Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa
File:                     3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa (raw, json)
Hash identifier:          JI4So8ZhAPE0PToBNtuSCn4oQjqoqDXKjENSD5r0Aa8=
Subject key identifier:   1C:21:20:1F:5C:74:15:0E:53:B0:0F:E7:C7:59:2B:97:13:8B:3E:81
Certificate issuer:       /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
Certificate serial:       293A89B6232598D0FF4FA4832313C98432A9D5C0
Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa
Signing time:             Tue 25 Aug 2026 09:44:01 +0000
ROA not before:           Tue 25 Aug 2026 09:39:01 +0000
ROA not after:            Tue 24 Aug 2027 09:44:01 +0000
asID:                     131151
IP address blocks:        187.79.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 13:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3a:89:b6:23:25:98:d0:ff:4f:a4:83:23:13:c9:84:32:a9:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50
        Validity
            Not Before: Aug 25 09:39:01 2026 GMT
            Not After : Aug 24 09:44:01 2027 GMT
        Subject: CN=1C21201F5C74150E53B00FE7C7592B97138B3E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:68:b8:8e:00:7c:2e:32:29:c7:a7:df:2d:
                    08:2e:61:5c:e5:1e:ba:6d:f3:3b:4e:18:fa:dd:c0:
                    7d:ad:47:21:01:8c:40:d8:b8:17:ec:42:71:74:62:
                    31:16:ce:74:05:4e:a2:4e:71:01:0b:e0:41:66:1f:
                    cb:71:b7:49:8e:9e:b8:f2:86:44:5f:83:6a:64:b7:
                    af:23:22:c9:94:48:e7:e6:63:34:9a:e7:1c:d7:40:
                    1f:c3:a3:41:c1:f2:c6:0a:0b:2b:82:93:fb:0b:ce:
                    7a:7d:27:30:77:6a:8e:b2:e4:80:ab:68:ca:5f:16:
                    af:dc:ce:55:3e:b4:17:ef:c0:2b:0a:9c:18:16:24:
                    d9:d7:af:eb:f8:7a:63:99:70:9d:39:ea:47:e4:25:
                    5b:ee:bd:44:93:80:b1:a3:ef:77:94:74:17:d3:55:
                    2c:12:d3:33:f1:85:af:eb:04:b6:50:f0:66:62:8d:
                    c9:2c:a2:9e:81:7a:d3:15:a9:00:e4:31:8f:4a:f9:
                    3a:3c:64:d5:59:8d:b6:b5:19:7c:53:1a:7b:b9:1b:
                    fa:bd:e6:4e:07:51:dc:e4:8e:ca:7b:cb:e2:7e:77:
                    6a:34:51:56:80:98:63:0e:fa:af:de:ed:5b:57:59:
                    b8:0d:70:03:7b:77:f1:e4:23:01:5f:2e:fe:00:fc:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:21:20:1F:5C:74:15:0E:53:B0:0F:E7:C7:59:2B:97:13:8B:3E:81
            X509v3 Authority Key Identifier:
                keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32342d3234203d3e20313331313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:04:6f:8a:7b:6f:b8:6c:06:c2:7c:84:5b:6e:0d:7d:6e:6c:
         c8:dd:ff:5f:6f:2f:73:9c:6b:e5:fb:38:f0:ba:ac:5e:33:69:
         5e:d2:a8:16:f6:0e:c9:c5:d5:d8:5c:26:19:42:48:76:f9:36:
         93:56:94:90:5d:63:76:b8:7a:03:13:04:87:da:e4:ce:e3:85:
         53:72:d0:9e:2e:30:ff:e5:34:0c:36:b9:5e:ca:10:f3:68:63:
         49:9d:3f:9c:ea:26:bf:af:05:a9:23:fb:43:6e:5e:82:1a:20:
         6e:8e:bf:05:3a:bf:18:77:74:e0:97:18:9f:13:c7:e8:e2:5b:
         55:e4:80:38:1b:78:ad:9a:b8:15:eb:df:95:03:ea:21:01:86:
         eb:c7:c8:01:63:f4:57:18:6e:e1:7d:52:fc:3d:48:0c:42:95:
         62:cb:64:60:73:2d:c9:bb:e0:28:ad:26:c6:22:53:f5:5b:5c:
         95:72:82:7a:fe:b4:cd:1a:e9:80:e4:39:dd:59:38:5f:21:c0:
         78:18:46:5e:49:85:9c:63:26:b6:71:c4:b5:d1:6f:bd:96:7f:
         2b:c9:e1:3c:0d:4f:f2:c3:3d:14:7d:d0:d3:c7:7f:d3:81:8d:
         c7:96:7f:1b:c2:67:53:eb:91:d4:e3:3e:ac:f7:fc:0f:04:dd:
         98:0f:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:15 2026 by rpki-client