Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa
File:                     3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa (raw, json)
Hash identifier:          5asE5DvsTfpB1BVRf4zu0Zel18vuQX5T6T90JBepePs=
Subject key identifier:   EA:38:34:5A:94:96:6A:09:38:A3:21:8F:FF:C8:FE:52:FA:E8:87:36
Certificate issuer:       /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
Certificate serial:       2A6530655B727B94D9130B969A802350D85FC7AD
Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa
Signing time:             Mon 11 May 2026 17:08:09 +0000
ROA not before:           Mon 11 May 2026 17:03:09 +0000
ROA not after:            Mon 10 May 2027 17:08:09 +0000
asID:                     18018
IP address blocks:        122.255.94.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:65:30:65:5b:72:7b:94:d9:13:0b:96:9a:80:23:50:d8:5f:c7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E
        Validity
            Not Before: May 11 17:03:09 2026 GMT
            Not After : May 10 17:08:09 2027 GMT
        Subject: CN=EA38345A94966A0938A3218FFFC8FE52FAE88736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:4d:98:b2:ba:34:b1:d2:ef:4d:ba:be:80:
                    ac:d4:b9:49:a2:e3:fd:c5:6e:46:d9:f1:56:3a:f7:
                    17:46:d5:9c:71:b6:a1:43:b7:6b:0b:0e:06:40:74:
                    bf:55:10:1f:ff:ef:1b:c9:34:3a:76:7d:62:4c:5f:
                    af:4d:27:8a:5e:79:22:5e:52:38:3b:d3:5a:bc:f1:
                    51:c8:bf:3a:09:db:65:8f:65:1e:5c:08:58:f3:73:
                    47:44:69:21:a2:95:d5:1e:73:8a:53:75:05:43:1c:
                    de:a7:e0:28:b1:73:28:72:9a:c9:89:98:a8:58:7e:
                    35:e7:52:90:cf:3f:21:56:0e:20:d8:bf:0a:fe:e8:
                    9c:f4:b9:3c:b2:5c:95:be:a3:ce:f5:14:de:90:38:
                    4b:92:f1:6a:28:dc:c8:34:20:03:2b:fd:a7:f7:4c:
                    91:84:0a:a2:6d:7b:87:22:aa:7d:d3:d6:89:ee:4a:
                    3b:89:da:f5:d9:8c:4b:65:08:fa:d3:90:75:d6:42:
                    1a:2d:66:cf:34:bb:14:01:dc:12:37:09:4e:77:2d:
                    41:7b:b0:b2:c3:0b:00:f8:05:fe:cb:82:a1:04:55:
                    71:a2:ce:a4:b1:f6:3b:7f:ab:34:e3:73:6a:e7:05:
                    c5:34:5d:b7:7f:bf:ee:66:68:a2:f5:9a:c2:df:91:
                    ec:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:38:34:5A:94:96:6A:09:38:A3:21:8F:FF:C8:FE:52:FA:E8:87:36
            X509v3 Authority Key Identifier:
                keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e39342e36342f32362d3236203d3e203138303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.255.94.64/26

    Signature Algorithm: sha256WithRSAEncryption
         46:48:f6:be:c2:fb:b5:8a:41:6c:36:da:15:ed:b6:81:04:6d:
         f2:15:eb:f8:2a:07:18:84:f5:8f:37:e9:14:10:b8:ad:45:1c:
         2d:2a:3a:05:06:81:f1:8c:8f:47:be:c4:99:6b:f0:fd:94:40:
         5d:a7:8f:82:de:37:46:05:4a:30:80:e0:cb:f1:38:84:a3:a0:
         65:f4:81:fa:3f:0f:77:35:dd:34:ff:5b:29:cb:a1:c2:9d:96:
         4e:b8:bb:0f:9b:81:c7:6e:ac:6c:8c:8d:57:4d:6b:5b:25:9e:
         b1:17:dd:ba:3c:4f:18:2e:6a:ec:aa:fe:0f:23:8c:54:36:e9:
         e2:d1:15:f5:3a:db:68:19:79:01:ee:cd:09:48:f7:77:be:f4:
         49:3e:5f:02:ef:50:ea:be:3a:52:0b:31:c0:db:d8:24:b1:d1:
         03:ca:09:03:b8:ff:bb:9b:25:c6:fe:65:68:54:94:67:d0:e6:
         83:cf:58:69:ec:c5:41:3d:fb:21:2d:e3:16:c7:62:03:da:ab:
         65:d0:58:de:f5:7e:31:92:ec:d1:e3:0a:f3:9f:09:c8:da:cd:
         f9:4a:3b:38:56:2a:89:c6:f9:4f:c4:b4:79:4e:3d:5c:77:a3:
         dd:a5:1f:b7:84:78:3b:3f:ae:fb:78:a0:18:55:98:56:fa:f4:
         e9:63:fc:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:47 2026 by rpki-client