Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3234203d3e203234313638.roa
File:                     3132312e35302e3134342e302f32312d3234203d3e203234313638.roa (raw, json)
Hash identifier:          ONm/+b39QpAEOn5LwvKr9KPXROnFFPTQZRJtB2Pl+Ds=
Subject key identifier:   F2:DD:99:B4:FC:96:E8:8A:39:5B:76:1A:41:85:9F:78:CE:9D:DC:38
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       5020B22563DB7562AEBA9994491A8EBEB3B67F0E
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 17:09:13 +0000
ROA not before:           Mon 11 May 2026 17:04:13 +0000
ROA not after:            Mon 10 May 2027 17:09:13 +0000
asID:                     24168
IP address blocks:        121.50.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:20:b2:25:63:db:75:62:ae:ba:99:94:49:1a:8e:be:b3:b6:7f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:04:13 2026 GMT
            Not After : May 10 17:09:13 2027 GMT
        Subject: CN=F2DD99B4FC96E88A395B761A41859F78CE9DDC38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:2d:b7:57:f4:a7:4a:26:40:a8:f0:c0:57:
                    af:f7:6d:27:13:ad:7a:d8:e7:10:62:58:8d:78:f3:
                    55:f4:9b:85:f8:66:e1:5b:d6:42:a2:36:8a:23:b9:
                    9c:7a:ce:7c:e4:96:a1:ce:2b:06:7b:47:92:80:cd:
                    ca:c6:c4:ae:d2:f4:b9:b9:3a:2c:4d:bf:fd:5a:88:
                    66:a5:b3:31:44:ee:2c:5f:1c:5c:67:3a:fc:fc:5c:
                    a0:46:5d:db:ea:e2:f0:56:0d:ce:b0:6b:5d:a8:7a:
                    d7:63:e4:81:f7:1a:34:73:c9:ef:00:15:1b:0d:3d:
                    d0:03:cc:c1:30:30:ca:1d:a3:b1:96:12:f4:e8:b9:
                    b4:55:49:e4:09:24:5f:44:ed:f0:a0:a9:99:7a:c4:
                    38:5e:3b:bb:fb:dd:f0:b0:38:be:fd:cf:38:c1:c9:
                    e8:e9:23:52:5c:76:ae:3d:8b:fc:03:5e:c9:7b:33:
                    19:a9:a6:20:aa:b2:fa:14:de:cb:39:65:aa:e1:b2:
                    57:96:46:c2:03:a0:8d:34:5c:13:2f:65:d4:44:db:
                    21:0b:44:ea:7e:70:8e:65:b5:ec:47:83:06:1b:dc:
                    da:28:02:d2:5b:6b:e5:32:55:8c:72:7b:a0:0c:74:
                    03:1e:3f:e4:e6:56:eb:4e:9b:01:36:1e:e5:4a:ad:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:99:B4:FC:96:E8:8A:39:5B:76:1A:41:85:9F:78:CE:9D:DC:38
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:20:a8:a0:b2:db:ce:d6:06:7c:1a:83:3a:1f:95:7b:24:
         ee:26:2e:ea:a6:c2:f8:7f:d3:4a:86:57:2a:bc:5f:84:37:57:
         28:ba:64:41:4f:4e:ea:3f:96:5d:e2:4b:e7:9a:4e:78:cc:d0:
         9e:83:81:d6:c4:49:82:f8:e3:a6:ab:6d:82:ba:89:72:c8:42:
         5b:7a:d2:f3:a5:93:d0:25:85:86:b7:9a:10:76:77:ee:e9:b2:
         fb:47:54:dd:c3:4b:b9:13:cb:95:a7:f5:1a:70:ec:38:25:76:
         5d:e3:ab:50:e1:19:94:bb:a8:5b:81:66:bb:ef:ed:7f:57:79:
         7d:64:d4:06:3b:2d:27:fa:a1:b3:e4:0e:a4:8a:f6:a9:61:29:
         3c:43:7d:33:65:72:23:55:ee:14:47:12:1b:20:85:9c:b9:b4:
         56:bb:d0:6b:df:4a:e6:28:48:23:3a:ad:2e:66:c7:87:b5:c9:
         9d:ad:21:8a:b4:32:f7:6a:c3:e3:a8:37:5d:ef:42:69:13:38:
         d6:d1:9c:76:3b:f0:ab:c6:fd:63:1e:74:8c:c9:1c:06:c3:ac:
         46:dc:5b:f1:e4:f1:9d:d9:df:d2:5e:f6:2c:b7:76:35:48:d0:
         2a:d8:b5:ae:19:23:e5:a6:ba:ef:8f:8a:0d:07:cd:21:a5:a5:
         86:91:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:42 2026 by rpki-client