Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37312e302f32342d3234203d3e20323135353935.roa
File:                     3230322e3136302e37312e302f32342d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          Fm4RnmpMJOSoW3DVbiH4GZB+Yz9YiFbDZFQDQX7dLHw=
Subject key identifier:   4F:01:5D:D0:9E:6E:D3:25:25:63:C6:18:AE:9A:DC:51:52:93:15:39
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       6FE8CC3AF0FDA22CD7622DE156298693CFDCA322
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37312e302f32342d3234203d3e20323135353935.roa
Signing time:             Mon 11 May 2026 17:52:47 +0000
ROA not before:           Mon 11 May 2026 17:47:47 +0000
ROA not after:            Mon 10 May 2027 17:52:47 +0000
asID:                     215595
IP address blocks:        202.160.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e8:cc:3a:f0:fd:a2:2c:d7:62:2d:e1:56:29:86:93:cf:dc:a3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:47:47 2026 GMT
            Not After : May 10 17:52:47 2027 GMT
        Subject: CN=4F015DD09E6ED3252563C618AE9ADC5152931539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:db:9b:a2:a0:91:9c:5a:35:15:27:ab:da:93:
                    ba:db:36:72:5d:fd:47:88:11:29:83:7f:e4:44:c7:
                    d6:9d:72:55:ff:cb:ca:33:5b:85:18:26:a3:84:ce:
                    66:24:57:f4:2f:2c:f5:80:23:f7:07:0c:3e:3f:42:
                    24:50:60:16:14:2e:d0:2e:f3:6a:1d:f1:43:18:c5:
                    ed:8c:b5:f6:4f:f2:dc:9a:8a:55:b2:d4:aa:9f:62:
                    3f:b1:6a:e3:f3:33:1e:90:52:a9:6c:46:97:9d:68:
                    7a:1b:8c:32:5f:db:f7:ad:d0:24:8d:b7:32:5e:6e:
                    07:15:e0:40:97:4c:a3:aa:51:b6:dd:a9:d0:99:36:
                    b4:2a:72:89:91:70:79:f2:41:ce:42:c9:b0:3a:d2:
                    f3:b1:46:83:ff:43:5b:c2:b3:15:ed:3c:de:3e:c2:
                    61:93:8d:2c:d6:1c:4e:9d:4c:c5:59:03:38:7e:b6:
                    31:5f:75:1e:fb:ce:7e:09:ad:ef:3e:6b:91:43:da:
                    e2:ab:d6:dc:29:e2:2a:e4:66:82:95:c6:27:56:9a:
                    c8:ca:c0:ec:10:ae:5e:a3:ba:54:53:df:31:a4:bd:
                    7a:c7:a9:7e:d4:61:51:91:11:e4:ee:e4:b7:5b:36:
                    51:08:5a:00:9d:1e:e5:37:d9:40:5f:b6:b7:32:fd:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:5D:D0:9E:6E:D3:25:25:63:C6:18:AE:9A:DC:51:52:93:15:39
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37312e302f32342d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b9:f9:d1:fa:af:02:54:6d:2a:50:23:39:40:1f:5e:fc:b2:
         a8:d1:1d:fe:a5:ac:ef:10:10:dd:51:51:e1:60:ce:c2:7b:44:
         8f:bb:31:6b:e2:01:03:c9:c6:64:25:1e:53:c3:38:a0:9e:ed:
         2d:6b:99:87:69:3c:05:e8:a4:16:20:dd:24:e0:71:1b:af:96:
         2c:7d:29:96:ed:bd:25:b8:fd:ad:34:a9:85:f1:42:2f:92:72:
         0e:86:7d:48:2b:17:53:79:19:46:03:e0:67:aa:2f:d2:ac:c6:
         bf:dd:b1:68:d7:30:65:ae:a7:04:c9:48:3a:64:bf:c8:9d:cf:
         82:32:ea:8b:48:49:f8:00:69:21:a6:be:56:b4:e3:16:c4:3d:
         6c:50:5e:6b:95:28:1c:37:62:5d:0e:d2:78:70:68:78:ad:c7:
         b2:e5:2b:79:9c:3d:7b:9e:dd:17:59:37:b7:20:95:83:49:93:
         31:72:c9:ed:5a:12:e0:ed:38:c8:4a:21:e0:c1:c3:c2:e7:81:
         d6:ee:06:48:b5:83:3a:c9:c9:53:2c:9f:79:cf:42:d9:2b:44:
         f0:ae:21:cd:d9:90:ed:a3:14:91:58:09:04:9c:87:c8:9e:c0:
         ec:8e:73:94:88:eb:11:e3:5d:23:6a:a3:91:85:de:3f:51:08:
         ed:ce:3a:b8
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUb+jMOvD9oizXYi3hVimGk8/coyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2
M0Q5MkZCMjAeFw0yNjA1MTExNzQ3NDdaFw0yNzA1MTAxNzUyNDdaMDMxMTAvBgNV
BAMTKDRGMDE1REQwOUU2RUQzMjUyNTYzQzYxOEFFOUFEQzUxNTI5MzE1MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd25uioJGcWjUVJ6vak7rbNnJd
/UeIESmDf+REx9adclX/y8ozW4UYJqOEzmYkV/QvLPWAI/cHDD4/QiRQYBYULtAu
82od8UMYxe2MtfZP8tyailWy1KqfYj+xauPzMx6QUqlsRpedaHobjDJf2/et0CSN
tzJebgcV4ECXTKOqUbbdqdCZNrQqcomRcHnyQc5CybA60vOxRoP/Q1vCsxXtPN4+
wmGTjSzWHE6dTMVZAzh+tjFfdR77zn4Jre8+a5FD2uKr1twp4irkZoKVxidWmsjK
wOwQrl6julRT3zGkvXrHqX7UYVGREeTu5LdbNlEIWgCdHuU32UBftrcy/TcVAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUTwFd0J5u0yUlY8YYrprcUVKTFTkwHwYDVR0j
BBgwFoAUJYYEPRgLFTzvNmpCIjLCDWPZL7IwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxL
RVJBLzAvMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2M0Q5MkZCMi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNTg2MDQzRDE4MEIxNTNDRUYzNjZBNDIy
MjMyQzIwRDYzRDkyRkIyLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RQU0lMS0VSQS8wLzMyMzAz
MjJlMzEzNjMwMmUzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzUz
OTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyqBHMA0GCSqGSIb3DQEBCwUAA4IBAQBeufnR+q8CVG0q
UCM5QB9e/LKo0R3+pazvEBDdUVHhYM7Ce0SPuzFr4gEDycZkJR5Twzignu0ta5mH
aTwF6KQWIN0k4HEbr5YsfSmW7b0luP2tNKmF8UIvknIOhn1IKxdTeRlGA+Bnqi/S
rMa/3bFo1zBlrqcEyUg6ZL/Inc+CMuqLSEn4AGkhpr5WtOMWxD1sUF5rlSgcN2Jd
DtJ4cGh4rcey5St5nD17nt0XWTe3IJWDSZMxcsntWhLg7TjISiHgwcPC54HW7gZI
tYM6yclTLJ95z0LZK0TwriHN2ZDtoxSRWAkEnIfInsDsjnOUiOsR410jaqORhd4/
UQjtzjq4
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:50 2026 by rpki-client