Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3132332e3131302e302e302f31362d3234203d3e20313331353936.roa
File:                     3132332e3131302e302e302f31362d3234203d3e20313331353936.roa (raw, json)
Hash identifier:          GktZyVgkft4W19nQaZx9iAUYFCaBlpSEMdoN2M6oCik=
Subject key identifier:   01:37:5E:92:C6:59:7B:78:C8:40:EB:AA:9E:CF:1E:DB:71:F7:D0:0B
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       367EE28B5ED77AE95110976059D156E735216037
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3131302e302e302f31362d3234203d3e20313331353936.roa
Signing time:             Mon 11 May 2026 16:48:40 +0000
ROA not before:           Mon 11 May 2026 16:43:40 +0000
ROA not after:            Mon 10 May 2027 16:48:40 +0000
asID:                     131596
IP address blocks:        123.110.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7e:e2:8b:5e:d7:7a:e9:51:10:97:60:59:d1:56:e7:35:21:60:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 16:43:40 2026 GMT
            Not After : May 10 16:48:40 2027 GMT
        Subject: CN=01375E92C6597B78C840EBAA9ECF1EDB71F7D00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:ca:2b:ad:79:14:2a:18:4c:0b:50:92:b2:
                    bc:af:9d:43:e3:5c:a6:d2:ae:0c:07:b8:09:84:e8:
                    ae:71:80:85:ce:0c:55:99:85:69:7c:6b:32:1b:f1:
                    b5:c2:7b:67:24:dd:3f:ba:d6:8a:54:09:04:05:d4:
                    8c:12:19:d7:5a:7e:d8:5e:16:b3:7a:a4:8d:6d:2b:
                    b8:8f:6b:3e:ce:3b:82:d2:3a:cc:85:19:ae:14:fe:
                    7c:80:42:59:d5:d5:a9:cb:05:e7:dd:ed:a5:4f:6b:
                    fe:92:cb:74:0b:c4:07:49:a0:c8:ca:14:03:50:28:
                    c5:7a:54:03:7a:31:91:4f:a4:31:f4:83:6d:44:01:
                    ae:d8:3d:ca:91:f3:29:25:b3:e6:d0:c8:49:36:56:
                    85:09:fc:66:7d:ff:e6:a6:22:56:21:a3:0d:8e:10:
                    9e:ba:65:af:35:37:2c:8e:2f:ef:69:b8:22:11:3a:
                    58:c8:35:e3:43:39:44:6e:52:a8:96:f1:ca:58:83:
                    ca:8c:05:cb:3f:6a:94:c6:3c:2f:21:2e:81:0e:9c:
                    95:3c:38:38:20:1d:b4:8b:35:56:5a:20:1e:30:84:
                    e3:16:8e:d3:e5:1c:53:2e:13:b8:79:9e:35:81:06:
                    a1:18:fe:47:57:cd:63:c9:d6:10:5f:a9:d9:2f:45:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:5E:92:C6:59:7B:78:C8:40:EB:AA:9E:CF:1E:DB:71:F7:D0:0B
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3132332e3131302e302e302f31362d3234203d3e20313331353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:af:09:d7:5b:73:6b:51:aa:b8:86:d2:cb:1f:3b:b6:b6:0f:
         d3:5e:2c:69:78:d3:a2:2b:d7:12:06:22:9d:9c:58:6e:4b:7c:
         9a:89:05:cd:49:3e:0d:89:7e:83:ed:fe:88:b0:ba:87:b4:13:
         96:ff:97:87:69:42:fc:56:e4:db:b7:32:bd:b6:13:ab:5e:de:
         67:09:d6:55:a6:89:11:9f:1d:fa:32:28:42:46:7d:d3:2e:52:
         53:7c:1c:17:15:b0:89:6b:71:d1:c3:e8:5e:15:10:76:e8:b0:
         00:85:c2:dc:38:8b:de:bd:92:45:95:16:4f:01:17:ff:8a:ca:
         c1:95:f1:bc:55:b0:fe:65:65:28:5c:e4:3e:eb:75:7e:df:bc:
         df:04:b2:d5:2b:2f:cc:d7:6e:8e:48:78:d7:71:ff:9b:b4:25:
         21:66:5a:86:8c:f2:a9:03:61:a4:67:bc:fe:a2:a3:0b:b2:5d:
         f5:41:02:d7:0d:64:ce:08:ea:9e:d6:22:63:72:bd:9c:a2:48:
         b3:d3:0c:a6:14:fe:13:24:86:0d:4c:81:a5:6a:73:24:14:69:
         76:33:c8:98:f2:84:bf:cd:0e:3f:66:ff:40:97:d0:ed:26:3d:
         36:af:ce:ca:33:42:58:cb:51:e1:57:e7:b5:77:c2:d2:e3:f4:
         29:4b:d3:22
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgIUNn7ii17XeulREJdgWdFW5zUhYDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2
OTY4Q0I0MDAeFw0yNjA1MTExNjQzNDBaFw0yNzA1MTAxNjQ4NDBaMDMxMTAvBgNV
BAMTKDAxMzc1RTkyQzY1OTdCNzhDODQwRUJBQTlFQ0YxRURCNzFGN0QwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoPcorrXkUKhhMC1CSsryvnUPj
XKbSrgwHuAmE6K5xgIXODFWZhWl8azIb8bXCe2ck3T+61opUCQQF1IwSGddafthe
FrN6pI1tK7iPaz7OO4LSOsyFGa4U/nyAQlnV1anLBefd7aVPa/6Sy3QLxAdJoMjK
FANQKMV6VAN6MZFPpDH0g21EAa7YPcqR8ykls+bQyEk2VoUJ/GZ9/+amIlYhow2O
EJ66Za81NyyOL+9puCIROljINeNDOURuUqiW8cpYg8qMBcs/apTGPC8hLoEOnJU8
ODggHbSLNVZaIB4whOMWjtPlHFMuE7h5njWBBqEY/kdXzWPJ1hBfqdkvRbCrAgMB
AAGjggHgMIIB3DAdBgNVHQ4EFgQUATdeksZZe3jIQOuqns8e23H30AswHwYDVR0j
BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v
MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy
NjgwNjk2OENCNDAuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzMxMzIzMzJlMzEzMTMw
MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzkzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHtuMA0GCSqGSIb3DQEBCwUAA4IBAQAVrwnXW3NrUaq4htLLHzu2tg/TXixp
eNOiK9cSBiKdnFhuS3yaiQXNST4NiX6D7f6IsLqHtBOW/5eHaUL8VuTbtzK9thOr
Xt5nCdZVpokRnx36MihCRn3TLlJTfBwXFbCJa3HRw+heFRB26LAAhcLcOIvevZJF
lRZPARf/isrBlfG8VbD+ZWUoXOQ+63V+37zfBLLVKy/M126OSHjXcf+btCUhZlqG
jPKpA2GkZ7z+oqMLsl31QQLXDWTOCOqe1iJjcr2cokiz0wymFP4TJIYNTIGlanMk
FGl2M8iY8oS/zQ4/Zv9Al9DtJj02r87KM0JYy1HhV+e1d8LS4/QpS9Mi
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:21 2026 by rpki-client