a:41:8d:39:44:1f:
         a8:b3:44:da:f2:0e:58:a8:ad:20:e9:e6:2e:e9:0c:f4:45:80:
         17:79:61:9e:4f:b3:f3:7d:64:f0:4d:d8:a1:aa:f9:f2:02:1a:
         05:52:d0:6e:de:d7:69:83:46:19:bf:13:fe:ca:5b:09:75:f9:
         9b:ae:47:4a:28:9f:7f:4e:34:77:69:93:b0:f5:c5:39:77:13:
         8b:6a:1e:12:6b:30:3f:99:f7:a3:96:74:bc:27:d8:68:4b:b2:
         76:73:4e:53:03:1c:35:22:13:14:0d:63:d6:55:f8:92:2c:19:
         a4:ec:25:34:6c:e7:92:61:a5:23:08:d2:21:62:ed:bd:af:81:
         fe:65:5b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:11 2026 by rpki-client