Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa
File:                     3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa (raw, json)
Hash identifier:          WHMty9+iXYUNiWSnLw/kN5nrX7uOBPI5Gt9KRhY1qM4=
Subject key identifier:   DF:76:B6:3B:0D:16:6C:2D:DA:BC:55:6D:B7:68:B6:FF:0A:B2:F3:0D
Certificate issuer:       /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial:       474FC66AEEA86CD5EFB8F4F64F53F2EDAF808BE9
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa
Signing time:             Wed 09 Sep 2026 06:24:01 +0000
ROA not before:           Wed 09 Sep 2026 06:19:01 +0000
ROA not after:            Wed 08 Sep 2027 06:24:01 +0000
asID:                     132369
IP address blocks:        211.73.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl
                          rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4f:c6:6a:ee:a8:6c:d5:ef:b8:f4:f6:4f:53:f2:ed:af:80:8b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
        Validity
            Not Before: Sep  9 06:19:01 2026 GMT
            Not After : Sep  8 06:24:01 2027 GMT
        Subject: CN=DF76B63B0D166C2DDABC556DB768B6FF0AB2F30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:1d:da:1f:5d:2c:d3:1b:ba:9a:1f:d5:4f:
                    0c:47:ef:6c:46:19:70:92:86:6f:7d:2f:88:34:bc:
                    15:45:e1:55:de:a5:a5:7b:6e:72:b7:ed:3c:93:5c:
                    37:b8:86:17:bb:5d:2c:2e:63:3f:f7:c2:98:8c:83:
                    f3:5a:e6:a5:83:e2:7c:71:e5:3d:26:df:e4:a4:d5:
                    76:bf:8c:08:04:97:91:ed:f4:45:3c:f7:7b:ef:96:
                    95:5c:29:bc:6f:0e:c3:e0:80:2a:6e:06:1c:a6:a9:
                    82:d3:e4:fe:5d:21:80:ff:4a:01:73:81:d4:42:b8:
                    74:c1:2c:8e:4e:13:1b:cd:a1:b7:38:9c:fc:bd:37:
                    99:7f:c0:64:b1:d9:8c:87:cb:b0:f3:4c:61:f5:a1:
                    d2:19:c2:10:30:02:d2:5f:a8:7a:df:69:a9:c4:f4:
                    5d:ac:6e:da:bf:77:32:fc:8d:40:0e:00:64:d5:b0:
                    c8:5f:6b:67:10:b5:77:f1:1f:d6:11:e9:fb:30:64:
                    0b:6a:42:47:26:fa:b5:0d:98:a8:c5:fc:f8:2a:80:
                    e9:44:33:7b:24:f1:30:5e:53:e4:1f:98:56:8d:89:
                    a6:a2:78:d4:a4:84:21:cb:ef:b8:1c:55:7d:97:10:
                    fa:a8:6a:d7:70:e6:92:db:7d:06:28:10:3d:4c:87:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:B6:3B:0D:16:6C:2D:DA:BC:55:6D:B7:68:B6:FF:0A:B2:F3:0D
            X509v3 Authority Key Identifier:
                keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.73.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:04:5a:70:ac:42:05:02:79:dd:b1:58:d0:78:b4:5b:5f:b7:
         26:01:ab:ca:2e:8c:8a:65:2b:94:dc:f6:fe:90:91:7e:c0:91:
         35:1b:5e:4a:5f:fc:26:f2:22:73:91:9c:17:97:e0:3e:be:b5:
         75:7f:1b:e6:5d:72:32:ee:fb:98:23:f2:3a:ef:fe:d4:36:ab:
         0c:66:ea:42:a5:74:e2:59:1c:03:db:07:4b:19:27:19:5e:0a:
         93:12:59:db:3f:85:f2:38:ca:92:5d:79:fe:6a:0a:13:36:d7:
         f3:fb:fb:97:61:6c:cf:70:1c:67:55:49:40:12:e8:0e:4f:40:
         7c:da:72:66:31:4e:6e:a3:0d:4c:5b:60:ed:a4:84:c9:d6:72:
         fb:06:1d:7e:b7:f7:85:89:bd:d8:f1:f2:bb:3e:6c:32:a3:63:
         07:09:50:c6:0d:44:15:3b:09:c3:e5:f8:44:92:85:a4:83:04:
         9a:17:ca:77:4e:66:b6:88:05:e7:c6:dd:e6:9f:5e:68:35:08:
         f1:3d:7a:ca:54:55:c1:ab:f5:8e:a3:c3:8d:50:b0:de:04:f6:
         80:9e:4a:b1:b2:56:92:27:80:8c:2c:72:e5:e9:77:dc:ae:da:
         40:8f:5b:a1:d3:a2:16:25:c7:7c:6f:7a:b6:36:2d:56:b0:de:
         86:a4:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:17 2026 by rpki-client