Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130302e302f32332d3332203d3e203138343234.roa
File:                     3231312e37392e3130302e302f32332d3332203d3e203138343234.roa (raw, json)
Hash identifier:          +VagGrCOyaA9/1wr15twlzIuLxCLR90dUREL5kirnas=
Subject key identifier:   E0:DE:E8:65:FF:14:16:23:97:4A:D4:FE:99:33:F3:B0:03:E7:AE:C1
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       62D304933E25F98829479940C31458CD0FCC2D05
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130302e302f32332d3332203d3e203138343234.roa
Signing time:             Thu 14 May 2026 10:34:05 +0000
ROA not before:           Thu 14 May 2026 10:29:05 +0000
ROA not after:            Thu 13 May 2027 10:34:05 +0000
asID:                     18424
IP address blocks:        211.79.100.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 04:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d3:04:93:3e:25:f9:88:29:47:99:40:c3:14:58:cd:0f:cc:2d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 14 10:29:05 2026 GMT
            Not After : May 13 10:34:05 2027 GMT
        Subject: CN=E0DEE865FF141623974AD4FE9933F3B003E7AEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b8:65:fc:38:b0:e0:2d:3a:6f:b5:1d:ff:57:
                    92:44:c1:63:87:92:3b:bb:4b:9c:65:a0:5d:d3:34:
                    93:43:2b:5d:91:f9:1f:21:5e:33:d2:92:d1:5a:f3:
                    cb:d8:90:db:91:f1:3b:30:eb:7e:d7:01:9b:85:12:
                    a9:ba:70:5e:f7:b9:b2:b9:e6:ec:af:64:01:f1:28:
                    f6:1c:12:b1:64:0a:61:4a:fa:be:64:4d:e2:12:e4:
                    30:60:6e:c1:27:18:02:f5:d6:19:a7:9c:e3:c7:e4:
                    6b:8e:91:5c:62:ab:54:49:4e:58:53:44:2b:da:e0:
                    81:bc:34:8b:d6:40:e0:e9:57:4a:f0:ef:b0:ee:89:
                    45:36:93:4a:bb:4d:9f:cc:84:1a:41:ef:a3:1b:92:
                    39:38:39:94:33:77:87:72:27:65:0f:65:af:4f:7e:
                    6b:27:92:ff:59:21:73:3d:3a:b8:8f:65:2b:c6:9c:
                    5c:f9:e7:d0:ff:97:47:27:b3:52:1e:d5:b8:a2:cf:
                    22:90:fd:72:6e:a2:04:39:d4:5f:b1:3a:8b:11:d7:
                    1a:d3:ba:b6:ab:bf:47:ed:c0:a0:f0:0e:4d:2d:28:
                    29:98:85:ee:11:9e:d1:73:a9:59:49:0b:32:3d:6e:
                    3c:6d:07:3f:ed:7d:9b:21:46:a7:52:b9:46:f3:30:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DE:E8:65:FF:14:16:23:97:4A:D4:FE:99:33:F3:B0:03:E7:AE:C1
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3231312e37392e3130302e302f32332d3332203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.79.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:e0:c8:63:6d:d6:b3:26:bf:b7:18:63:04:0e:07:34:49:
         89:da:50:e5:8d:ae:f9:d7:a8:dc:9e:67:e6:26:ba:d2:8e:70:
         01:f1:1b:34:e5:07:f7:74:bf:b3:94:34:e8:c3:57:2a:41:1b:
         12:24:66:6c:38:1d:46:36:9c:83:4b:32:d2:9a:35:90:e4:8c:
         3e:03:46:d7:3a:98:1d:2a:3c:7a:2b:c6:fa:39:44:60:3e:bc:
         1a:9f:49:ec:ca:d2:7b:5f:ca:e7:0e:50:1e:63:ee:af:e5:7b:
         c4:5d:a7:c5:40:4c:68:4a:7c:31:56:bb:5e:7b:61:85:66:cb:
         0a:e4:71:93:aa:28:cf:75:f7:ae:d0:22:b1:5f:ca:f0:4f:89:
         22:91:6f:19:f1:a8:da:9f:db:26:bb:d9:f5:8a:8e:a5:b0:51:
         c7:1d:2e:14:24:75:20:49:90:d5:3b:2b:c2:ab:66:59:2f:5c:
         5a:30:0c:ad:52:88:8a:b0:02:9e:37:ca:d4:0d:db:15:a2:b5:
         a1:04:89:99:97:b9:0a:4f:11:10:85:cb:4f:30:6b:9a:be:d8:
         c0:16:46:df:8f:62:0e:c5:a6:01:e6:be:34:4b:4a:4f:c2:7d:
         c1:a8:79:f4:af:fa:29:89:68:75:35:0e:58:7a:ad:28:19:9d:
         2b:97:a8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:30:04 2026 by rpki-client