Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa
File:                     3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (raw, json)
Hash identifier:          cEL/qqW8AxdpUhIJjikrpkqLptxf7B6Y/UVTTWxH9Rw=
Subject key identifier:   53:51:7B:BC:FC:DC:3B:64:D0:C1:DA:90:EC:16:9F:FF:3B:7D:5B:A2
Certificate issuer:       /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial:       5A0E95CFADC727CFDDEC3458BA614EF00C67ED39
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa
Signing time:             Mon 11 May 2026 16:41:48 +0000
ROA not before:           Mon 11 May 2026 16:36:48 +0000
ROA not after:            Mon 10 May 2027 16:41:48 +0000
asID:                     18419
IP address blocks:        180.214.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0e:95:cf:ad:c7:27:cf:dd:ec:34:58:ba:61:4e:f0:0c:67:ed:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
        Validity
            Not Before: May 11 16:36:48 2026 GMT
            Not After : May 10 16:41:48 2027 GMT
        Subject: CN=53517BBCFCDC3B64D0C1DA90EC169FFF3B7D5BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:0f:5a:3c:23:84:07:2a:56:03:62:c1:64:
                    b3:f1:44:bd:fa:fb:90:7f:e6:48:e1:15:6e:48:46:
                    14:9e:61:40:c0:b7:4a:61:9d:7c:33:0a:6e:5f:15:
                    58:c1:cc:2b:06:c8:c9:1d:38:cf:ab:2c:a4:6f:b5:
                    03:ad:67:ef:63:90:97:88:d4:41:ab:b9:0e:42:79:
                    c6:d9:46:f9:b6:93:e5:34:d3:e9:0a:6e:90:40:eb:
                    93:09:25:22:9c:b9:3c:ca:76:00:cc:16:69:96:8f:
                    36:5a:db:68:58:79:f3:ce:a2:c7:d5:d2:98:e2:5d:
                    26:63:12:b6:4d:5b:69:53:bc:75:36:e1:29:95:4c:
                    d6:ab:91:9a:bf:5c:8f:19:4e:c1:c6:9a:46:d5:b2:
                    ec:00:11:8d:af:52:3c:24:eb:10:fd:5b:86:8a:71:
                    e4:f6:6f:e6:e0:55:f4:ef:5f:9d:7b:65:e1:a7:1a:
                    1e:5b:9e:c7:3a:78:ac:20:c9:2c:1f:71:12:c6:4c:
                    4c:20:05:6c:4a:95:06:66:b0:2b:33:27:57:95:b9:
                    82:3f:2d:49:46:09:91:5d:e3:09:ea:67:45:54:bd:
                    ab:54:99:30:78:3e:f7:ee:81:aa:d4:d1:07:eb:91:
                    0a:6c:d9:3c:33:13:58:c7:9e:ba:c0:8b:c1:fa:c3:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:51:7B:BC:FC:DC:3B:64:D0:C1:DA:90:EC:16:9F:FF:3B:7D:5B:A2
            X509v3 Authority Key Identifier:
                keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:e3:0a:11:f5:69:9f:9d:eb:31:b0:21:08:00:77:0f:84:
         47:20:29:b2:fd:34:5f:78:71:b1:e4:11:80:4d:b4:a8:a8:2e:
         96:ce:72:59:72:95:a1:4c:bf:dc:d7:66:54:ea:e6:34:31:a3:
         d7:51:e2:26:ea:82:6f:f1:17:39:b8:80:fc:72:73:29:dc:9e:
         83:cf:e9:94:21:f6:be:55:42:ad:6e:99:65:71:59:cb:79:de:
         c4:e6:2b:57:19:af:58:8b:3b:cf:8e:80:8a:02:00:9c:53:57:
         ca:6c:d6:39:af:0c:38:70:cb:6c:37:b1:ca:88:37:e5:28:fb:
         1a:6c:25:40:9c:6f:93:75:fd:53:05:bc:90:99:1a:7c:89:8a:
         a8:e8:32:f2:94:6d:f9:e4:4f:95:3d:49:be:3f:5a:73:de:bb:
         f6:64:7a:de:39:e1:d7:ed:be:c4:74:03:a3:97:ef:4a:25:d3:
         5b:2b:77:b3:dc:08:9e:ef:8b:83:18:17:c9:c1:69:d6:cf:96:
         f7:69:66:47:38:ac:4f:ae:7f:c5:cf:8a:03:e3:ba:74:5b:3b:
         32:2d:a5:db:fc:2c:ac:f9:95:65:46:6a:35:b7:be:48:bc:61:
         db:a0:95:12:db:a0:f1:db:87:ca:60:d5:3c:1e:5c:fd:66:d3:
         72:5c:80:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:30 2026 by rpki-client