Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/3231302e3230322e35362e302f32312d3234203d3e20313331353936.roa
File:                     3231302e3230322e35362e302f32312d3234203d3e20313331353936.roa (raw, json)
Hash identifier:          rHHcJBFdMjRwhxEzYgjwUD+BBsxPDe+worZxJwv5U88=
Subject key identifier:   76:6A:7E:22:49:C4:36:BE:47:A9:23:79:23:D0:91:79:C9:CA:F8:A3
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       029BCABA4D1982A64D88B70161137099FC0E288C
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/3231302e3230322e35362e302f32312d3234203d3e20313331353936.roa
Signing time:             Mon 11 May 2026 16:48:41 +0000
ROA not before:           Mon 11 May 2026 16:43:41 +0000
ROA not after:            Mon 10 May 2027 16:48:41 +0000
asID:                     131596
IP address blocks:        210.202.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:ca:ba:4d:19:82:a6:4d:88:b7:01:61:13:70:99:fc:0e:28:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 16:43:41 2026 GMT
            Not After : May 10 16:48:41 2027 GMT
        Subject: CN=766A7E2249C436BE47A9237923D09179C9CAF8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:4b:5b:45:3e:c7:c3:d6:f9:ed:43:8b:9a:
                    74:26:b8:2d:b5:00:6c:80:a4:bd:21:61:36:d4:ae:
                    46:bb:fe:6f:8b:8b:96:94:e8:38:57:05:fc:0f:c3:
                    f1:ed:9f:7d:e9:76:89:98:54:fe:7a:fc:74:78:90:
                    46:4e:b7:a4:5a:72:5b:a7:f6:56:93:45:ac:32:6c:
                    c1:ad:e1:1e:b6:27:bf:9e:12:7f:02:3e:81:aa:72:
                    62:35:92:36:51:9b:e6:32:45:5a:77:0f:67:8d:9d:
                    51:d0:45:78:76:dd:37:e3:bc:d1:42:65:bb:c2:bf:
                    b2:18:7a:fc:04:83:c6:9d:27:4c:70:02:62:dc:11:
                    45:8d:b8:1a:b6:06:74:db:cf:20:bc:b0:94:52:55:
                    0d:1b:73:40:39:f1:7e:7c:6f:b6:c9:bc:7c:67:0e:
                    2c:79:05:88:32:38:d5:39:07:0e:a9:57:d8:5d:56:
                    8b:e4:0e:26:88:32:b9:4c:03:6d:ab:f1:71:25:09:
                    a5:c8:47:2e:b4:bc:a4:60:0c:18:05:e0:c2:47:3c:
                    84:9f:2b:44:b1:47:46:52:58:95:85:e3:51:f6:91:
                    be:20:1f:02:f7:13:0a:3f:e3:d6:b1:d2:ee:be:93:
                    84:10:1c:09:7a:9d:3f:92:8e:13:a6:2e:34:ed:6f:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:7E:22:49:C4:36:BE:47:A9:23:79:23:D0:91:79:C9:CA:F8:A3
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/3231302e3230322e35362e302f32312d3234203d3e20313331353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.202.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:01:6d:8d:3f:05:1d:05:93:32:7c:58:fd:24:92:29:c0:6a:
         90:39:1b:39:57:a5:42:5b:69:4e:3b:ea:e2:a5:aa:8c:2f:c8:
         57:e6:be:8b:5e:8d:f1:13:7d:35:fd:ec:22:9e:45:0c:97:e4:
         9b:b5:96:a3:4a:04:30:13:f7:68:e3:81:99:07:1d:40:25:41:
         3d:d0:55:da:1d:8f:95:5d:6d:03:7d:5d:b1:4c:2d:c5:cb:8a:
         4d:8c:ea:42:07:c2:09:21:47:9c:09:0a:c8:90:a8:4e:23:ac:
         1b:3d:1b:8d:36:6c:5f:e5:25:88:13:59:e5:be:16:12:76:f5:
         81:a4:44:a3:6d:66:66:85:f6:b4:83:9e:c0:7f:02:89:bc:f1:
         13:bc:60:bc:7a:a5:dd:c0:39:08:51:c3:0c:42:fa:9a:1d:92:
         bd:5a:68:7d:1b:b2:4e:f8:23:ec:16:75:c1:58:49:bf:1e:03:
         84:ee:2d:44:06:71:fd:a9:a8:e9:57:7d:56:ce:48:71:79:6d:
         0d:9a:8c:24:f8:e8:52:24:6f:90:52:07:eb:8f:24:4d:52:3e:
         88:5b:9b:3b:61:f8:7b:1b:88:c5:64:a3:91:2c:4a:fd:d9:4f:
         77:5c:b8:02:d8:71:5d:97:db:74:7d:5f:bf:dc:75:ec:5d:6d:
         ab:37:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:37 2026 by rpki-client