Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e392e302f32342d3234203d3e20313333393535.roa
File:                     3232332e3136352e392e302f32342d3234203d3e20313333393535.roa (raw, json)
Hash identifier:          fVpKpRteO0VaGR3toHlP0vvzNxEFvd9ooLHtR/Rm6ss=
Subject key identifier:   01:33:63:FB:3C:6B:7B:F7:BD:67:DF:B9:81:99:3B:A6:83:00:74:91
Certificate issuer:       /CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
Certificate serial:       4A9EFF03FC76729E66E2231723733FEB2900FCDB
Authority key identifier: AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e392e302f32342d3234203d3e20313333393535.roa
Signing time:             Mon 11 May 2026 17:15:26 +0000
ROA not before:           Mon 11 May 2026 17:10:26 +0000
ROA not after:            Mon 10 May 2027 17:15:26 +0000
asID:                     133955
IP address blocks:        223.165.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl
                          rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9e:ff:03:fc:76:72:9e:66:e2:23:17:23:73:3f:eb:29:00:fc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD79CBDEB391C70F0A9DAD7888224213297EEB3A
        Validity
            Not Before: May 11 17:10:26 2026 GMT
            Not After : May 10 17:15:26 2027 GMT
        Subject: CN=013363FB3C6B7BF7BD67DFB981993BA683007491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:e1:3f:35:b1:a2:5b:73:2a:4e:60:d0:eb:
                    44:b1:e8:c9:cb:99:ad:99:1b:03:d5:3c:bf:67:ab:
                    7c:bc:c1:8a:f8:70:bf:df:29:45:58:32:87:23:54:
                    c3:11:e0:c4:d6:6f:5c:61:4a:b8:96:33:a4:6d:28:
                    4c:3b:f3:6b:80:06:91:f6:e3:b4:93:02:16:dd:5e:
                    fb:79:31:ab:8a:35:48:d6:82:52:3a:22:0f:ba:01:
                    15:a7:ef:fc:17:65:21:86:06:5e:29:41:91:7b:63:
                    d5:12:0d:36:c1:f9:b0:d1:76:05:5d:5f:07:e1:b1:
                    5c:f7:77:cd:4c:aa:91:b7:c0:af:d2:51:18:4a:aa:
                    a6:81:a1:18:9e:5d:68:fd:18:18:43:c6:0d:d4:c1:
                    43:ac:dd:c9:81:f3:86:ee:50:de:04:87:03:04:2f:
                    bf:80:ed:fe:23:a6:02:36:73:52:23:d1:e2:02:a3:
                    f1:e6:f4:c4:7f:c5:28:b6:59:43:dd:b2:40:cc:25:
                    53:77:a6:b6:3f:ed:45:6a:3b:12:ed:db:0e:be:fb:
                    48:e0:6d:77:72:70:ee:ba:8d:46:c0:d3:ad:bc:f2:
                    61:f3:c3:02:2f:ef:e5:48:ec:c7:18:80:5c:be:0b:
                    2a:e3:6c:fe:bd:ef:b2:df:ba:ae:05:8f:d4:8b:0d:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:33:63:FB:3C:6B:7B:F7:BD:67:DF:B9:81:99:3B:A6:83:00:74:91
            X509v3 Authority Key Identifier:
                keyid:AD:79:CB:DE:B3:91:C7:0F:0A:9D:AD:78:88:22:42:13:29:7E:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AD79CBDEB391C70F0A9DAD7888224213297EEB3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWD-COM-TW/0/3232332e3136352e392e302f32342d3234203d3e20313333393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:78:7b:a9:2b:06:29:b9:0d:68:0c:2a:d0:53:5e:bc:70:93:
         9d:15:8b:8c:16:bb:82:1d:c5:f7:9f:3c:7f:78:1e:35:bd:c4:
         26:42:8e:2c:89:57:1a:5c:d7:f2:d7:77:b1:ab:22:09:4f:f1:
         81:13:8d:a1:54:d6:8b:0e:98:a1:9f:90:40:34:4b:27:d7:c3:
         5a:88:a2:a1:9f:ef:b3:d7:28:84:4c:63:6b:0b:3a:22:81:dc:
         35:d2:70:dd:90:14:60:2f:f4:0c:d0:a2:ca:24:a6:3f:fb:f7:
         a0:20:f3:c8:45:fe:36:32:e3:cd:4d:74:63:61:5d:bf:88:9c:
         26:69:de:27:5b:4c:46:f3:69:a8:1e:df:52:86:5a:cd:27:4f:
         d2:29:d7:e2:ad:57:4f:f1:40:76:70:4a:7c:2c:7e:a1:28:6c:
         f0:2e:0d:16:22:45:a0:27:8a:b1:d5:9f:32:88:59:74:94:10:
         64:df:57:40:9c:aa:0b:1d:de:e8:50:f5:94:ba:ae:99:a3:f9:
         c5:a4:b3:41:ce:c9:64:3a:75:cf:a6:0e:48:d4:6c:97:aa:ff:
         67:a9:72:1e:ff:90:65:7c:4e:7c:b6:95:a2:c8:6e:5c:47:68:
         6a:4a:43:67:a3:49:a7:e4:37:25:18:c6:8d:f5:fb:24:67:5b:
         10:65:13:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:51 2026 by rpki-client