Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3138302e3231372e302e302f31362d3234203d3e203234313537.roa
File:                     3138302e3231372e302e302f31362d3234203d3e203234313537.roa (raw, json)
Hash identifier:          VWOgs2Ns6KKdNOXfmNwHEWjnaFuIokxyRma9pyqvQwY=
Subject key identifier:   1B:46:22:D7:59:BD:53:08:CB:72:6F:67:10:39:62:F2:30:DB:E7:14
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       5DAB47EB072A682D4DFD29BF91700FD562DE98C0
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3138302e3231372e302e302f31362d3234203d3e203234313537.roa
Signing time:             Mon 11 May 2026 17:32:58 +0000
ROA not before:           Mon 11 May 2026 17:27:58 +0000
ROA not after:            Mon 10 May 2027 17:32:58 +0000
asID:                     24157
IP address blocks:        180.217.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ab:47:eb:07:2a:68:2d:4d:fd:29:bf:91:70:0f:d5:62:de:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:27:58 2026 GMT
            Not After : May 10 17:32:58 2027 GMT
        Subject: CN=1B4622D759BD5308CB726F67103962F230DBE714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:3e:94:af:cb:49:3c:e3:ae:84:6d:22:aa:
                    ad:fe:8a:4f:a6:90:a7:b8:83:58:96:e1:22:73:75:
                    5a:41:2c:1b:24:ef:ab:82:95:c9:a8:4d:e6:95:66:
                    60:a4:a9:d6:a9:98:03:e4:f8:87:9a:ed:1b:7d:39:
                    19:ca:10:8c:f7:ab:d1:39:76:0b:e4:dc:e9:49:4b:
                    cb:75:2c:8e:fe:77:38:e2:74:57:01:e1:7f:20:f9:
                    47:e1:96:d6:0f:9b:f6:58:09:aa:02:a1:66:7b:4c:
                    63:20:19:d5:d1:bf:7c:6f:0d:a4:6b:a8:e8:a8:cd:
                    50:db:00:15:fa:d2:53:56:0e:28:3f:b1:34:2d:4b:
                    e2:0f:c5:0e:ab:d1:3c:0c:ef:e0:f5:8d:22:2a:95:
                    a3:eb:3f:6e:1c:a6:94:64:b3:61:e5:24:ba:4b:5b:
                    13:ad:2f:3f:a5:66:3a:df:1e:3c:5a:75:d1:15:9c:
                    58:ed:f4:15:1d:3c:c9:f9:bb:5d:2f:a3:27:bd:73:
                    87:95:04:e4:f9:43:b4:82:67:68:9d:53:af:75:e3:
                    d4:a8:fb:0d:4f:23:89:f2:ed:e7:37:3c:a7:a0:60:
                    fc:ef:54:4f:7f:1f:f9:f8:b8:a6:f2:2c:f0:a3:2b:
                    2b:e4:6b:f0:82:2b:99:15:51:4e:8a:14:2b:69:5d:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:46:22:D7:59:BD:53:08:CB:72:6F:67:10:39:62:F2:30:DB:E7:14
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3138302e3231372e302e302f31362d3234203d3e203234313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:c1:5b:2e:c9:86:7e:f5:22:55:d0:17:5c:96:62:74:22:
         e9:de:a4:2c:2f:d5:0b:37:9f:d6:0f:60:1b:33:21:b3:0f:85:
