Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e203137373039.roa
File:                     36312e35382e36342e302f32312d3234203d3e203137373039.roa (raw, json)
Hash identifier:          OnZGh9LSHReUMa2f3nST4+hcFzQnd7DRD5WPfCYEeuU=
Subject key identifier:   17:2E:33:77:82:E6:E6:4B:4D:4F:2F:8F:29:1E:7F:F1:0C:02:FB:D6
Certificate issuer:       /CN=C0ACF76C345159D3241315F2997526806968CB40
Certificate serial:       611138233B7C049E4716531C3749C8721021703B
Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e203137373039.roa
Signing time:             Mon 11 May 2026 17:37:09 +0000
ROA not before:           Mon 11 May 2026 17:32:09 +0000
ROA not after:            Mon 10 May 2027 17:37:09 +0000
asID:                     17709
IP address blocks:        61.58.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl
                          rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:11:38:23:3b:7c:04:9e:47:16:53:1c:37:49:c8:72:10:21:70:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40
        Validity
            Not Before: May 11 17:32:09 2026 GMT
            Not After : May 10 17:37:09 2027 GMT
        Subject: CN=172E337782E6E64B4D4F2F8F291E7FF10C02FBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:f9:d7:86:40:85:7c:1c:28:6a:ff:be:ab:
                    c9:ad:f4:21:cd:1f:cf:9d:14:96:81:4e:0b:0c:dc:
                    9a:2d:fe:48:49:9a:c0:d8:7f:a3:bb:b7:4a:af:06:
                    0e:31:e9:aa:a7:4d:73:b3:14:ef:88:79:84:3d:58:
                    6d:ea:3f:27:c0:60:96:d0:8b:13:5f:c8:72:2e:8b:
                    49:4c:b9:0c:30:f0:c9:d8:41:8d:d0:fc:04:4c:ce:
                    59:16:83:11:fc:9c:8d:78:d8:50:a2:60:fe:77:35:
                    52:8d:68:75:a1:69:0d:c8:be:3a:e8:8c:3d:ec:87:
                    26:d1:d1:87:33:04:5d:5f:68:be:6e:92:55:39:b5:
                    4d:f5:9b:18:da:ee:08:96:55:90:76:bd:fb:b4:b6:
                    a8:3f:f1:39:2c:bb:23:08:a6:fd:69:df:b7:f2:dd:
                    c6:dc:e7:6d:9c:37:34:18:a2:44:2e:ce:67:46:c1:
                    a5:63:e6:25:46:c7:96:db:d4:b3:00:30:c4:8a:62:
                    95:e8:46:35:87:99:fb:19:05:c4:0e:c8:d6:05:00:
                    ce:b4:2a:44:04:ca:95:d3:2c:72:fe:7e:4e:b8:1d:
                    39:b3:a0:f6:92:81:63:a6:3d:14:60:9e:e0:63:3f:
                    cb:51:b7:04:81:b8:a0:37:35:70:aa:a5:29:32:ff:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2E:33:77:82:E6:E6:4B:4D:4F:2F:8F:29:1E:7F:F1:0C:02:FB:D6
            X509v3 Authority Key Identifier:
                keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e36342e302f32312d3234203d3e203137373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:fe:a6:23:c8:95:e6:be:e8:67:a5:d7:cb:6f:21:9b:84:
         2b:c5:ba:3e:59:e3:4a:04:65:31:22:9c:32:40:ed:c9:28:25:
         5c:6a:29:58:22:d7:30:b9:da:35:3d:83:08:55:9c:aa:54:67:
         48:d8:ee:a8:f4:7a:45:10:e3:e6:14:95:53:46:f7:e7:cc:ce:
         95:16:f4:7b:38:17:a8:69:be:e2:b6:3a:26:0b:23:94:22:7e:
         12:cc:d6:fd:7e:c9:7f:52:a7:89:03:e2:d7:0c:6d:28:3d:7b:
         16:0d:d9:bb:ce:81:b7:b2:2a:c7:94:c0:54:a5:05:a1:a7:72:
         af:cc:03:58:f2:4d:80:b1:66:2f:49:0d:14:3c:27:71:75:6a:
         de:44:f9:58:90:51:7e:d0:ca:48:01:df:ef:e6:23:a1:c3:69:
         d0:e0:13:67:b4:c5:e8:d0:ae:13:7d:3d:b4:88:06:77:94:94:
         4d:9c:01:91:e2:00:75:5f:12:1f:10:6b:3f:23:58:50:47:0b:
         82:a6:d6:97:33:de:d7:1c:2c:d2:48:01:02:2e:d5:45:69:2f:
         f8:ac:7a:01:a5:c3:2a:8f:fd:f0:f2:55:6f:da:d6:2a:a8:ee:
         d4:7f:2d:b5:a2:0d:03:8b:9c:1b:0e:f1:02:86:d3:c1:cc:30:
         12:bd:cf:0f
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUYRE4Izt8BJ5HFlMcN0nIchAhcDswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2
OTY4Q0I0MDAeFw0yNjA1MTExNzMyMDlaFw0yNzA1MTAxNzM3MDlaMDMxMTAvBgNV
BAMTKDE3MkUzMzc3ODJFNkU2NEI0RDRGMkY4RjI5MUU3RkYxMEMwMkZCRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCghfnXhkCFfBwoav++q8mt9CHN
H8+dFJaBTgsM3Jot/khJmsDYf6O7t0qvBg4x6aqnTXOzFO+IeYQ9WG3qPyfAYJbQ
ixNfyHIui0lMuQww8MnYQY3Q/ARMzlkWgxH8nI142FCiYP53NVKNaHWhaQ3Ivjro
jD3shybR0YczBF1faL5uklU5tU31mxja7giWVZB2vfu0tqg/8TksuyMIpv1p37fy
3cbc522cNzQYokQuzmdGwaVj5iVGx5bb1LMAMMSKYpXoRjWHmfsZBcQOyNYFAM60
KkQEypXTLHL+fk64HTmzoPaSgWOmPRRgnuBjP8tRtwSBuKA3NXCqpSky/wAjAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUFy4zd4Lm5ktNTy+PKR5/8QwC+9YwHwYDVR0j
BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v
MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy
NjgwNjk2OENCNDAuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM2MzEyZTM1MzgyZTM2
MzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM3MzczMDM5LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
PTpAMA0GCSqGSIb3DQEBCwUAA4IBAQAMR/6mI8iV5r7oZ6XXy28hm4Qrxbo+WeNK
BGUxIpwyQO3JKCVcailYItcwudo1PYMIVZyqVGdI2O6o9HpFEOPmFJVTRvfnzM6V
FvR7OBeoab7itjomCyOUIn4SzNb9fsl/UqeJA+LXDG0oPXsWDdm7zoG3sirHlMBU
pQWhp3KvzANY8k2AsWYvSQ0UPCdxdWreRPlYkFF+0MpIAd/v5iOhw2nQ4BNntMXo
0K4TfT20iAZ3lJRNnAGR4gB1XxIfEGs/I1hQRwuCptaXM97XHCzSSAECLtVFaS/4
rHoBpcMqj/3w8lVv2tYqqO7Ufy21og0Di5wbDvEChtPBzDASvc8P
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:31 2026 by rpki-client