Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3131362e3234312e302e302f31362d3234203d3e20313331353936.roa
File:                     3131362e3234312e302e302f31362d3234203d3e20313331353936.roa (raw, json)
Hash identifier:          NfVRbIEqiXPJJK7c+PQaHyORHWlLYZy59RFk/mI/nuw=
Subject key identifier:   BD:2F:17:7E:53:89:F4:AC:F2:76:EF:AB:80:F5:2C:9D:9D:98:73:A8
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       3D81F6EB9206A6C7C73A212D06D18DCAFD8E96C3
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/3131362e3234312e302e302f31362d3234203d3e20313331353936.roa
Signing time:             Mon 11 May 2026 17:10:58 +0000
ROA not before:           Mon 11 May 2026 17:05:58 +0000
ROA not after:            Mon 10 May 2027 17:10:58 +0000
asID:                     131596
IP address blocks:        116.241.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:81:f6:eb:92:06:a6:c7:c7:3a:21:2d:06:d1:8d:ca:fd:8e:96:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:05:58 2026 GMT
            Not After : May 10 17:10:58 2027 GMT
        Subject: CN=BD2F177E5389F4ACF276EFAB80F52C9D9D9873A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:37:be:b0:ba:9b:89:16:55:f2:82:53:de:
                    d0:13:90:ea:51:2c:d4:58:6f:51:9e:a1:db:3c:24:
                    d5:3e:96:b9:45:41:27:52:0d:94:39:bc:6b:80:ea:
                    81:f1:96:b1:60:da:6e:99:c5:08:78:e3:91:10:53:
                    b2:dd:53:32:75:4f:00:25:91:f2:88:0f:51:1f:23:
                    65:b3:76:bd:21:8b:07:c3:a9:6c:60:eb:db:33:c0:
                    eb:11:cf:ab:3b:0d:04:18:eb:34:d9:82:ad:51:4e:
                    09:04:af:ad:3b:64:0d:9c:9b:a1:2e:f4:b4:43:3e:
                    bb:c1:6a:cb:58:10:3a:bd:1e:22:ee:5f:e8:9e:13:
                    00:a7:69:c2:95:44:2e:cc:9b:8d:00:7d:be:2e:95:
                    fc:6a:95:94:17:2f:3a:0c:05:93:3d:4a:27:dd:1d:
                    2e:25:7b:9e:3c:6d:ad:2e:84:f2:51:61:8a:cb:7f:
                    2d:14:d5:43:c0:03:08:4a:0c:eb:98:0d:fb:2a:00:
                    59:f7:5c:01:6b:c6:df:d6:50:c7:45:ab:14:31:8b:
                    7c:94:da:6e:5f:6f:29:b3:7e:76:d2:31:77:40:0a:
                    c8:ab:1b:01:62:a5:80:50:e7:78:fc:61:9f:b9:ad:
                    ff:af:3e:3b:80:fe:ed:e9:37:f0:af:74:1c:17:2a:
                    0a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:17:7E:53:89:F4:AC:F2:76:EF:AB:80:F5:2C:9D:9D:98:73:A8
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3131362e3234312e302e302f31362d3234203d3e20313331353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:a1:bf:c9:44:2b:0c:a0:7e:be:a9:4a:0a:89:7d:af:6b:93:
         19:78:64:26:4d:ae:62:72:ec:d6:1f:24:d5:26:28:90:6f:f3:
         68:06:ee:db:58:2b:96:12:c6:39:17:8b:d6:93:c4:8f:c4:e7:
         2b:e1:d5:f5:40:1a:ff:36:49:b4:b4:05:bb:15:71:71:b8:40:
         02:9d:92:5b:29:84:55:86:f8:bf:50:97:a5:4e:9c:2d:81:2e:
         93:67:b7:b0:f7:45:0b:eb:9e:f1:52:59:83:78:29:4a:0d:f4:
         fe:71:03:d0:b0:d5:8b:76:22:f8:94:d9:f1:e2:82:be:a7:69:
         50:5b:4b:f5:f9:1b:12:c7:6b:ee:aa:25:16:a6:e1:a1:d7:45:
         ec:c7:a8:d0:48:2a:15:5b:0c:2f:46:bf:a3:99:61:8b:de:3a:
         ed:99:a6:ea:d3:bd:49:85:6e:9d:e1:7a:18:f2:c0:8c:48:af:
         cb:06:6b:25:97:80:10:7c:91:01:c7:1f:9e:7b:aa:22:de:b3:
         55:17:27:d8:61:fa:14:bb:c9:d6:aa:ab:e2:65:c7:5d:b3:89:
         24:b7:0d:8d:a0:be:bc:53:c2:31:41:37:1f:14:4a:0f:bb:ab:
         15:00:2e:61:42:3d:20:f6:e6:d8:80:00:82:f6:a3:99:c6:f8:
         c7:ea:48:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:15 2026 by rpki-client