Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3138302e3230342e302e302f31342d3234203d3e203234313538.roa
File:                     3138302e3230342e302e302f31342d3234203d3e203234313538.roa (raw, json)
Hash identifier:          SGilCkrmHpoTTN9EY/Ld50l9iEDEXGTMh8ulAYaYsfU=
Subject key identifier:   2E:E5:75:3F:D1:C3:21:2F:FB:4B:A4:2C:32:DB:8B:E5:08:9B:87:51
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       4A664E6C49A8739BF54B899E2A4D201612F293F7
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3138302e3230342e302e302f31342d3234203d3e203234313538.roa
Signing time:             Mon 11 May 2026 16:13:47 +0000
ROA not before:           Mon 11 May 2026 16:08:47 +0000
ROA not after:            Mon 10 May 2027 16:13:47 +0000
asID:                     24158
IP address blocks:        180.204.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:66:4e:6c:49:a8:73:9b:f5:4b:89:9e:2a:4d:20:16:12:f2:93:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 16:08:47 2026 GMT
            Not After : May 10 16:13:47 2027 GMT
        Subject: CN=2EE5753FD1C3212FFB4BA42C32DB8BE5089B8751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:4c:82:59:f6:de:52:39:73:f9:e6:31:b5:
                    2f:28:16:0f:0b:54:20:72:46:3e:f3:e6:e1:60:f3:
                    8e:15:6a:a1:d7:cb:f2:97:42:a6:14:5d:1c:8d:2a:
                    93:01:c1:7d:9a:d5:31:f6:08:a0:ee:11:1f:38:35:
                    5c:65:47:53:3b:02:80:30:5b:e5:d0:24:ac:ba:55:
                    29:65:68:94:9d:9b:4e:d9:b4:95:40:47:88:ae:45:
                    b9:fb:18:85:1a:c8:29:af:4c:d1:34:5b:d6:cb:75:
                    8f:f4:50:ac:ca:73:86:67:c5:6d:43:f4:6b:91:47:
                    79:19:45:03:a2:ff:b8:88:37:36:f1:4c:a2:c9:00:
                    9c:7b:a4:24:af:e5:53:0d:8e:19:1d:da:31:26:bd:
                    e3:81:73:67:11:57:59:49:61:27:75:9a:fe:98:07:
                    9b:8a:ee:a9:e9:31:69:47:78:ef:39:20:1d:67:69:
                    67:67:43:2d:a7:be:60:8a:4e:7e:86:ac:08:8b:a9:
                    11:30:fa:19:90:19:fc:f2:46:97:28:70:45:11:79:
                    0f:e1:c0:c7:9a:ec:99:9b:2e:85:ca:46:ee:bc:81:
                    34:bd:a7:cc:20:75:17:de:c9:b2:e7:4a:25:40:9b:
                    d9:cd:4c:6e:19:85:63:e8:75:57:fe:9f:91:4d:72:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E5:75:3F:D1:C3:21:2F:FB:4B:A4:2C:32:DB:8B:E5:08:9B:87:51
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3138302e3230342e302e302f31342d3234203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.204.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         65:08:c8:36:5d:13:3d:9d:76:b7:2d:8e:f8:22:7e:cf:a5:7b:
         d2:80:be:2c:2b:5f:f3:99:19:12:32:45:7a:f3:05:35:34:0c:
         21:3e:03:c6:ed:82:59:8d:73:84:fe:1d:ab:b2:85:be:4c:5a:
         6d:50:51:c9:b1:59:e5:d0:a1:a2:7f:43:dc:67:3e:62:f6:03:
         ff:2b:32:01:ef:dd:e2:0f:1d:14:37:cf:29:66:f6:b3:23:aa:
         b2:c3:c0:3c:02:b8:1b:de:8b:d7:f7:38:b7:72:fe:03:71:b8:
         fc:8c:6e:17:a8:d7:8c:3e:5d:71:93:ee:7c:87:e2:4b:73:20:
         70:3c:d3:7f:81:1d:c8:31:9c:da:fa:e9:5d:74:ac:2e:2e:87:
         09:e0:9b:07:f5:f8:f3:b7:59:9a:6c:14:a0:cd:4d:e6:b1:04:
         4c:5d:40:bf:f2:68:ed:8c:61:3e:42:09:59:ff:6f:f8:ac:b9:
         9a:9c:1f:de:3a:bd:c8:00:c9:1a:0b:b3:8e:1f:db:00:31:f7:
         d7:3a:25:be:76:1a:3f:19:db:37:1f:ce:2a:42:0e:89:c0:05:
         80:c1:95:27:1d:12:d0:40:5a:35:91:01:84:4d:f4:fc:2e:d6:
         8d:27:8b:7b:c7:95:2f:67:2c:2c:62:95:c9:46:25:94:6c:1e:
         b0:47:76:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:34 2026 by rpki-client