Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/32372e3130352e3230362e302f32342d3234203d3e203435343734.roa
File:                     32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (raw, json)
Hash identifier:          9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=
Subject key identifier:   44:50:C8:0A:F9:7B:06:D2:EE:EA:45:88:52:C1:15:BF:B3:C3:BC:5A
Certificate issuer:       /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial:       5CAFDB71E47B79993D697DE5991ECE92EE131F19
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e3230362e302f32342d3234203d3e203435343734.roa
Signing time:             Mon 11 May 2026 17:18:54 +0000
ROA not before:           Mon 11 May 2026 17:13:54 +0000
ROA not after:            Mon 10 May 2027 17:18:54 +0000
asID:                     45474
IP address blocks:        27.105.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl
                          rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:af:db:71:e4:7b:79:99:3d:69:7d:e5:99:1e:ce:92:ee:13:1f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
        Validity
            Not Before: May 11 17:13:54 2026 GMT
            Not After : May 10 17:18:54 2027 GMT
        Subject: CN=4450C80AF97B06D2EEEA458852C115BFB3C3BC5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:7b:52:af:a8:62:e3:ab:22:2a:ac:5a:c5:
                    c5:a6:2b:16:d2:78:a1:81:28:47:99:ed:fa:42:7b:
                    ad:6e:db:f2:9e:22:d6:d7:5a:71:9e:77:62:c1:a4:
                    a0:2c:f5:5d:c9:2a:3b:4e:df:f1:76:ec:3d:8c:74:
                    67:d5:c2:a0:43:0b:f0:87:3e:a6:77:eb:a9:4a:25:
                    42:b0:86:a5:1f:d5:e3:76:c5:f7:07:91:48:d5:f7:
                    b9:0e:98:46:ef:f9:cc:50:06:ee:c0:ab:13:7d:e9:
                    de:69:23:32:eb:24:55:e9:ef:80:b1:38:a4:13:a1:
                    31:a5:f6:fa:22:64:97:c8:25:c3:a4:8c:36:21:92:
                    5f:a4:34:7e:d1:6d:02:45:84:31:f8:c8:cf:36:63:
                    a2:75:9b:7b:1f:22:97:c2:ab:51:d3:91:e1:b8:21:
                    ad:64:fc:b4:cd:b2:02:24:5a:f7:8a:91:c0:e9:04:
                    6f:25:0e:1f:c1:c6:fa:53:ce:4d:74:60:86:08:ed:
                    98:76:be:31:89:9c:98:2f:d2:7f:ad:79:6f:5b:93:
                    4b:de:13:b4:9a:18:89:45:a8:4a:6a:ff:ea:df:45:
                    0d:7e:21:9a:22:41:a6:9f:f7:ce:bd:c2:be:a2:6a:
                    fb:19:78:cf:f6:bb:4f:b9:61:1e:26:de:9a:90:a5:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:C8:0A:F9:7B:06:D2:EE:EA:45:88:52:C1:15:BF:B3:C3:BC:5A
            X509v3 Authority Key Identifier:
                keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/32372e3130352e3230362e302f32342d3234203d3e203435343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.105.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:cb:f7:47:a4:11:7b:14:18:bb:50:18:91:d6:02:5e:57:
         61:c8:11:75:97:cb:85:6d:20:28:8f:bf:e1:bb:e1:84:22:20:
         18:2d:16:c8:e9:12:ac:60:61:60:39:df:34:74:d5:14:38:cf:
         26:9c:77:0f:a4:73:53:23:43:ec:6f:4c:ed:8b:c6:d6:eb:ce:
         1e:b2:d4:c3:bb:2c:39:5e:b3:b7:e5:f6:46:78:bd:67:29:f6:
         44:b2:d9:03:98:e2:73:be:4f:c4:1e:d9:32:5b:22:c9:7b:f6:
         f0:a8:27:82:29:77:eb:c3:27:5e:f6:2e:80:42:02:6f:88:a0:
         dd:42:9d:c3:78:e0:10:d3:5a:85:b6:55:a5:bd:0e:39:e2:04:
         43:b9:15:8a:d2:9e:d0:51:10:d7:de:83:be:7e:13:af:1e:04:
         19:13:a3:3f:76:39:64:06:0b:57:be:60:24:40:9a:91:67:6c:
         3a:12:13:64:1f:c7:13:f9:65:f1:d1:bc:34:30:2f:05:fc:d4:
         d8:61:d2:bd:44:7c:51:c9:b9:78:ce:42:a4:54:de:d3:4a:02:
         e2:2c:aa:c8:d0:18:8d:dc:07:17:ef:45:1a:19:5d:75:1c:44:
         e8:c4:f2:96:f6:db:3c:e8:e6:c4:77:32:2a:10:b7:f9:a5:cc:
         c0:ee:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:16 2026 by rpki-client