Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3230322e31322e37362e302f32322d3332203d3e20313331313439.roa
File:                     3230322e31322e37362e302f32322d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          HAvwmN0LL6mrAImekQpqdmqpo1QKT3FkXOpjWBPVCgI=
Subject key identifier:   69:83:0B:FC:13:94:98:D8:77:20:04:EC:05:24:65:13:62:24:83:AB
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       46B58C0E98163EAEB9608B900BA853A2B7CF8E25
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3230322e31322e37362e302f32322d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:26:38 +0000
ROA not before:           Mon 11 May 2026 17:21:38 +0000
ROA not after:            Mon 10 May 2027 17:26:38 +0000
asID:                     131149
IP address blocks:        202.12.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b5:8c:0e:98:16:3e:ae:b9:60:8b:90:0b:a8:53:a2:b7:cf:8e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:21:38 2026 GMT
            Not After : May 10 17:26:38 2027 GMT
        Subject: CN=69830BFC139498D8772004EC05246513622483AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:d0:f6:ba:8d:3f:cb:4f:09:28:b5:7e:3e:
                    29:b8:cf:9e:f5:6d:40:d5:87:2a:2e:4f:31:d3:7e:
                    c8:2e:b6:63:a8:42:22:8d:59:d0:3c:45:b5:05:3e:
                    f1:df:a4:da:65:f0:b3:50:2c:22:2a:b5:e6:3d:e9:
                    1e:ea:99:8a:d5:82:20:aa:c3:78:53:d7:7f:e5:d8:
                    ef:82:4e:59:8b:a5:b1:0e:0e:45:1a:8c:65:96:63:
                    f7:ca:ba:89:c1:ab:47:81:83:3d:ea:0d:64:93:0a:
                    04:9c:5a:eb:74:21:f1:bd:70:2f:ad:ac:30:23:41:
                    90:17:0e:6b:4b:59:6d:60:04:bd:45:d3:2e:dc:84:
                    fb:8a:9b:47:69:73:9e:06:c8:ea:2a:1f:3c:1f:65:
                    5c:12:8c:1f:4f:76:22:0b:e3:67:51:a1:81:16:08:
                    7b:a3:20:73:cb:72:2a:a9:0b:73:4f:b2:f1:ce:26:
                    64:d5:25:51:f6:be:3e:37:f4:36:d9:74:50:4a:33:
                    5c:e0:63:e6:5a:4a:4e:b8:1a:a5:c9:21:c5:44:b8:
                    7a:b0:c3:ac:53:01:19:d8:18:e6:e3:25:44:8f:8f:
                    80:bc:b2:63:3c:75:31:4d:7c:8f:53:17:d7:93:46:
                    75:3e:19:47:75:52:82:2c:64:0f:07:2c:cb:5e:fa:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:0B:FC:13:94:98:D8:77:20:04:EC:05:24:65:13:62:24:83:AB
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3230322e31322e37362e302f32322d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:84:f3:d7:99:e5:dc:4e:3e:70:4c:94:04:ea:f9:3f:3d:
         4b:90:bf:7c:30:27:d6:a5:5a:69:ec:96:00:ee:f3:50:ab:dc:
         4a:30:3d:8d:44:36:61:60:b0:90:ed:de:6a:15:66:05:3b:7c:
         dc:da:01:9e:bc:ad:8e:09:66:fd:35:15:31:95:f9:22:c8:b8:
         d3:1f:a9:b4:7a:15:6a:a4:6f:16:ef:e0:9a:4c:52:06:b9:22:
         23:6f:24:6a:ff:89:68:87:4c:fd:50:6d:4f:72:5e:0b:7b:02:
         5b:dc:bc:fb:ec:b4:66:8a:a1:06:c6:5f:47:cf:0d:80:d3:36:
         14:60:4e:50:f6:a4:d3:32:91:c0:bc:5d:51:8e:e8:78:f8:d6:
         d1:2a:41:7b:dd:7c:d3:ff:41:72:3a:c5:b8:b5:04:64:ee:29:
         05:4f:05:cf:c0:f2:db:6b:46:74:7b:43:7c:ca:16:65:01:c8:
         ed:c1:18:5f:bd:f5:0e:73:6c:ed:08:de:c6:32:ca:6c:7f:2d:
         bd:c4:6c:f0:7c:b2:25:a0:cf:66:1f:66:87:74:6c:c5:dd:14:
         78:60:22:36:a1:39:4f:93:ac:93:cf:e4:2e:99:df:cc:68:b1:
         ef:02:e3:79:b6:b9:62:f0:b4:65:b5:e2:4a:a6:82:68:2c:4e:
         8e:8c:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:13 2026 by rpki-client