Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/36312e36372e33322e302f32302d3234203d3e203138303436.roa
File:                     36312e36372e33322e302f32302d3234203d3e203138303436.roa (raw, json)
Hash identifier:          hX1OzJK2K8xIjInCZgAcMFYStO0HP129X+xSZgBjvYc=
Subject key identifier:   61:5F:E9:2D:79:96:86:0B:08:40:8B:43:52:FE:17:B4:2F:78:26:24
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       5FF7D5BA7B50A110D32E7FDD4DF03A5C67A8E2E9
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36372e33322e302f32302d3234203d3e203138303436.roa
Signing time:             Tue 12 May 2026 01:49:15 +0000
ROA not before:           Tue 12 May 2026 01:44:15 +0000
ROA not after:            Tue 11 May 2027 01:49:15 +0000
asID:                     18046
IP address blocks:        61.67.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f7:d5:ba:7b:50:a1:10:d3:2e:7f:dd:4d:f0:3a:5c:67:a8:e2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 12 01:44:15 2026 GMT
            Not After : May 11 01:49:15 2027 GMT
        Subject: CN=615FE92D7996860B08408B4352FE17B42F782624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:ea:bd:92:09:4b:8c:b5:33:24:a0:0c:4e:
                    be:ee:2b:da:9e:da:12:82:16:f5:ed:ab:5e:79:1b:
                    5f:8c:d8:dc:36:0e:e1:0a:29:bb:2a:55:4e:43:76:
                    c4:11:0e:2b:86:09:18:4f:78:10:1f:90:d6:57:f7:
                    c2:81:e7:d4:7e:a6:10:53:96:1f:53:80:4c:a2:af:
                    cd:bc:3a:67:58:21:a4:63:25:e9:68:08:ac:72:eb:
                    4d:2e:73:85:47:19:7f:50:72:d8:43:69:fb:cf:27:
                    87:4b:19:e9:1b:b7:1e:56:e1:f0:9d:93:ec:05:63:
                    60:53:da:1e:9d:a3:3a:0c:8d:70:d5:12:c3:0b:83:
                    9d:3c:96:bc:30:02:ba:8f:5a:30:d0:24:27:0b:eb:
                    eb:f6:ce:f1:8f:bd:10:1a:07:43:a5:68:fe:9a:d4:
                    bb:24:99:a3:f7:1e:83:f5:e8:23:9b:0a:2c:2d:f5:
                    25:3c:fc:de:c0:f5:06:74:c7:4d:92:4b:66:7b:c9:
                    75:14:9f:1d:56:9c:c1:07:b9:4b:ac:15:0f:68:48:
                    68:9d:de:0f:94:96:1b:18:28:8c:1b:8d:46:74:ad:
                    81:95:28:12:d4:79:e7:44:6b:c4:26:0b:bc:52:13:
                    22:50:75:cb:45:3e:a2:62:43:59:55:41:ee:de:53:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:E9:2D:79:96:86:0B:08:40:8B:43:52:FE:17:B4:2F:78:26:24
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36372e33322e302f32302d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.67.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:46:f1:d9:b0:6e:70:f9:7c:c5:46:f6:46:9e:5a:71:2f:7c:
         75:3c:9c:6c:ae:40:50:65:90:f8:6b:69:45:ab:fb:2b:d3:46:
         72:97:0e:ae:b5:90:52:48:55:8c:50:db:86:01:55:02:35:a8:
         9e:34:1d:b6:2e:6f:c0:e3:28:c8:f5:ff:87:b7:0a:68:7f:b8:
         41:07:fb:f3:2c:fb:f1:f2:a2:9a:57:a8:a1:f8:f2:6b:7e:01:
         9e:2f:c8:47:7f:91:76:d2:d2:5b:11:ee:0a:4c:55:98:ce:a0:
         ba:c0:ac:fc:aa:3f:14:01:e7:af:25:44:dd:f1:94:97:ee:93:
         d2:6b:fe:fb:e6:9b:a7:32:41:b6:7c:f5:0a:ec:f9:0c:99:9c:
         e2:74:5a:75:f2:0d:a8:28:32:0d:59:75:7f:1d:7c:91:32:cd:
         98:08:d0:2c:23:0e:fe:81:0b:2a:5c:46:66:86:eb:ed:54:17:
         c8:e9:1c:18:1f:ba:e4:38:d8:d6:d5:01:4a:fb:1a:4b:83:7b:
         bb:42:cf:dd:20:2e:c1:89:75:67:e9:30:d3:70:c2:bf:6b:a7:
         71:7c:2d:98:40:c5:bb:04:8a:a6:5c:e6:36:57:0e:12:8a:bb:
         be:22:7a:62:48:0d:c5:3e:bc:52:59:8c:7a:9c:c6:d5:d5:ac:
         bc:17:82:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:48:43 2026 by rpki-client