Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3135302e3234322e3130302e302f32322d3234203d3e2039333131.roa
File:                     3135302e3234322e3130302e302f32322d3234203d3e2039333131.roa (raw, json)
Hash identifier:          ol4A/KTh0cdr3qg/sQhg/JM2jtfq/ShhwlFrzu4viYM=
Subject key identifier:   F0:6A:AE:8B:31:34:AE:7E:5D:F7:54:28:95:F5:03:A6:34:CD:43:BB
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       5212047B273FFF646BE02385ED07F53093F7BAB8
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3135302e3234322e3130302e302f32322d3234203d3e2039333131.roa
Signing time:             Mon 11 May 2026 17:20:06 +0000
ROA not before:           Mon 11 May 2026 17:15:06 +0000
ROA not after:            Mon 10 May 2027 17:20:06 +0000
asID:                     9311
IP address blocks:        150.242.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:12:04:7b:27:3f:ff:64:6b:e0:23:85:ed:07:f5:30:93:f7:ba:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:15:06 2026 GMT
            Not After : May 10 17:20:06 2027 GMT
        Subject: CN=F06AAE8B3134AE7E5DF7542895F503A634CD43BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:fb:9a:e2:54:a2:0d:23:34:aa:c2:26:9d:
                    97:fb:11:db:6e:8f:3a:78:5c:2d:fc:3b:8a:28:44:
                    12:3d:a1:3e:60:0c:0a:a8:9d:3f:f3:94:2b:8d:96:
                    4a:ea:6d:d8:0a:d4:14:97:20:da:51:40:9e:b3:74:
                    75:16:f0:e8:55:11:24:6e:b6:81:49:78:1d:cd:c6:
                    dd:c9:33:ef:84:4e:f2:f1:d1:9b:66:0f:05:4e:aa:
                    a0:04:0c:57:21:6f:8b:0d:e9:7e:42:f8:53:3c:8b:
                    b8:f3:c4:35:45:d8:ac:16:ec:86:ed:41:e8:a8:42:
                    31:7b:f1:7b:1a:24:f2:72:fc:27:86:c9:60:cc:98:
                    61:14:94:7a:b7:70:c9:37:af:ae:5e:cd:d8:81:ad:
                    ff:75:5c:15:64:d0:64:93:76:ff:e0:19:56:14:73:
                    13:75:9e:dd:31:89:91:d4:4a:d3:27:d2:3e:39:d3:
                    16:e6:28:24:c9:3f:2b:5f:34:bd:4c:43:c8:ee:f2:
                    96:a2:1d:37:40:1e:70:22:8f:df:88:d3:c2:47:9e:
                    ff:14:53:7b:5b:cc:f2:45:bd:73:9b:e3:19:eb:0d:
                    55:41:f5:b7:29:d0:57:18:e4:09:80:b3:53:2d:c0:
                    76:39:19:0b:b9:39:fc:eb:39:ba:e6:f6:2e:1f:67:
                    93:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6A:AE:8B:31:34:AE:7E:5D:F7:54:28:95:F5:03:A6:34:CD:43:BB
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3135302e3234322e3130302e302f32322d3234203d3e2039333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:17:62:86:17:c8:34:5d:7d:e3:90:c9:9b:92:eb:a0:61:
         ae:1a:a1:0e:f9:1e:b7:b6:c8:92:d2:67:1b:d1:26:b6:e0:b9:
         c6:be:f5:b3:9b:7d:d6:b5:9c:a4:1d:37:f6:0e:97:bb:00:8b:
         ff:95:7b:fc:31:05:b7:84:90:47:06:9d:2a:85:b3:33:83:08:
         50:17:85:66:7f:11:e6:03:81:3b:cb:d2:83:fd:64:67:5c:09:
         a4:fd:d7:c5:60:4a:02:7d:f0:40:36:3f:b4:b7:46:e2:9e:93:
         e5:65:d6:1d:ed:41:9b:4e:42:01:d0:34:2c:0f:c5:5e:4e:f5:
         c7:b3:dc:69:0a:9e:df:35:be:21:56:03:7c:4c:09:a2:eb:c7:
         23:81:08:b4:f9:7b:c2:82:e8:e2:b3:72:eb:cc:d5:ce:c4:2e:
         56:75:be:f0:e1:cd:1e:a5:72:af:24:cd:80:ce:00:3d:d9:cd:
         17:97:68:9e:d4:9a:02:46:d7:43:5f:1c:41:ca:9e:85:fa:d5:
         90:09:7b:98:82:8b:c6:a8:fb:74:94:ff:81:39:94:45:fe:bc:
         2a:37:7e:6f:ce:0b:01:4b:f3:5e:b9:0e:ef:84:b2:1e:28:aa:
         3f:3b:a6:68:ea:d3:5f:53:97:31:8f:7b:35:5e:ec:5d:45:4e:
         b6:29:0a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:24 2026 by rpki-client