Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e20323135353935.roa
File:                     3230322e3136302e37322e302f32312d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          5dTsRpipchux15R++pXsU+BDTBCmUtm4txi/oFsjc3s=
Subject key identifier:   54:1C:F6:26:A4:51:8D:F6:4C:21:5F:34:00:BF:1E:55:0B:25:F3:1E
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       5CD9EE852E7B878B8800E3B20D3EA3B0A8D6E134
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e20323135353935.roa
Signing time:             Mon 11 May 2026 17:56:54 +0000
ROA not before:           Mon 11 May 2026 17:51:54 +0000
ROA not after:            Mon 10 May 2027 17:56:54 +0000
asID:                     215595
IP address blocks:        202.160.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d9:ee:85:2e:7b:87:8b:88:00:e3:b2:0d:3e:a3:b0:a8:d6:e1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:51:54 2026 GMT
            Not After : May 10 17:56:54 2027 GMT
        Subject: CN=541CF626A4518DF64C215F3400BF1E550B25F31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:d8:6d:68:5e:b1:44:96:db:69:c8:55:84:
                    28:75:70:4e:0b:a5:f7:7d:bd:d9:da:7e:4d:9c:71:
                    71:31:f0:c2:b8:42:cd:d9:f6:a2:d1:c2:12:12:c4:
                    94:8b:1b:4c:65:71:50:07:56:6d:0d:7b:c9:a5:1b:
                    8b:5f:a4:d3:3c:ae:97:d7:f9:ff:ad:f6:0f:82:39:
                    39:2d:7d:b9:57:ff:ce:68:5d:7e:fe:a1:79:be:12:
                    46:69:d9:a3:d4:40:53:7a:56:91:bb:3c:ac:ff:b4:
                    8d:db:a1:37:91:b7:00:2c:81:19:23:3b:4d:9a:c0:
                    2a:c5:36:81:81:08:0c:fa:b4:8e:7d:b0:7d:d5:56:
                    09:6e:f8:3b:d3:e6:c6:ad:58:aa:db:85:92:77:e6:
                    b9:82:16:2d:85:72:b5:da:cc:ee:8f:46:ae:ec:ed:
                    55:67:17:b3:f0:6f:35:5e:5e:56:36:4e:67:84:fe:
                    19:2d:fd:3f:67:cc:ed:e8:f6:14:70:8c:9f:8b:cf:
                    da:ac:55:a6:ed:86:11:6c:47:36:77:86:dd:cd:2b:
                    04:12:f0:57:4f:3c:61:04:8a:c4:2c:e3:89:ee:2b:
                    b0:fd:df:cc:f3:ba:1f:3b:18:1c:1e:3a:5f:0b:0d:
                    92:9c:a7:95:a4:36:e0:94:43:ca:07:71:54:d6:d7:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1C:F6:26:A4:51:8D:F6:4C:21:5F:34:00:BF:1E:55:0B:25:F3:1E
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:66:df:f7:f6:10:82:31:66:20:47:5b:ae:d0:3a:b1:95:67:
         18:f0:e3:8a:7f:68:c9:82:30:63:e6:d4:da:c8:5f:cc:f8:3c:
         fb:33:79:92:8a:e3:f4:bb:bd:62:7f:0c:02:bc:36:a8:07:96:
         90:2e:2d:60:4f:23:aa:d4:54:be:be:90:21:b4:ce:23:82:99:
         f3:01:33:59:e4:52:0a:40:5d:eb:9a:75:2f:4d:af:30:96:22:
         89:f3:75:9e:a8:16:4c:2e:28:f1:07:b4:e2:3a:6e:80:3e:3b:
         3e:3c:6f:52:47:d0:ef:98:03:58:f5:59:af:21:68:b6:a3:ca:
         cb:24:f3:5d:19:ec:8b:c8:f5:14:2f:16:41:63:ff:dc:06:ed:
         79:17:7f:c4:1f:47:b6:96:b8:9f:10:1b:56:ac:3c:93:10:c8:
         f7:1b:37:a2:ac:e3:06:e8:40:be:b1:3a:ef:44:a9:31:09:58:
         f1:0f:07:3d:82:b4:f5:f4:81:33:6c:8d:a5:ac:b9:27:2e:ab:
         64:b3:37:6c:a2:fa:dd:ad:6b:94:dc:65:e2:5c:ef:65:02:85:
         6c:5a:44:c9:0f:cc:4e:ec:52:74:f8:43:2a:ec:7e:46:d3:3d:
         6f:ac:1d:80:e2:4f:d0:f7:5a:d0:a9:68:0d:2f:d6:62:03:d2:
         e4:0e:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:16 2026 by rpki-client