Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e39312e302f32342d3234203d3e20323135353935.roa
File:                     3230322e3136302e39312e302f32342d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          Ho+TuNa6S8Bx/e1fze1s69ePyVxHwFMBe5ZPbgzbpj0=
Subject key identifier:   DF:9B:45:16:94:8C:1E:97:0D:A7:47:FE:1F:88:7E:6C:0F:FB:B5:90
Certificate issuer:       /CN=2586043D180B153CEF366A422232C20D63D92FB2
Certificate serial:       537E82070D6C1D8070CD4F5842716D7F9CEC4441
Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e39312e302f32342d3234203d3e20323135353935.roa
Signing time:             Mon 11 May 2026 17:56:52 +0000
ROA not before:           Mon 11 May 2026 17:51:52 +0000
ROA not after:            Mon 10 May 2027 17:56:52 +0000
asID:                     215595
IP address blocks:        202.160.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl
                          rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:7e:82:07:0d:6c:1d:80:70:cd:4f:58:42:71:6d:7f:9c:ec:44:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2
        Validity
            Not Before: May 11 17:51:52 2026 GMT
            Not After : May 10 17:56:52 2027 GMT
        Subject: CN=DF9B4516948C1E970DA747FE1F887E6C0FFBB590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:3d:74:76:95:ca:5a:55:d5:cf:ba:93:26:
                    29:c0:d1:31:b9:d1:de:b9:30:3f:52:5d:f7:9a:11:
                    b4:81:89:a6:4c:24:83:1c:b7:8a:12:f2:2c:38:08:
                    d1:8e:05:19:c6:23:1e:4c:78:09:27:72:96:2b:8b:
                    5c:0b:63:37:39:ff:95:32:57:09:8b:cd:e4:2e:27:
                    5a:52:51:5c:4b:c4:ae:20:20:df:bc:df:c9:8f:d1:
                    f9:e2:cc:72:3c:29:84:a4:d6:46:39:83:fe:70:32:
                    cb:0f:98:5c:6f:e1:9e:5f:cf:a9:7b:71:5b:f4:f7:
                    a5:f5:bf:b2:7a:f1:31:ad:47:2a:af:27:a7:4f:15:
                    e1:b0:c2:db:7a:f7:36:7a:fd:73:7b:c9:cb:4f:60:
                    a4:ac:0d:5f:22:d8:c9:1f:6b:76:d4:ed:2d:0c:79:
                    22:4a:7d:8c:9c:1d:d2:57:7b:4a:ab:2a:35:3e:27:
                    19:8e:1c:96:db:08:8b:09:7e:9e:8b:b8:5e:64:8c:
                    f9:81:ed:a4:a0:92:3c:c5:29:c3:63:58:92:3d:a0:
                    1d:ce:04:19:f9:4e:61:7a:47:e2:db:99:ea:30:56:
                    8b:73:ed:8a:69:c4:79:c7:f1:3d:d2:d7:61:cc:7a:
                    e1:7d:e6:c1:06:01:c5:e4:c5:6c:8c:5f:52:93:48:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:45:16:94:8C:1E:97:0D:A7:47:FE:1F:88:7E:6C:0F:FB:B5:90
            X509v3 Authority Key Identifier:
                keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e39312e302f32342d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.160.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d0:07:5b:d4:0a:eb:c3:bf:70:e3:50:8c:f1:a7:5c:b6:90:
         8a:91:9c:40:01:1b:47:64:16:e4:10:10:e4:31:bc:be:c2:9b:
         57:d0:3f:66:f5:41:e6:eb:0c:57:1b:42:cc:fb:68:a5:ef:c8:
         53:f3:65:56:32:00:56:16:bd:51:10:37:55:98:46:74:15:52:
         de:66:b3:8a:f3:4a:d4:ab:44:31:ad:63:8c:f4:81:03:56:25:
         6e:22:d4:a7:7c:6b:71:dc:57:90:0e:6a:77:1d:96:cf:4e:3d:
         5e:66:a4:48:3f:bc:35:56:f5:99:e4:73:0d:2a:6e:ea:d5:0b:
         9c:7a:0f:19:56:75:09:f4:7a:9b:f9:e9:51:fe:c5:02:9b:90:
         f6:cf:d6:e9:12:a6:c5:6e:bc:7b:26:08:3c:f6:d9:c9:ec:33:
         14:88:90:cb:5e:af:5d:59:d8:9e:31:a5:93:f4:d6:d5:05:67:
         fc:5a:8d:45:36:24:b3:2a:3f:06:eb:cc:f7:1a:5c:74:45:e8:
         41:73:43:fb:4e:45:30:2c:6f:bd:4f:c1:cf:a5:20:6f:ec:f2:
         96:6c:96:b2:8e:d2:bc:65:f0:ff:aa:ba:c5:86:c3:7d:21:5d:
         45:f2:de:50:98:3d:cd:bf:b4:71:36:a8:9b:02:08:2c:dc:53:
         79:8c:bd:6a
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUU36CBw1sHYBwzU9YQnFtf5zsREEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2
M0Q5MkZCMjAeFw0yNjA1MTExNzUxNTJaFw0yNzA1MTAxNzU2NTJaMDMxMTAvBgNV
BAMTKERGOUI0NTE2OTQ4QzFFOTcwREE3NDdGRTFGODg3RTZDMEZGQkI1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDz10dpXKWlXVz7qTJinA0TG5
0d65MD9SXfeaEbSBiaZMJIMct4oS8iw4CNGOBRnGIx5MeAkncpYri1wLYzc5/5Uy
VwmLzeQuJ1pSUVxLxK4gIN+838mP0fnizHI8KYSk1kY5g/5wMssPmFxv4Z5fz6l7
cVv096X1v7J68TGtRyqvJ6dPFeGwwtt69zZ6/XN7yctPYKSsDV8i2Mkfa3bU7S0M
eSJKfYycHdJXe0qrKjU+JxmOHJbbCIsJfp6LuF5kjPmB7aSgkjzFKcNjWJI9oB3O
BBn5TmF6R+LbmeowVotz7YppxHnH8T3S12HMeuF95sEGAcXkxWyMX1KTSAt3AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU35tFFpSMHpcNp0f+H4h+bA/7tZAwHwYDVR0j
BBgwFoAUJYYEPRgLFTzvNmpCIjLCDWPZL7IwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxL
RVJBLzAvMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2M0Q5MkZCMi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNTg2MDQzRDE4MEIxNTNDRUYzNjZBNDIy
MjMyQzIwRDYzRDkyRkIyLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RQU0lMS0VSQS8wLzMyMzAz
MjJlMzEzNjMwMmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzUz
OTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAyqBbMA0GCSqGSIb3DQEBCwUAA4IBAQBD0Adb1Arrw79w
41CM8adctpCKkZxAARtHZBbkEBDkMby+wptX0D9m9UHm6wxXG0LM+2il78hT82VW
MgBWFr1REDdVmEZ0FVLeZrOK80rUq0QxrWOM9IEDViVuItSnfGtx3FeQDmp3HZbP
Tj1eZqRIP7w1VvWZ5HMNKm7q1Quceg8ZVnUJ9Hqb+elR/sUCm5D2z9bpEqbFbrx7
Jgg89tnJ7DMUiJDLXq9dWdieMaWT9NbVBWf8Wo1FNiSzKj8G68z3Glx0RehBc0P7
TkUwLG+9T8HPpSBv7PKWbJayjtK8ZfD/qrrFhsN9IV1F8t5QmD3Nv7RxNqibAggs
3FN5jL1q
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:51 2026 by rpki-client