Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3332203d3e203138343234.roa
File:                     3132312e35302e3134342e302f32312d3332203d3e203138343234.roa (raw, json)
Hash identifier:          P7gN8MLfYMvnL6NQS5m70ELnQm2DIVIWFUS9KH12hJQ=
Subject key identifier:   84:A2:28:35:01:8C:D3:92:6D:41:14:A6:49:1A:39:DC:C5:B5:09:F8
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       5EEC054F8395DA0DA08DC0412AD045A8D05A206B
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3332203d3e203138343234.roa
Signing time:             Thu 14 May 2026 10:34:04 +0000
ROA not before:           Thu 14 May 2026 10:29:04 +0000
ROA not after:            Thu 13 May 2027 10:34:04 +0000
asID:                     18424
IP address blocks:        121.50.144.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 04:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ec:05:4f:83:95:da:0d:a0:8d:c0:41:2a:d0:45:a8:d0:5a:20:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 14 10:29:04 2026 GMT
            Not After : May 13 10:34:04 2027 GMT
        Subject: CN=84A22835018CD3926D4114A6491A39DCC5B509F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:0b:26:08:cc:c2:25:48:87:0e:b1:0d:70:
                    c1:c8:66:be:2b:fa:2c:a2:b2:d5:30:c9:1f:0b:4f:
                    65:88:1b:11:a5:c6:22:37:93:2c:f6:7f:62:91:1b:
                    bf:da:fd:76:78:0b:24:9f:f2:9a:6e:b5:9c:4a:60:
                    fc:29:db:2a:4a:16:2b:45:61:55:42:26:31:4b:4f:
                    e2:11:4d:49:88:e5:45:70:d7:ff:b2:a4:d3:11:5d:
                    fe:a1:64:c2:f2:55:4c:9a:88:c2:4d:bb:9a:53:ac:
                    a1:ae:f2:10:ee:44:56:48:95:d7:c4:09:6a:61:ff:
                    5f:11:89:fb:b7:53:b3:78:a9:58:f4:80:32:fa:a9:
                    97:27:ec:85:52:3d:0f:8b:9a:de:95:a6:8e:c8:d7:
                    d9:35:c0:3c:67:be:55:d1:d2:4e:06:0f:4a:91:7a:
                    bd:4c:8d:a6:20:f9:79:5d:d9:8b:a7:85:2c:f4:d0:
                    ad:ed:3a:2a:db:41:35:19:ff:b9:d8:d1:d8:2f:62:
                    ff:f5:12:e4:3c:bd:7a:c4:a6:ed:20:58:cc:80:28:
                    5d:3a:c0:47:3e:70:ec:50:a1:67:2e:00:2b:04:d7:
                    e6:65:19:e1:82:77:4f:91:72:06:ff:cc:d8:30:08:
                    f2:3e:c1:fe:ff:91:49:cb:fc:28:59:7c:c3:06:2c:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A2:28:35:01:8C:D3:92:6D:41:14:A6:49:1A:39:DC:C5:B5:09:F8
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134342e302f32312d3332203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:70:fb:8d:14:02:3e:b8:cc:38:91:87:19:37:7f:76:e5:
         e4:98:a3:a6:14:e1:cf:37:ca:ed:b2:48:15:28:ea:f7:c7:0a:
         a1:2b:0a:34:0d:55:33:8f:01:77:7e:10:4d:34:20:93:a9:8a:
         ed:75:93:b1:e3:1b:77:41:27:27:52:90:ab:bf:2c:2c:7d:db:
         ba:b0:b9:78:5d:5b:a0:3d:40:b9:19:9e:ac:51:7f:eb:e2:4c:
         10:84:1b:da:e5:ad:71:7f:6a:df:e0:57:c4:4f:fb:d2:a0:bc:
         c5:b0:4f:5f:a8:f6:bc:8a:48:7d:54:88:4c:b4:87:c7:bb:dd:
         42:2c:d9:40:ad:a7:3c:e3:08:de:70:72:49:f1:b1:40:e3:10:
         bc:5c:e9:62:c1:fe:42:20:ac:8e:d9:ba:14:97:48:42:1c:c2:
         d0:f6:c4:7b:77:c2:b5:64:e8:9c:0a:f0:ab:cd:9a:72:f8:a2:
         b0:7e:4a:dc:65:32:20:8b:fe:bd:aa:9f:82:d1:22:bc:2a:0c:
         51:84:a8:09:9e:f1:f1:dd:d3:d5:88:dc:03:b5:16:66:9a:3e:
         3f:00:a3:c1:51:e1:8b:0c:fc:37:65:f9:1a:74:44:34:68:0a:
         5c:4a:fc:4b:68:2a:f6:3c:73:ad:28:3e:af:b3:f1:f1:da:e1:
         03:d0:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:29:30 2026 by rpki-client