Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e203136353039.roa
File:                     3136332e35322e34382e302f32332d3233203d3e203136353039.roa (raw, json)
Hash identifier:          05sw/iNxOjMToSHlWrP8oS+PndLKFpZVlB1gnJyBxxs=
Subject key identifier:   CB:72:E9:19:82:2A:22:40:80:93:69:72:29:CE:63:66:08:AA:27:04
Certificate issuer:       /CN=66D96CED70B44D758AE1282092DC175FEFC03195
Certificate serial:       38E0592250CC0B37FCB47A68FABC5DE387F94DC5
Authority key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e203136353039.roa
Signing time:             Mon 19 Oct 2026 10:04:01 +0000
ROA not before:           Mon 19 Oct 2026 09:59:01 +0000
ROA not after:            Mon 18 Oct 2027 10:04:01 +0000
asID:                     16509
IP address blocks:        163.52.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
                          rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 22:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e0:59:22:50:cc:0b:37:fc:b4:7a:68:fa:bc:5d:e3:87:f9:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D96CED70B44D758AE1282092DC175FEFC03195
        Validity
            Not Before: Oct 19 09:59:01 2026 GMT
            Not After : Oct 18 10:04:01 2027 GMT
        Subject: CN=CB72E919822A22408093697229CE636608AA2704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:06:35:cb:7f:4a:2b:3a:35:f1:a6:4f:19:
                    75:7f:d8:59:75:10:cd:ba:b1:b7:81:a2:89:fd:4c:
                    3a:67:23:3a:a8:44:95:03:31:79:c5:56:ac:b8:96:
                    89:73:bc:78:48:9f:28:9e:04:9b:e7:da:e5:11:f2:
                    35:39:18:38:85:97:97:31:a2:eb:55:91:27:19:f2:
                    1a:6f:95:67:2b:89:03:7f:76:62:b5:11:a2:ed:df:
                    cd:bb:78:87:5f:fb:f7:36:1f:cb:c1:fd:ac:3f:e1:
                    a6:b2:1d:d1:44:6e:a5:c6:d0:3e:cf:1a:13:f5:eb:
                    6a:f2:df:24:bf:c6:23:59:cd:a4:06:9d:17:52:65:
                    a6:1b:20:ae:76:53:1e:fd:85:aa:9d:3c:8a:73:35:
                    2c:df:ae:52:f8:52:a2:c7:36:7f:c2:2b:ed:bd:7e:
                    71:19:aa:a1:80:ed:fa:cf:4d:c2:04:16:ca:72:9c:
                    3f:5b:dc:a6:6d:eb:84:88:17:a5:2c:9e:2c:c4:96:
                    23:93:60:e8:73:1e:a0:b1:ff:5d:a2:12:59:8d:19:
                    2c:3b:9b:4f:50:fe:b0:e3:54:cf:93:92:3b:df:1d:
                    0d:fd:4d:92:0f:44:f5:7c:b3:66:f7:52:46:b8:32:
                    0a:25:6c:ea:dc:1a:ec:9e:d6:a8:ac:a0:01:cb:9e:
                    ee:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:E9:19:82:2A:22:40:80:93:69:72:29:CE:63:66:08:AA:27:04
            X509v3 Authority Key Identifier:
                keyid:66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:02:14:4c:dc:d0:44:f3:72:57:e8:89:69:7b:a2:5c:bf:00:
         e5:e8:fb:d2:a6:11:65:a3:be:dd:84:4f:7f:fb:f7:d9:d2:6e:
         89:c8:c0:ec:10:ca:e1:72:bf:82:7c:bf:20:93:18:8e:f3:a6:
         67:94:bc:b3:27:9b:0d:dd:18:91:fe:9f:93:c7:5d:a6:88:20:
         3a:55:38:ae:0b:55:25:85:b6:ba:da:85:59:55:b7:9e:1c:86:
         33:b4:3f:01:7f:3a:a1:b7:c1:d8:82:c6:4c:8e:3d:b0:0f:41:
         c8:55:2f:55:6a:0e:cb:ee:d6:8c:66:98:16:f5:bc:4a:16:f8:
         40:88:85:67:38:c2:9c:e2:47:6e:fa:e6:3f:e2:03:e4:97:f5:
         fa:fe:60:8d:1c:f7:dc:f5:09:15:f2:e5:d2:bd:61:4a:71:0f:
         89:ae:6e:3f:98:7a:37:0f:66:2d:db:15:ce:14:6f:36:ed:f6:
         3f:df:c2:c1:cc:70:ed:6d:96:e6:1d:20:bc:c6:1e:a7:c4:25:
         cd:5c:99:3a:88:82:fc:09:44:53:72:d6:94:6a:27:d8:95:79:
         5e:74:73:9a:19:be:9a:24:95:27:e2:09:ba:41:48:82:b1:93:
         72:dc:dd:9a:86:de:39:89:cc:5b:ad:4e:77:32:d6:7f:c3:63:
         58:f5:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:58:49 2026 by rpki-client