Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e2039363738.roa
File:                     3231312e37362e3138322e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          jQ+wtjSCOSPlomK8tDZK0UA5Iy5Coy2+2PhInnrpjsQ=
Subject key identifier:   60:50:10:48:F2:4C:36:A1:E5:E5:25:88:A3:0A:CA:86:66:66:F5:A4
Certificate issuer:       /CN=4592562459B88E861D7E40B269B64ECC6927CDE5
Certificate serial:       493D7A5B0D56994AB0A9534A64BEA60719C4D893
Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e2039363738.roa
Signing time:             Thu 30 Jul 2026 06:24:00 +0000
ROA not before:           Thu 30 Jul 2026 06:19:00 +0000
ROA not after:            Thu 29 Jul 2027 06:24:00 +0000
asID:                     9678
IP address blocks:        211.76.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl
                          rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 02:07:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:7a:5b:0d:56:99:4a:b0:a9:53:4a:64:be:a6:07:19:c4:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5
        Validity
            Not Before: Jul 30 06:19:00 2026 GMT
            Not After : Jul 29 06:24:00 2027 GMT
        Subject: CN=60501048F24C36A1E5E52588A30ACA866666F5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:ed:2b:ab:66:72:b0:53:c0:34:83:58:40:
                    d3:1f:1f:b6:ad:e3:fe:e1:33:28:62:82:a3:33:80:
                    1d:8f:cd:f2:6d:74:bb:ca:66:27:cc:63:2e:47:87:
                    9d:9e:3d:ae:3c:1c:9e:1c:4a:ce:a1:72:fe:cb:b6:
                    58:df:cc:3b:ac:35:0c:6f:eb:ca:1b:7d:39:de:26:
                    84:5c:6f:c6:29:8b:46:8a:41:04:d7:b1:8c:5e:ba:
                    95:8c:63:80:74:c1:22:02:15:c4:29:81:f3:d3:bb:
                    b4:ce:44:49:3b:c2:cd:84:82:c5:25:0b:cd:d2:4f:
                    b8:ea:74:a1:51:42:8b:39:fe:24:72:29:74:39:94:
                    e8:46:bc:67:6f:d9:f1:8c:3d:ae:c4:70:0b:0e:e1:
                    f1:02:67:db:c8:45:1f:d5:f4:fb:bb:7b:c7:af:f3:
                    88:38:cd:28:a4:2f:50:b3:7a:8b:26:cd:ff:9b:54:
                    5b:a6:b7:5d:45:b0:91:a2:c0:dd:1d:36:c4:70:36:
                    14:63:64:7b:3c:c5:c7:fb:cf:91:72:e6:89:f7:9f:
                    c1:d4:4f:94:40:86:f8:a5:07:0e:1b:b7:b7:62:57:
                    6b:1c:f7:bc:cf:7e:03:b4:71:d5:37:08:52:d3:6f:
                    05:0e:c1:38:86:24:44:01:30:de:2e:eb:5b:74:71:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:10:48:F2:4C:36:A1:E5:E5:25:88:A3:0A:CA:86:66:66:F5:A4
            X509v3 Authority Key Identifier:
                keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:b9:e2:da:f5:21:7b:5c:1f:75:e5:34:1a:2c:1c:f3:c0:
         c7:83:5b:83:00:8a:b0:87:2b:78:14:77:e5:85:d7:dc:b1:7f:
         2e:2d:d7:38:c9:75:a6:ee:4c:f9:27:a2:20:3e:51:7e:ea:ec:
         f5:9e:bb:5d:4b:1b:dc:17:57:31:2c:0a:f8:14:55:28:56:eb:
         5d:83:47:e2:a9:48:b1:73:39:13:b4:0b:92:01:8a:1d:79:05:
         20:8e:5f:a5:20:ba:d5:d2:23:88:4c:d2:99:48:6e:77:08:ce:
         a5:30:66:69:be:25:07:1f:5d:3c:47:2d:9b:57:b1:ac:98:0d:
         9f:ad:f0:1d:6d:1c:21:c6:b0:10:af:28:ac:2a:f5:67:3a:05:
         f0:c4:94:ba:de:84:a2:fb:d7:e7:0b:fe:ec:53:8a:90:d3:c6:
         c0:1a:9d:2b:1e:8c:b2:e8:72:8c:92:91:e8:57:a0:06:6a:d8:
         00:34:2b:17:ff:b3:e4:3b:2d:49:6a:32:ab:2d:ec:93:34:a5:
         67:a4:0f:4e:2c:3c:70:7a:70:5a:7d:c8:00:3b:fe:34:e1:98:
         94:64:25:ad:91:8b:8f:75:6c:c0:fb:ed:91:a3:6c:44:34:f5:
         90:10:a9:aa:9b:b3:ca:6f:1f:46:98:1a:84:5f:32:ba:a6:b5:
         ba:d2:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 14:03:43 2026 by rpki-client