Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ZEROONEINF/0/3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa
File:                     3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          P5QLHoBtt6SbxYucP/7Z4dIJgiwE8f3I3JbpUYs0g0M=
Subject key identifier:   48:82:8B:73:CB:26:B4:25:F6:BE:2C:39:95:CC:74:E2:CD:A7:C0:20
Certificate issuer:       /CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
Certificate serial:       12717C1B4501DDBE239A94FBD1011F9EEE21D9CB
Authority key identifier: 62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa
Signing time:             Mon 11 May 2026 17:40:25 +0000
ROA not before:           Mon 11 May 2026 17:35:25 +0000
ROA not after:            Mon 10 May 2027 17:40:25 +0000
asID:                     197537
IP address blocks:        163.227.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl
                          rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:71:7c:1b:45:01:dd:be:23:9a:94:fb:d1:01:1f:9e:ee:21:d9:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6
        Validity
            Not Before: May 11 17:35:25 2026 GMT
            Not After : May 10 17:40:25 2027 GMT
        Subject: CN=48828B73CB26B425F6BE2C3995CC74E2CDA7C020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:83:10:8e:58:43:2f:f9:0b:da:f8:7c:72:
                    a1:fd:b1:d5:9d:65:44:b4:c7:ed:9b:36:d9:f6:a9:
                    6c:a8:ae:32:31:e3:b3:31:ba:2a:ef:8e:59:79:ff:
                    23:6a:25:c7:50:47:b3:e0:c2:ab:ef:c7:2c:30:1d:
                    91:29:4b:55:d6:7d:89:2f:48:2d:80:05:fb:b0:d2:
                    6e:b2:e6:f5:69:b9:48:02:e3:92:cc:64:bf:78:d5:
                    88:08:a5:49:b1:d9:4d:b3:a0:8c:59:03:51:1c:9d:
                    d2:d7:7d:df:09:de:89:e0:76:14:a7:89:4c:b7:f8:
                    65:93:9e:b9:f6:22:1c:23:ba:0f:a6:d0:42:50:41:
                    d6:cd:43:ee:13:0d:0f:88:f2:ce:0e:dd:cd:1d:72:
                    ab:52:93:57:07:cc:70:a3:60:8d:4d:95:27:ce:ff:
                    27:3a:de:a8:83:20:ea:ad:72:e4:80:9c:8e:1f:64:
                    e9:0d:90:2f:34:84:44:27:6d:89:ec:88:20:98:26:
                    55:1c:42:bc:16:02:12:2a:32:d4:0d:3f:67:98:11:
                    18:2e:07:fa:e6:e3:27:0a:7a:12:bc:e2:56:d1:59:
                    b9:ac:bf:d3:e5:b0:59:73:35:2e:bc:99:a9:31:44:
                    99:45:5b:e8:7c:e5:28:ce:d3:c1:6c:f2:a3:65:3c:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:82:8B:73:CB:26:B4:25:F6:BE:2C:39:95:CC:74:E2:CD:A7:C0:20
            X509v3 Authority Key Identifier:
                keyid:62:76:E9:A9:11:7C:6B:DB:5F:37:2D:44:D0:BB:9A:CD:C5:F2:CA:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276E9A9117C6BDB5F372D44D0BB9ACDC5F2CAD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZEROONEINF/0/3136332e3232372e3137332e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:1c:0d:00:cb:ad:dd:20:f3:88:d8:f9:c6:fd:43:8c:5f:
         b6:87:f0:2b:d4:42:44:65:80:1a:d2:bc:c9:89:3f:42:6b:48:
         5d:d3:ee:70:e6:0d:93:0f:96:c4:31:6b:27:78:da:a8:2f:b9:
         fa:10:3d:92:65:13:95:61:cb:74:86:19:a4:e0:c7:fa:ca:b7:
         47:85:e1:18:02:cf:99:6c:09:8b:08:a9:b3:1e:5d:f9:d4:3e:
         3d:80:c9:e9:41:88:a0:2e:81:44:16:ef:76:38:0b:db:0a:50:
         26:94:b6:1e:f4:6f:ef:56:74:ba:24:d8:11:a9:69:51:8c:26:
         b2:0b:84:49:89:20:b7:86:75:20:d2:48:21:af:b4:10:bc:82:
         ec:cd:52:70:c1:8b:1f:1a:b3:3f:39:ce:50:84:1a:97:b4:8a:
         e9:69:7f:ed:3e:b7:5f:93:5e:98:0d:33:c0:09:b4:47:58:2e:
         c7:79:62:39:c0:72:28:6a:9f:50:da:24:34:09:e9:30:86:de:
         b1:0f:2b:dd:b9:04:3b:60:b9:fa:af:df:2a:06:c8:bd:84:03:
         65:ab:84:7e:30:59:d7:87:fd:3b:cf:ee:46:26:89:96:3d:8c:
         09:50:23:49:99:4d:51:0f:70:3e:28:d2:3e:87:4d:87:c3:41:
         a1:15:6e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:48 2026 by rpki-client