Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e36352e302f32342d3234203d3e20323135353935.roa
File:                     3230322e3136302e36352e302f32342d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          cX1FHPgM3OJtFlFq2ywtGZUu451qo6ghau9tRNQ8awA=
Subject key identifier:   0C:A9:40:85:A2:29:66:1F:59:7D:7D:36:F7:EF:5F:6A:C3:FB:51:4E
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       18051762EC5C9F6B934635223693973F4895768F
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e36352e302f32342d3234203d3e20323135353935.roa
Signing time:             Mon 11 May 2026 17:59:00 +0000
ROA not before:           Mon 11 May 2026 17:54:00 +0000
ROA not after:            Mon 10 May 2027 17:59:00 +0000
asID:                     215595
IP address blocks:        202.160.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:05:17:62:ec:5c:9f:6b:93:46:35:22:36:93:97:3f:48:95:76:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:54:00 2026 GMT
            Not After : May 10 17:59:00 2027 GMT
        Subject: CN=0CA94085A229661F597D7D36F7EF5F6AC3FB514E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:57:c5:b8:4f:92:3f:13:d2:fa:ec:e0:59:12:
                    cc:2e:1d:a4:a2:dd:45:f8:90:f4:6c:35:68:ac:ca:
                    5f:49:66:87:d5:aa:b9:f3:8f:7b:c4:25:dc:b9:e7:
                    dc:35:37:07:e3:44:03:94:a4:c7:2f:58:5a:5d:28:
                    ad:43:ef:d7:0b:86:df:87:f5:8f:63:58:60:4d:14:
                    67:21:81:46:37:e5:9d:a6:ca:ad:ff:80:9b:9c:4a:
                    8a:a3:bc:cf:cc:0c:4e:9b:46:e1:fc:60:b4:42:4d:
                    07:eb:82:a6:d7:b1:98:2c:46:a9:e7:66:4f:8f:7d:
                    fb:1d:da:be:3f:d9:03:a2:c5:04:9c:8f:6c:41:16:
                    37:f4:da:6c:3b:ad:82:f1:da:57:3e:10:b1:e7:31:
                    e9:57:0e:0c:b4:9b:5a:62:60:24:9d:26:7a:0f:ab:
                    7b:78:7f:d1:f5:dc:d0:f3:aa:88:89:80:59:11:e5:
                    f2:e0:9e:48:74:e2:56:bc:f9:42:c8:a8:f4:d9:aa:
                    fe:9f:c5:e3:a3:60:58:2d:b7:a5:7f:1c:3d:a2:f9:
                    4f:8f:35:1a:b5:e6:c1:d3:42:f6:a2:1f:7e:7c:15:
                    be:37:bf:55:d5:05:38:93:1f:a9:b1:72:8a:90:fa:
                    dc:f0:bd:07:8c:da:6b:23:39:ee:76:38:8a:f5:b6:
                    44:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A9:40:85:A2:29:66:1F:59:7D:7D:36:F7:EF:5F:6A:C3:FB:51:4E
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e36352e302f32342d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:02:e9:df:9f:38:d3:73:83:ad:df:90:53:3b:de:23:aa:b2:
         6c:09:a2:70:91:75:5e:35:9a:50:22:ae:50:4d:17:f1:39:30:
         3f:47:e3:c0:73:6c:60:7b:ff:84:32:2e:67:bc:18:7f:e0:33:
         4b:dd:82:d6:c1:a1:59:a4:f9:ef:12:52:9f:7e:0d:4b:c5:40:
         55:14:1e:53:1e:d1:4b:8a:f7:c1:a4:30:55:bf:14:36:3d:77:
         44:70:63:80:79:ca:4b:fe:29:89:5f:49:36:91:c6:4e:a2:79:
         ca:bf:ce:ac:c7:9b:75:21:c6:dc:69:9a:8d:14:f0:c2:c7:a0:
         04:69:90:d5:b6:77:40:77:46:cb:73:69:2d:39:c3:10:d6:db:
         9c:b0:5f:11:9d:13:6a:59:d3:ec:f0:67:c6:1c:41:9f:b2:02:
         84:8e:2c:34:49:72:91:9f:2d:85:4b:26:cc:5b:4b:75:9d:5e:
         54:ba:a0:c8:45:21:7e:33:10:17:d9:5c:51:7d:c2:93:a5:09:
         71:2f:1f:6b:54:16:04:2d:9c:15:59:ad:fd:16:bc:e6:a8:86:
         73:28:72:94:1d:96:4b:d3:61:35:6f:f3:16:04:9f:0b:0d:2d:
         30:7e:f1:7f:ce:b7:7f:aa:ac:04:9d:64:98:99:8d:23:3d:eb:
         0c:2f:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:58 2026 by rpki-client