Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3132332e39392e33322e302f31392d3234203d3e203234313538.roa
File:                     3132332e39392e33322e302f31392d3234203d3e203234313538.roa (raw, json)
Hash identifier:          REH1wtOH0fBnoZFNvrJOcVulUB7T1dv6LfvQjDtR3w8=
Subject key identifier:   0C:84:C0:9C:12:B6:25:45:24:73:F2:C4:F1:94:67:32:A6:42:60:83
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       1472FE9A9EBF8BD073B4C11479ABE0FF21B2D787
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3132332e39392e33322e302f31392d3234203d3e203234313538.roa
Signing time:             Mon 11 May 2026 16:13:45 +0000
ROA not before:           Mon 11 May 2026 16:08:45 +0000
ROA not after:            Mon 10 May 2027 16:13:45 +0000
asID:                     24158
IP address blocks:        123.99.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:fe:9a:9e:bf:8b:d0:73:b4:c1:14:79:ab:e0:ff:21:b2:d7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 16:08:45 2026 GMT
            Not After : May 10 16:13:45 2027 GMT
        Subject: CN=0C84C09C12B625452473F2C4F1946732A6426083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:26:39:82:7a:b5:45:af:31:a2:1c:50:7a:
                    7d:3a:a2:0d:15:4a:d1:4a:11:78:a0:f9:bb:29:51:
                    75:33:cf:1a:20:cd:2a:2d:7d:b2:75:05:87:0f:42:
                    46:fa:5b:c8:fd:b5:27:dd:7c:57:cb:9b:41:c5:6c:
                    92:c2:38:5c:08:3f:02:d3:cd:52:88:97:bf:20:dd:
                    d9:56:76:ad:fa:5b:2c:56:4e:44:ac:70:ba:d2:fb:
                    7d:c0:fb:43:ef:c6:12:51:f2:8c:c5:33:89:5f:94:
                    80:44:08:c8:6a:e1:30:90:03:2e:76:c3:8b:f9:ed:
                    76:9d:10:f9:f3:14:f9:7f:3d:83:91:e3:1b:54:4c:
                    05:64:aa:55:da:ad:04:b0:cd:b6:2f:e2:25:79:05:
                    2e:54:8b:b4:0d:8f:ec:84:0f:87:f6:39:b0:bf:91:
                    55:cc:98:90:f7:0b:45:80:08:6d:fd:5a:96:10:80:
                    57:ac:da:88:4e:23:7c:02:37:63:99:8a:68:06:15:
                    46:c2:2a:e7:22:24:32:7e:2c:37:03:69:89:a7:12:
                    0f:98:04:8b:dc:fe:52:db:6f:02:54:65:54:53:37:
                    c6:69:38:c9:6c:2a:84:4c:fe:28:4b:82:19:87:77:
                    46:6a:0b:65:ea:55:d3:ae:95:c2:08:c9:13:56:ce:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:C0:9C:12:B6:25:45:24:73:F2:C4:F1:94:67:32:A6:42:60:83
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3132332e39392e33322e302f31392d3234203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.99.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:68:d4:24:1e:6c:75:7b:99:35:d5:30:a2:ee:3e:0b:d6:
         fa:75:28:db:af:e7:7f:e6:6b:01:d7:c8:0b:2d:24:25:ed:26:
         93:bc:93:64:3e:e5:8c:67:b1:7b:28:c1:6a:fd:60:46:bc:2e:
         40:73:ba:7f:43:b2:3d:67:45:59:bc:a8:1b:5e:0c:37:6d:aa:
         14:2c:83:83:e7:cc:bf:f4:4e:7a:45:8d:7f:f5:63:40:fe:ac:
         cf:0a:84:b3:8d:56:17:a7:cf:6e:d3:79:46:26:f8:cd:7d:0d:
         00:dc:cd:ff:78:9c:93:24:33:15:4a:45:55:a6:e6:dc:21:d3:
         a5:ad:d2:88:16:27:2a:7d:23:02:b6:e9:6a:dc:1b:25:1f:60:
         b1:e0:5e:81:11:68:9a:40:6f:e8:f5:3a:f1:e5:8a:58:1a:f9:
         b1:47:c0:ed:30:e7:a4:09:cb:29:a7:87:b5:b3:a2:6e:78:25:
         8e:54:10:31:87:5f:a3:9a:b8:0c:43:b0:92:9f:bd:7d:e3:a1:
         85:1d:2c:2c:61:4f:68:9b:ed:b8:10:87:23:d2:b2:4b:c3:a1:
         2f:70:dd:de:84:58:4a:9f:7e:41:6d:a8:5e:ee:7e:00:10:e7:
         9a:41:af:ab:b5:5e:62:d1:f2:fc:17:fc:a4:d6:e3:54:ac:d6:
         ec:77:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:13 2026 by rpki-client