Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e203231383539.roa
File:                     3136352e3130312e32382e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          R74xcd60wZBSfoy4K8X12x3wQEVRWzhx68AMGErwhDI=
Subject key identifier:   83:4B:82:FA:55:8A:9D:A4:D4:50:32:21:26:F9:55:34:86:E7:98:2D
Certificate issuer:       /CN=385249635956536ABAE4461A37AC4824F9DC8FD6
Certificate serial:       409B302576D280D02A86EBDC5402246D0A8D794F
Authority key identifier: 38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e203231383539.roa
Signing time:             Wed 27 May 2026 04:23:51 +0000
ROA not before:           Wed 27 May 2026 04:18:51 +0000
ROA not after:            Wed 26 May 2027 04:23:51 +0000
asID:                     21859
IP address blocks:        165.101.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 19:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9b:30:25:76:d2:80:d0:2a:86:eb:dc:54:02:24:6d:0a:8d:79:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385249635956536ABAE4461A37AC4824F9DC8FD6
        Validity
            Not Before: May 27 04:18:51 2026 GMT
            Not After : May 26 04:23:51 2027 GMT
        Subject: CN=834B82FA558A9DA4D450322126F9553486E7982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:ee:e5:f9:e3:06:29:3e:b4:a3:23:92:41:
                    9d:0d:f0:46:2c:42:73:b3:a8:04:bb:73:77:0c:3c:
                    59:58:b4:27:a1:73:2e:4d:a3:a6:ce:99:b9:66:c5:
                    c8:48:13:22:46:fd:06:85:19:a0:90:c6:11:51:3d:
                    d2:ce:65:b2:5d:d0:91:4d:1d:12:32:ff:dd:9c:10:
                    ea:3b:ab:b7:5b:3f:9a:f4:ea:e0:67:eb:f0:d2:73:
                    f7:60:eb:ec:ad:6f:2a:67:d9:5a:62:12:26:de:c8:
                    ed:ae:ad:b5:99:33:8a:ea:67:68:0a:f6:0a:49:e5:
                    a1:5a:c7:67:21:11:83:e4:e8:55:8d:d5:a1:9d:c2:
                    fb:cf:70:4f:67:43:c1:0c:db:2e:4e:f1:1f:41:d0:
                    be:ec:60:a1:fd:94:4b:d7:29:ce:c4:64:1b:59:ad:
                    8a:29:12:1a:bf:47:15:1d:14:23:6a:69:fe:af:a6:
                    d9:ef:02:91:10:fa:a8:f7:f4:f1:de:cb:df:8d:5c:
                    26:2f:1b:32:e4:6d:0b:5c:df:ba:63:78:22:38:e6:
                    eb:7d:19:d6:db:1e:2e:c8:af:aa:22:75:20:14:61:
                    9e:da:39:f8:d4:39:a0:cb:ee:0e:b3:5e:14:13:76:
                    98:09:31:64:17:76:61:74:80:09:9a:5d:5b:a8:85:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:82:FA:55:8A:9D:A4:D4:50:32:21:26:F9:55:34:86:E7:98:2D
            X509v3 Authority Key Identifier:
