Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3234203d3e203138343234.roa
File:                     3132312e35302e3134342e302f32312d3234203d3e203138343234.roa (raw, json)
Hash identifier:          LengangRmL9fYwhzc3ubA/leUcXnRh4/svxMj1T1oeI=
Subject key identifier:   75:34:42:D9:8A:F6:D2:DE:16:1C:A5:BA:91:B0:59:D2:A7:94:A3:94
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       0E8E57B05CC25AA9EB9FA8B02715242E095831F8
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:09:12 +0000
ROA not before:           Mon 11 May 2026 17:04:12 +0000
ROA not after:            Mon 10 May 2027 17:09:12 +0000
asID:                     18424
IP address blocks:        121.50.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8e:57:b0:5c:c2:5a:a9:eb:9f:a8:b0:27:15:24:2e:09:58:31:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:04:12 2026 GMT
            Not After : May 10 17:09:12 2027 GMT
        Subject: CN=753442D98AF6D2DE161CA5BA91B059D2A794A394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:60:99:a8:d0:e5:9b:73:42:d5:1c:43:be:
                    74:5a:77:ea:f4:0a:20:7f:26:62:1f:89:98:9d:a0:
                    1e:a3:f2:4b:c1:42:46:f8:b4:fa:79:24:aa:35:fa:
                    ba:7e:92:b0:94:71:f0:f9:5e:f4:77:b6:97:c8:9b:
                    e2:98:20:c2:9e:f9:af:bd:98:c9:5a:21:54:ed:3b:
                    9e:37:14:3c:79:c7:05:5e:f4:b6:c8:87:ad:43:fe:
                    78:91:48:78:d1:ee:d3:8c:58:af:fa:eb:71:f5:f3:
                    4a:88:a6:93:37:1f:1d:a8:3d:7c:3c:e6:9a:8b:a4:
                    18:32:e3:75:c9:ef:d2:25:af:a2:c7:73:be:b0:ce:
                    a5:f2:5c:b2:f9:1b:79:74:6f:51:aa:0f:26:43:bf:
                    4a:62:e8:5b:40:60:73:39:23:36:33:2c:3a:f2:9a:
                    18:c2:7e:de:9b:86:93:c0:12:b9:1a:bb:5f:97:0d:
                    55:aa:98:6f:5e:82:d3:b6:f5:7d:6f:e1:e9:66:55:
                    98:68:d2:17:f2:a4:69:88:09:1b:2b:55:6e:12:f7:
                    e3:3c:ae:0c:8c:bf:d0:33:d0:4f:f8:72:81:b3:5c:
                    ce:22:b3:b5:94:1a:7d:e6:3e:8a:4f:18:72:84:66:
                    7e:ea:e8:b0:23:56:a0:94:11:62:c7:4e:8a:0f:1a:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:34:42:D9:8A:F6:D2:DE:16:1C:A5:BA:91:B0:59:D2:A7:94:A3:94
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:a5:b0:0d:80:14:ae:af:40:a4:c1:1e:20:af:86:b5:ad:
         0f:6a:44:7b:33:84:ea:99:6c:d9:ba:a8:68:b2:ac:13:b2:fd:
         40:9c:f4:6d:58:81:e6:ab:04:2e:71:4d:27:2f:7b:b4:32:db:
         df:3f:6d:3c:18:27:21:ad:ed:f1:2c:f2:c5:9b:a0:5d:e5:9d:
         52:04:b1:a4:f3:3d:6e:42:be:07:5f:aa:69:f0:b8:e2:6d:3b:
         d5:f5:ce:0f:17:99:26:7a:4a:28:6a:cc:2b:9b:0c:cc:69:02:
         94:2e:be:67:d4:90:91:62:0f:97:f3:72:f8:27:79:12:25:fa:
         7e:b1:54:97:8c:7d:3c:bb:03:c8:18:5c:ea:70:21:c4:f5:49:
         db:df:c5:ab:ef:51:b4:a4:4d:bb:80:20:ab:c3:fd:77:81:5b:
         e6:12:b1:2c:cf:26:2c:75:9b:1e:82:16:49:63:87:a5:2f:b9:
         5a:0c:c1:8c:7d:2a:79:e1:9b:e3:d0:c0:ea:1e:5c:c0:8c:44:
         b0:d0:83:4d:5b:c6:90:7e:1c:e4:f6:15:f7:bc:b8:d4:a3:64:
         02:d0:d0:b0:c4:a3:c8:1d:6e:b7:34:a0:ea:6b:e1:af:1f:fd:
         18:13:3b:2e:5e:ab:64:85:fb:48:11:b0:8c:0d:12:55:b0:b6:
         5d:67:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:41 2026 by rpki-client