Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130302e302f32332d3234203d3e203234313638.roa
File:                     3231312e37392e3130302e302f32332d3234203d3e203234313638.roa (raw, json)
Hash identifier:          svNnPT/3FXqj43yDAFbIsB8bVOs2rs9sX/ChR8XMK5Y=
Subject key identifier:   D5:0E:56:C6:DA:EA:4C:07:70:F2:B7:3B:2E:10:E8:0A:EA:9F:2D:84
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       358C8ACF02A0F3C87B686D6E35D7DE80A3AEA3DD
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130302e302f32332d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 17:56:30 +0000
ROA not before:           Mon 11 May 2026 17:51:30 +0000
ROA not after:            Mon 10 May 2027 17:56:30 +0000
asID:                     24168
IP address blocks:        211.79.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8c:8a:cf:02:a0:f3:c8:7b:68:6d:6e:35:d7:de:80:a3:ae:a3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:51:30 2026 GMT
            Not After : May 10 17:56:30 2027 GMT
        Subject: CN=D50E56C6DAEA4C0770F2B73B2E10E80AEA9F2D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ce:aa:87:26:2b:08:20:cb:ef:3f:c3:d3:be:
                    0e:53:5e:f8:4d:a1:b1:a1:ea:cb:66:8b:b7:13:77:
                    d7:0c:aa:9c:ca:10:7e:79:bd:0b:46:46:b9:01:7a:
                    c4:53:09:dc:d3:73:4d:02:d4:bc:23:87:c4:86:06:
                    a9:ea:1a:8c:64:14:67:19:d1:77:78:bc:df:52:9b:
                    69:8a:5c:22:1d:ce:b4:cf:6f:f7:1f:a7:15:3b:78:
                    45:c2:d6:56:9a:55:de:37:a2:6a:99:6e:64:65:02:
                    71:eb:ab:2f:c6:2c:d1:79:b0:6e:ea:87:dc:82:9c:
                    00:f5:f0:da:e5:df:c2:54:e2:cc:8e:8b:35:10:a0:
                    2c:cf:da:e8:83:06:9b:7c:37:76:34:d7:8e:18:96:
                    b6:0c:99:5d:6a:ae:ed:02:31:33:0b:b6:ac:77:ca:
                    fb:50:9e:17:ea:ab:10:c4:ef:9b:4d:4f:a4:40:82:
                    10:aa:d4:7f:2d:b3:01:74:fa:42:8e:75:e1:5f:04:
                    1d:97:2e:c6:1a:e6:f6:c8:2c:46:06:27:0b:f2:cb:
                    d9:41:8c:b8:93:00:17:db:75:33:c9:44:b0:98:28:
                    02:ab:74:ea:e0:d0:3e:8c:bb:ee:9a:12:87:9a:ef:
                    33:8e:a5:8b:58:66:21:18:04:af:3b:a3:7f:c3:e4:
                    27:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0E:56:C6:DA:EA:4C:07:70:F2:B7:3B:2E:10:E8:0A:EA:9F:2D:84
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130302e302f32332d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:67:34:4f:92:42:56:f9:6a:38:f2:61:13:7d:f8:92:48:2e:
         f0:2e:ef:f6:46:a6:ab:a9:79:69:ea:3e:92:b4:a8:3e:62:66:
         af:6e:a2:d9:1c:47:de:84:e0:e1:62:2c:4b:be:6a:93:65:61:
         f5:99:4a:ab:fe:5f:43:88:16:a3:c3:58:22:3c:f8:ed:03:41:
         aa:c4:53:3f:07:19:ad:2d:4e:54:e6:b9:9b:c9:52:67:92:2f:
         76:23:41:85:66:22:17:7e:91:bf:e9:2b:4a:8f:28:11:c9:6b:
         55:e0:55:91:0e:89:5d:38:f7:fa:4a:db:f0:3e:46:dd:88:76:
         21:69:03:81:e8:b2:ca:3d:ba:66:cc:53:c8:7a:2e:f9:d4:87:
         05:af:41:22:34:81:89:43:8c:91:1f:3a:9d:b5:34:bd:4a:9d:
         2a:0b:d3:f7:46:a8:81:98:8f:12:09:17:2f:bf:67:37:d2:9a:
         41:2e:a5:e7:09:4d:bb:de:37:59:0c:5d:a2:b8:29:8a:6d:d5:
         9d:0d:1f:34:b3:4b:00:42:2a:5b:1b:05:f4:bc:fe:47:8c:d0:
         80:46:3b:c5:5d:e8:99:9b:da:2c:9b:e2:d0:b2:55:b7:84:6b:
         1f:80:02:94:16:3b:58:a1:ed:0a:c6:d0:23:dd:9f:90:db:18:
         f4:07:6e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:46 2026 by rpki-client