                keyid:38:52:49:63:59:56:53:6A:BA:E4:46:1A:37:AC:48:24:F9:DC:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/385249635956536ABAE4461A37AC4824F9DC8FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/385249635956536ABAE4461A37AC4824F9DC8FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDBASE/1/3136352e3130312e32382e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:e2:21:2c:94:e3:7a:00:7b:47:49:fb:50:5f:08:98:4c:f0:
         ad:b7:4b:01:3a:f2:0f:79:17:27:ad:d0:55:8b:6d:65:78:46:
         2a:3e:f8:07:40:2d:aa:34:d3:76:ba:43:8e:0a:7c:f1:ed:e7:
         2d:50:c4:bc:2e:b1:08:a3:df:dd:e0:5e:f2:25:34:91:26:fb:
         ab:a8:1c:50:62:c5:50:56:cc:e0:30:cc:cd:95:e3:de:fc:e7:
         fc:ce:bf:8d:a8:4f:b2:1c:4f:e0:7a:13:4e:9f:c5:ca:51:63:
         fb:50:33:27:2b:51:70:86:96:de:c2:77:06:be:52:75:71:ab:
         ca:6d:82:9d:49:2a:e6:4d:ac:01:b0:d4:cf:40:bc:87:e3:31:
         8d:00:ac:33:b9:53:86:88:e7:5b:41:3b:da:77:7e:b6:1e:64:
         09:99:95:9d:46:95:cd:0d:db:c2:35:10:7f:ad:8f:0d:39:a2:
         1a:74:64:95:2f:9b:a0:70:0f:a4:d6:e5:4c:94:54:bd:9b:8b:
         bb:91:5b:a3:ef:bc:a8:60:60:64:e5:8b:a8:39:27:82:31:63:
         99:a8:13:05:5b:75:82:87:1e:31:28:f4:a0:b0:6f:3c:d2:4d:
         04:b1:86:7b:63:3c:b6:d8:c5:36:35:f6:1d:63:a6:78:6e:d3:
         e0:1f:69:85
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUQJswJXbSgNAqhuvcVAIkbQqNeU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRG
OURDOEZENjAeFw0yNjA1MjcwNDE4NTFaFw0yNzA1MjYwNDIzNTFaMDMxMTAvBgNV
BAMTKDgzNEI4MkZBNTU4QTlEQTRENDUwMzIyMTI2Rjk1NTM0ODZFNzk4MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuf+7l+eMGKT60oyOSQZ0N8EYs
QnOzqAS7c3cMPFlYtCehcy5No6bOmblmxchIEyJG/QaFGaCQxhFRPdLOZbJd0JFN
HRIy/92cEOo7q7dbP5r06uBn6/DSc/dg6+ytbypn2VpiEibeyO2urbWZM4rqZ2gK
9gpJ5aFax2chEYPk6FWN1aGdwvvPcE9nQ8EM2y5O8R9B0L7sYKH9lEvXKc7EZBtZ
rYopEhq/RxUdFCNqaf6vptnvApEQ+qj39PHey9+NXCYvGzLkbQtc37pjeCI45ut9
GdbbHi7Ir6oidSAUYZ7aOfjUOaDL7g6zXhQTdpgJMWQXdmF0gAmaXVuohcafAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUg0uC+lWKnaTUUDIhJvlVNIbnmC0wHwYDVR0j
BBgwFoAUOFJJY1lWU2q65EYaN6xIJPncj9YwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURC
QVNFLzEvMzg1MjQ5NjM1OTU2NTM2QUJBRTQ0NjFBMzdBQzQ4MjRGOURDOEZENi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMC8zODUyNDk2MzU5NTY1MzZBQkFFNDQ2MUEz
N0FDNDgyNEY5REM4RkQ2LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xPVURCQVNFLzEvMzEzNjM1
MmUzMTMwMzEyZTMyMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBpWUcMA0GCSqGSIb3DQEBCwUAA4IBAQCZ4iEslON6AHtHSftQ
XwiYTPCtt0sBOvIPeRcnrdBVi21leEYqPvgHQC2qNNN2ukOOCnzx7ectUMS8LrEI
o9/d4F7yJTSRJvurqBxQYsVQVszgMMzNlePe/Of8zr+NqE+yHE/gehNOn8XKUWP7
UDMnK1FwhpbewncGvlJ1cavKbYKdSSrmTawBsNTPQLyH4zGNAKwzuVOGiOdbQTva
d362HmQJmZWdRpXNDdvCNRB/rY8NOaIadGSVL5ugcA+k1uVMlFS9m4u7kVuj77yo
YGBk5YuoOSeCMWOZqBMFW3WChx4xKPSgsG880k0EsYZ7Yzy22MU2NfYdY6Z4btPg
H2mF
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:35 2026 by rpki-client