Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa
File:                     3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa (raw, json)
Hash identifier:          Pq+rcQBopuW70X5LeXjFWpzJbmIFP/Yyd1b9pbIm2QA=
Subject key identifier:   E4:3E:02:09:36:E6:6E:25:F2:78:56:FF:E8:5D:91:AF:7B:17:AE:4B
Certificate issuer:       /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial:       2EC6A1B8EDC4768C654D5AFDBAEC5F5DF98EF06C
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa
Signing time:             Mon 11 May 2026 17:15:28 +0000
ROA not before:           Mon 11 May 2026 17:10:28 +0000
ROA not after:            Mon 10 May 2027 17:15:28 +0000
asID:                     133955
IP address blocks:        223.165.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
                          rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c6:a1:b8:ed:c4:76:8c:65:4d:5a:fd:ba:ec:5f:5d:f9:8e:f0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
        Validity
            Not Before: May 11 17:10:28 2026 GMT
            Not After : May 10 17:15:28 2027 GMT
        Subject: CN=E43E020936E66E25F27856FFE85D91AF7B17AE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d2:24:fd:ba:30:d4:32:2e:1d:90:29:28:a5:
                    e7:90:33:30:a0:d0:f8:24:f3:44:e3:39:40:8a:d8:
                    48:4f:cb:06:8b:0a:03:9b:1d:85:94:8d:0f:89:b8:
                    bb:94:f1:a6:51:73:60:f4:84:a5:87:92:f1:a0:0b:
                    df:c8:83:46:13:30:68:02:09:a8:75:6d:53:18:d4:
                    c7:21:39:37:f7:de:f4:e6:29:08:c3:9d:2a:ef:49:
                    10:84:7a:56:9e:97:25:14:f0:11:37:4c:f0:ff:ea:
                    78:34:f5:61:6c:1f:8f:83:8c:2e:21:b5:98:8f:78:
                    cf:56:90:ee:f8:7b:25:30:2c:2c:1b:2c:5b:3b:e6:
                    4c:cc:62:af:72:5d:d8:c2:8c:db:34:60:f9:a9:be:
                    6b:7c:30:11:1d:72:f4:c0:a2:a4:94:5a:bc:f5:ea:
                    6c:7a:5d:44:47:90:57:00:b4:33:48:81:25:c7:98:
                    a5:71:0f:ce:c8:d1:f4:ac:82:b4:76:b6:95:53:6f:
                    81:e7:b1:56:b5:97:76:20:b6:e8:e6:a1:af:09:c7:
                    e6:ae:70:b9:94:ff:c6:7e:08:3f:a4:18:ce:0c:4e:
                    a2:c4:3d:1a:1c:7b:56:4f:50:c5:a8:7f:a3:a7:aa:
                    40:ec:b2:fb:ff:29:9a:3a:c1:e1:a6:b0:b5:b6:93:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:02:09:36:E6:6E:25:F2:78:56:FF:E8:5D:91:AF:7B:17:AE:4B
            X509v3 Authority Key Identifier:
                keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e31332e302f32342d3234203d3e20313333393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ee:ce:a7:95:2d:80:7d:2e:a9:f9:cf:a7:58:86:76:07:a9:
         23:5b:b5:35:06:48:dd:7d:b1:a6:c8:7a:0e:08:5e:59:71:a2:
         dd:8c:a9:ff:81:21:3b:dc:95:63:aa:fd:67:39:15:74:b5:a3:
         f9:7c:af:b7:9d:70:69:78:57:b4:38:cd:2c:dc:01:67:23:98:
         c2:f3:50:d1:71:9c:32:0e:2c:41:40:fe:52:f9:e0:b8:c3:6b:
         66:82:3a:58:dd:83:78:7b:78:c6:c2:9c:8d:33:d1:03:7e:08:
         d7:ae:04:ac:fe:17:74:5b:4f:fb:f0:c0:1c:14:1a:64:b2:97:
         35:94:ec:d2:85:cf:48:7c:c3:0c:e0:9a:a9:1d:87:f7:3f:ef:
         b1:71:15:f6:f1:a9:d9:1f:a8:a8:60:d2:cc:06:6c:cf:20:f5:
         dd:17:55:f7:7b:00:f6:9c:15:d5:77:7d:c1:59:fa:dd:39:d7:
         1b:a9:83:a8:6c:e4:49:a9:0f:a3:61:5b:21:f6:9d:24:b8:fe:
         56:68:d2:3d:6e:70:2c:43:6e:bd:53:d8:64:56:89:9d:48:77:
         b0:18:d7:8f:a8:f9:d1:d0:3c:45:87:39:c2:91:20:cc:a6:84:
         50:08:c4:be:81:c4:f2:9c:9c:bd:45:14:17:b1:5f:5b:c9:49:
         8e:cb:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:49 2026 by rpki-client