Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3135302e3234322e3130322e302f32342d3234203d3e203137373138.roa
File:                     3135302e3234322e3130322e302f32342d3234203d3e203137373138.roa (raw, json)
Hash identifier:          y+MBHC81OROVYqwo05DXKf3n+GlY8FqCt+EKA01FpPc=
Subject key identifier:   A3:5C:1B:F1:0E:39:FD:4F:7C:1A:BE:55:01:9D:A1:2F:B0:5A:75:62
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       4962CD23B1B3A8D602989D1E32381EC38449B5E7
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3135302e3234322e3130322e302f32342d3234203d3e203137373138.roa
Signing time:             Mon 11 May 2026 17:31:38 +0000
ROA not before:           Mon 11 May 2026 17:26:38 +0000
ROA not after:            Mon 10 May 2027 17:31:38 +0000
asID:                     17718
IP address blocks:        150.242.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:cd:23:b1:b3:a8:d6:02:98:9d:1e:32:38:1e:c3:84:49:b5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:26:38 2026 GMT
            Not After : May 10 17:31:38 2027 GMT
        Subject: CN=A35C1BF10E39FD4F7C1ABE55019DA12FB05A7562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:d4:a4:17:8f:ca:90:9f:94:3d:70:20:43:
                    e9:68:69:52:35:d7:2b:e1:f4:a1:a4:09:7d:41:98:
                    2e:7d:e6:fa:bc:72:e0:7d:50:2e:05:e1:21:f2:ba:
                    8d:16:5e:c9:4c:1f:4b:95:57:4c:91:b9:00:12:ce:
                    37:64:0c:de:4a:f8:ca:ef:c1:01:e3:17:23:cd:16:
                    38:ff:38:d9:e0:cf:ab:60:10:54:7f:37:11:18:b1:
                    7d:26:db:44:11:2a:11:27:78:ef:87:1f:6b:41:8e:
                    b3:5b:b6:4b:08:64:43:9f:9e:e4:b3:7a:e0:0e:12:
                    52:57:0a:90:05:e2:52:9a:21:54:02:c2:f1:0c:c2:
                    66:e3:14:ed:f0:19:9f:89:c0:ab:ca:8d:3f:25:a3:
                    3d:33:a5:71:31:3c:4c:a9:d3:18:9f:7a:6f:f6:9d:
                    68:fe:39:d2:b2:c9:64:91:76:b7:11:bf:36:79:ee:
                    16:1d:0c:5c:c4:52:7f:92:cb:b5:21:a1:33:d6:a6:
                    e7:da:18:4d:27:27:cc:d7:29:fd:31:09:b6:11:6a:
                    92:6c:6a:d6:7a:a4:9d:7e:65:03:a0:cd:31:ad:ea:
                    43:58:b0:84:fb:31:9d:f7:e8:1e:29:52:fd:8e:3c:
                    e8:c1:35:92:ed:03:2f:00:ca:fc:7c:ba:1f:94:77:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:1B:F1:0E:39:FD:4F:7C:1A:BE:55:01:9D:A1:2F:B0:5A:75:62
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3135302e3234322e3130322e302f32342d3234203d3e203137373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.242.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:d9:39:f6:67:8c:9f:d3:95:f4:fe:e8:2e:1e:60:02:25:
         12:18:3d:10:07:7e:87:88:bf:26:85:07:87:b5:63:09:dc:38:
         87:c7:37:1a:01:72:2f:0f:c7:c8:53:46:79:8f:17:b7:f2:90:
         0a:6d:e8:fb:9f:dc:f1:92:06:52:7d:c1:93:60:38:dc:f0:93:
         98:29:de:c3:61:1e:7d:94:10:ff:7d:0b:25:59:d6:df:1c:68:
         d1:36:2c:a2:10:bf:7e:13:dc:1c:ed:0a:1f:4b:eb:17:ce:23:
         56:f6:7e:0b:43:24:17:5e:9f:73:05:30:9a:e0:14:36:79:c7:
         91:82:2c:ef:74:bf:38:c4:a5:90:8f:ac:d5:71:b3:d1:b4:48:
         3c:54:e1:ee:5d:ad:1e:71:7c:be:ec:0e:a8:cf:2d:cf:59:10:
         52:2d:f7:57:60:5e:ec:43:7f:bd:42:45:64:97:de:6e:b4:a8:
         64:72:e1:b6:24:23:d9:d7:62:6f:95:9f:71:4f:d3:66:27:62:
         ce:d4:ce:35:d6:fe:4e:30:18:43:8d:f9:d8:8e:6e:27:f6:01:
         34:37:cf:f2:66:a6:ae:76:dc:9d:3e:8c:c9:67:75:6a:fe:07:
         fe:80:c1:31:08:92:c7:cb:e5:27:04:c5:bc:d9:c8:df:e5:d3:
         c5:84:6c:0f
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUSWLNI7GzqNYCmJ0eMjgew4RJtecwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1NzQ2QkIxMzdDRTczMEZCMENBQTI4QUFFNTdENEVE
RTBBMUU5OTAeFw0yNjA1MTExNzI2MzhaFw0yNzA1MTAxNzMxMzhaMDMxMTAvBgNV
BAMTKEEzNUMxQkYxMEUzOUZENEY3QzFBQkU1NTAxOURBMTJGQjA1QTc1NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBndSkF4/KkJ+UPXAgQ+loaVI1
1yvh9KGkCX1BmC595vq8cuB9UC4F4SHyuo0WXslMH0uVV0yRuQASzjdkDN5K+Mrv
wQHjFyPNFjj/ONngz6tgEFR/NxEYsX0m20QRKhEneO+HH2tBjrNbtksIZEOfnuSz
euAOElJXCpAF4lKaIVQCwvEMwmbjFO3wGZ+JwKvKjT8loz0zpXExPEyp0xifem/2
nWj+OdKyyWSRdrcRvzZ57hYdDFzEUn+Sy7UhoTPWpufaGE0nJ8zXKf0xCbYRapJs
atZ6pJ1+ZQOgzTGt6kNYsIT7MZ336B4pUv2OPOjBNZLtAy8Ayvx8uh+Ud7LPAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUo1wb8Q45/U98Gr5VAZ2hL7BadWIwHwYDVR0j
BBgwFoAUJ1dGuxN85zD7DKooquV9Tt4KHpkwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUMv
MC8yNzU3NDZCQjEzN0NFNzMwRkIwQ0FBMjhBQUU1N0Q0RURFMEExRTk5LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzI3NTc0NkJCMTM3Q0U3MzBGQjBDQUEyOEFBRTU3
RDRFREUwQTFFOTkuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQy8wLzMxMzUzMDJlMzIzNDMy
MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzczMTM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAlvJmMA0GCSqGSIb3DQEBCwUAA4IBAQCORdk59meMn9OV9P7oLh5gAiUS
GD0QB36HiL8mhQeHtWMJ3DiHxzcaAXIvD8fIU0Z5jxe38pAKbej7n9zxkgZSfcGT
YDjc8JOYKd7DYR59lBD/fQslWdbfHGjRNiyiEL9+E9wc7QofS+sXziNW9n4LQyQX
Xp9zBTCa4BQ2eceRgizvdL84xKWQj6zVcbPRtEg8VOHuXa0ecXy+7A6ozy3PWRBS
LfdXYF7sQ3+9QkVkl95utKhkcuG2JCPZ12JvlZ9xT9NmJ2LO1M411v5OMBhDjfnY
jm4n9gE0N8/yZqaudtydPozJZ3Vq/gf+gMExCJLHy+UnBMW82cjf5dPFhGwP
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:04 2026 by rpki-client