         35:b7:db:c4:6b:99:cd:f2:f4:28:51:b8:8e:e4:93:dd:f4:21:
         67:8b:c7:2e:b3:af:fe:86:22:c8:4c:e9:4d:2d:a3:2b:37:e5:
         1f:65:0b:b7:5a:cf:c0:97:a7:8f:e4:05:db:83:8f:ec:94:53:
         09:52:15:82:4c:1c:34:ee:92:6f:cf:42:78:2b:9c:ef:ca:17:
         e0:99:b9:d0:db:85:44:09:91:49:19:4a:46:83:a9:eb:18:bf:
         c4:ec:cc:42:e9:4c:c3:11:a6:d2:c2:78:f1:2d:c6:86:c3:6f:
         2d:60:be:05:07:d7:64:93:e8:34:98:d3:fa:6c:45:24:2b:b3:
         42:ed:af:ba:78:16:fe:d0:3d:3f:f1:5d:71:51:d2:a9:93:9b:
         1e:2a:05:5d:18:d2:5d:ce:7b:c9:49:40:38:9a:79:e3:74:65:
         e1:f2:b2:1c:07:54:ba:8a:7c:71:60:7c:80:0e:49:ce:86:e2:
         67:fb:ae:5b:df:a8:45:92:6b:62:f8:a3:d9:41:92:09:6a:a2:
         b7:e4:b9:0a:0d:68:a2:b2:59:80:81:b7:f4:ca:e3:81:1f:b7:
         79:ec:28:21
-----BEGIN CERTIFICATE-----
MIIE4zCCA8ugAwIBAgIUXatH6wcqaC1N/Sm/kXAP1WLemMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODZGNEU2NEUyODU1QjJGRDAwRkVFNDkyRjZGQjgyRDdF
RDVDNDYxOTAeFw0yNjA1MTExNzI3NThaFw0yNzA1MTAxNzMyNThaMDMxMTAvBgNV
BAMTKDFCNDYyMkQ3NTlCRDUzMDhDQjcyNkY2NzEwMzk2MkYyMzBEQkU3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wD6Ur8tJPOOuhG0iqq3+ik+m
kKe4g1iW4SJzdVpBLBsk76uClcmoTeaVZmCkqdapmAPk+Iea7Rt9ORnKEIz3q9E5
dgvk3OlJS8t1LI7+dzjidFcB4X8g+UfhltYPm/ZYCaoCoWZ7TGMgGdXRv3xvDaRr
qOiozVDbABX60lNWDig/sTQtS+IPxQ6r0TwM7+D1jSIqlaPrP24cppRks2HlJLpL
WxOtLz+lZjrfHjxaddEVnFjt9BUdPMn5u10voye9c4eVBOT5Q7SCZ2idU69149So
+w1PI4ny7ec3PKegYPzvVE9/H/n4uKbyLPCjKyvka/CCK5kVUU6KFCtpXQR1AgMB
AAGjggHtMIIB6TAdBgNVHQ4EFgQUG0Yi11m9UwjLcm9nEDli8jDb5xQwHwYDVR0j
BBgwFoAUhvTmTihVsv0A/uSS9vuC1+1cRhkwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJV0FO
TU9CSUxFLzAvODZGNEU2NEUyODU1QjJGRDAwRkVFNDkyRjZGQjgyRDdFRDVDNDYx
OS5jcmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvMS84NkY0RTY0RTI4NTVCMkZEMDBGRUU0
OTJGNkZCODJEN0VENUM0NjE5LmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUF
BzALhmRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RBSVdBTk1PQklMRS8w
LzMxMzgzMDJlMzIzMTM3MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzQz
MTM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcB
Af8EDzANMAsEAgABMAUDAwC02TANBgkqhkiG9w0BAQsFAAOCAQEAre7BWy7Jhn71
IlXQF1yWYnQi6d6kLC/VCzef1g9gGzMhsw+FNbfbxGuZzfL0KFG4juST3fQhZ4vH
LrOv/oYiyEzpTS2jKzflH2ULt1rPwJenj+QF24OP7JRTCVIVgkwcNO6Sb89CeCuc
78oX4Jm50NuFRAmRSRlKRoOp6xi/xOzMQulMwxGm0sJ48S3GhsNvLWC+BQfXZJPo
NJjT+mxFJCuzQu2vungW/tA9P/FdcVHSqZObHioFXRjSXc57yUlAOJp543Rl4fKy
HAdUuop8cWB8gA5JzobiZ/uuW9+oRZJrYvij2UGSCWqit+S5Cg1oorJZgIG39Mrj
gR+3eewoIQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:51 2026 by rpki-client