Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WOQUAN/0/3136332e36312e3138342e302f32332d3234203d3e20313532363233.roa
File:                     3136332e36312e3138342e302f32332d3234203d3e20313532363233.roa (raw, json)
Hash identifier:          WjIaJOnCUaP7qXsHst6t6paHWdJyyQ9TflZd9JvijOE=
Subject key identifier:   D2:0A:52:EB:9C:17:10:42:9B:3E:F9:61:71:21:13:66:8E:B6:0D:0F
Certificate issuer:       /CN=27E99028E687CF3D07E1A45E549685C8F7776153
Certificate serial:       384C77204C3FD7BE570B8CD3EBA18917188AEE24
Authority key identifier: 27:E9:90:28:E6:87:CF:3D:07:E1:A4:5E:54:96:85:C8:F7:77:61:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WOQUAN/0/3136332e36312e3138342e302f32332d3234203d3e20313532363233.roa
Signing time:             Mon 11 May 2026 17:39:58 +0000
ROA not before:           Mon 11 May 2026 17:34:58 +0000
ROA not after:            Mon 10 May 2027 17:39:58 +0000
asID:                     152623
IP address blocks:        163.61.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.crl
                          rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4c:77:20:4c:3f:d7:be:57:0b:8c:d3:eb:a1:89:17:18:8a:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E99028E687CF3D07E1A45E549685C8F7776153
        Validity
            Not Before: May 11 17:34:58 2026 GMT
            Not After : May 10 17:39:58 2027 GMT
        Subject: CN=D20A52EB9C1710429B3EF961712113668EB60D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:33:cb:d1:eb:d4:cb:0b:87:c6:e8:e0:f1:e4:
                    72:c3:b9:8e:12:8b:71:85:cb:dd:b2:98:12:72:26:
                    bd:2a:e4:4e:3a:4e:f6:d7:95:06:61:ae:b2:c1:5e:
                    53:0c:27:d3:9d:f2:88:6b:dd:fd:a3:61:26:6a:4f:
                    3c:5c:d1:e3:b9:60:8e:8b:16:12:9f:b4:3f:6f:db:
                    89:da:06:4d:da:3a:5f:bf:db:2b:33:3c:97:6e:0a:
                    ed:a1:b1:9e:20:b8:3a:42:1b:92:ca:80:58:c5:de:
                    31:e8:10:bc:68:91:7c:71:2e:ae:93:1f:2d:4b:05:
                    95:9f:82:15:7d:2a:a4:f4:1d:c8:fa:17:be:e1:2c:
                    e1:11:18:f8:44:8f:09:05:be:5d:d3:00:9e:af:07:
                    fd:2e:bc:55:82:04:c2:1f:e3:29:5a:e3:a1:cc:ea:
                    10:60:5e:44:87:5a:85:0d:a6:8a:44:1b:b4:90:f0:
                    b9:3d:d8:6b:73:32:e8:2d:20:0e:25:be:0b:11:c3:
                    9a:4a:e9:e7:34:93:a2:c7:7c:4f:ed:64:77:00:6f:
                    c5:e8:99:1e:09:af:1d:52:f2:1d:28:09:3c:8f:5c:
                    b6:cb:3d:a5:e1:b7:9b:1b:e0:a3:63:0f:f0:9e:b4:
                    43:12:c9:70:8d:23:5a:b7:2d:2e:a8:f9:1c:9e:91:
                    38:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0A:52:EB:9C:17:10:42:9B:3E:F9:61:71:21:13:66:8E:B6:0D:0F
            X509v3 Authority Key Identifier:
                keyid:27:E9:90:28:E6:87:CF:3D:07:E1:A4:5E:54:96:85:C8:F7:77:61:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WOQUAN/0/27E99028E687CF3D07E1A45E549685C8F7776153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27E99028E687CF3D07E1A45E549685C8F7776153.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WOQUAN/0/3136332e36312e3138342e302f32332d3234203d3e20313532363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:f8:a3:24:ed:d8:b0:45:e0:ad:ef:28:e8:05:8a:3c:be:
         43:3a:21:97:1b:da:71:a9:86:a7:88:16:2e:c6:90:67:cc:5a:
         5d:11:36:4b:ec:28:83:c1:ac:28:43:fc:62:3c:6d:bb:58:9e:
         da:a3:64:f9:62:16:01:0e:bb:92:33:45:7e:eb:57:63:dd:9d:
         7d:42:59:27:98:34:75:91:1a:a4:08:e7:b1:a4:b5:12:7a:be:
         1c:92:6c:fd:28:d0:73:a6:05:d3:7f:d4:94:80:4b:8d:75:55:
         3d:36:1f:8e:6a:83:b1:7c:0d:34:d6:58:4e:14:45:e7:b8:16:
         26:e2:da:96:f8:7f:2e:19:7c:0b:0a:db:d7:5c:f5:9b:d4:62:
         57:76:d5:73:0f:33:aa:9a:45:0b:38:f4:b8:3b:d6:f9:de:bc:
         ae:22:0d:1e:01:ee:55:a4:06:9b:97:7f:d9:1e:70:6e:76:6e:
         af:76:49:a9:cb:ef:7d:d3:e9:74:80:c7:e9:2d:7e:8f:36:30:
         2a:81:4f:7b:da:e2:92:c7:b8:14:8f:95:e2:f1:30:fc:6c:e9:
         f6:76:13:4e:6c:65:0f:14:7d:64:49:c8:9e:94:ce:6d:ed:de:
         19:84:ce:e6:b6:3f:99:f8:20:f7:0c:e6:f3:51:63:4c:a4:7a:
         40:69:06:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:15:08 2026 by rpki-client