Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134382e302f32342d3234203d3e203138343234.roa
File:                     3132312e35302e3134382e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          NfQuiEhl7OsEIjV8PwvH2kJ42YxH8OcaZGoXB/MoCFQ=
Subject key identifier:   B6:B7:D4:19:03:C5:F1:69:F8:7A:EB:1D:23:A8:50:34:71:B6:52:70
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       43B09403F795E935F4D0261A1403A94FB94F74AC
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134382e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:07:18 +0000
ROA not before:           Mon 11 May 2026 17:02:18 +0000
ROA not after:            Mon 10 May 2027 17:07:18 +0000
asID:                     18424
IP address blocks:        121.50.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b0:94:03:f7:95:e9:35:f4:d0:26:1a:14:03:a9:4f:b9:4f:74:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:02:18 2026 GMT
            Not After : May 10 17:07:18 2027 GMT
        Subject: CN=B6B7D41903C5F169F87AEB1D23A8503471B65270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:ae:6f:9e:46:49:1f:d4:8b:d2:7c:2a:8f:
                    12:91:96:d7:e6:81:fa:7e:e6:85:ba:45:a8:a8:b4:
                    fb:b6:28:2c:a7:a2:ce:d2:d9:88:ca:26:66:25:67:
                    48:bd:75:5b:1b:52:b4:9e:b5:b2:e8:9c:e4:df:52:
                    ff:29:56:0f:b6:02:26:ab:79:43:ba:63:49:c2:fd:
                    64:ca:ed:a5:a3:03:c6:53:b5:6c:60:02:ef:7f:89:
                    7b:ce:f0:83:40:f5:05:65:67:3a:8b:c3:b6:83:33:
                    0f:45:67:52:7d:c1:51:a0:97:b7:fe:53:17:bf:66:
                    85:21:02:d1:87:23:31:17:46:76:6d:a4:12:50:61:
                    23:c8:dd:37:31:7c:06:27:e0:f4:11:4f:5b:40:c4:
                    e7:a2:21:9d:6d:7e:8f:6b:e8:63:e8:a7:a1:3e:20:
                    3c:c3:30:3a:d5:ab:62:a1:7d:0a:42:ff:c0:52:64:
                    64:bb:bf:f3:77:0d:3c:6f:85:77:df:b1:e3:9d:79:
                    83:58:37:7b:f8:11:c6:10:70:76:a6:56:02:fb:fa:
                    6e:55:7d:ae:9f:8d:34:a8:58:15:e7:94:35:c9:7d:
                    e6:60:d6:b7:ca:03:98:e1:f5:12:55:c6:04:de:ca:
                    2e:5d:54:de:9e:8c:25:4a:fb:a0:52:61:24:df:b5:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:D4:19:03:C5:F1:69:F8:7A:EB:1D:23:A8:50:34:71:B6:52:70
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3132312e35302e3134382e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:96:f2:26:b4:89:64:f8:3a:d3:a2:87:78:04:d8:46:4e:93:
         f1:9f:15:89:49:85:31:0c:5c:1e:11:b0:3e:74:05:97:38:1f:
         db:26:a8:1a:fb:5a:44:53:5a:70:06:e0:93:c4:33:fd:05:2d:
         6b:4a:7c:b5:9d:da:f5:6e:43:f3:9d:24:4c:3a:e4:41:02:3a:
         8a:3d:ec:69:d9:11:97:f6:5b:81:e4:90:34:b3:23:b3:95:c9:
         32:06:48:a2:24:72:14:f9:a0:a3:4b:fd:fd:fd:72:5f:61:c6:
         ac:80:c4:a0:fc:b3:e8:c2:1a:ba:c3:5c:43:3b:0f:5e:b9:5b:
         4e:76:c5:bb:d2:9a:48:5c:2e:7a:8f:30:73:73:82:ee:8a:7c:
         fb:8d:4d:59:05:13:81:1b:1b:29:b1:94:da:c4:50:ff:1b:67:
         6a:29:7b:82:89:f4:33:a9:81:d5:d8:88:c0:ef:c4:d3:f5:67:
         e7:f4:fb:cd:81:21:4e:58:2b:92:42:b9:ef:2d:03:65:0e:5b:
         dd:b1:e1:3b:a0:2e:d5:b6:45:f2:1b:13:a0:96:ec:10:5c:fc:
         4a:b9:b9:0b:31:a8:7b:db:e1:cc:e3:f4:5c:f3:28:a9:cd:dc:
         22:fa:e4:c2:88:80:e6:c3:8b:24:c7:4e:35:10:94:cf:d2:1e:
         53:a4:6b:29
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUQ7CUA/eV6TX00CYaFAOpT7lPdKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2
NjVGRUY2NzAeFw0yNjA1MTExNzAyMThaFw0yNzA1MTAxNzA3MThaMDMxMTAvBgNV
BAMTKEI2QjdENDE5MDNDNUYxNjlGODdBRUIxRDIzQTg1MDM0NzFCNjUyNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr+K5vnkZJH9SL0nwqjxKRltfm
gfp+5oW6RaiotPu2KCynos7S2YjKJmYlZ0i9dVsbUrSetbLonOTfUv8pVg+2Aiar
eUO6Y0nC/WTK7aWjA8ZTtWxgAu9/iXvO8INA9QVlZzqLw7aDMw9FZ1J9wVGgl7f+
Uxe/ZoUhAtGHIzEXRnZtpBJQYSPI3TcxfAYn4PQRT1tAxOeiIZ1tfo9r6GPop6E+
IDzDMDrVq2KhfQpC/8BSZGS7v/N3DTxvhXffseOdeYNYN3v4EcYQcHamVgL7+m5V
fa6fjTSoWBXnlDXJfeZg1rfKA5jh9RJVxgTeyi5dVN6ejCVK+6BSYSTftUx9AgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUtrfUGQPF8Wn4eusdI6hQNHG2UnAwHwYDVR0j
BBgwFoAU+Oz3ZyMCp/q1KIUirWTSF2Zf72cwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VCVEFJ
V0FOLzAvRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2NjVGRUY2Ny5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GOEVDRjc2NzIzMDJBN0ZBQjUyODg1MjJB
RDY0RDIxNzY2NUZFRjY3LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VCVEFJV0FOLzAvMzEzMjMx
MmUzNTMwMmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzQzMjM0
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAeTKUMA0GCSqGSIb3DQEBCwUAA4IBAQCXlvImtIlk+DrTood4
BNhGTpPxnxWJSYUxDFweEbA+dAWXOB/bJqga+1pEU1pwBuCTxDP9BS1rSny1ndr1
bkPznSRMOuRBAjqKPexp2RGX9luB5JA0syOzlckyBkiiJHIU+aCjS/39/XJfYcas
gMSg/LPowhq6w1xDOw9euVtOdsW70ppIXC56jzBzc4Luinz7jU1ZBROBGxspsZTa
xFD/G2dqKXuCifQzqYHV2IjA78TT9Wfn9PvNgSFOWCuSQrnvLQNlDlvdseE7oC7V
tkXyGxOgluwQXPxKubkLMah72+HM4/Rc8yipzdwi+uTCiIDmw4skx041EJTP0h5T
pGsp
-----END CERTIFICATE-----
Generated at Wed May 13 21:09:38 2026 by rpki-client