Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAVECOM/0/3135302e3130372e36332e302f32342d3234203d3e2039363736.roa
File:                     3135302e3130372e36332e302f32342d3234203d3e2039363736.roa (raw, json)
Hash identifier:          zabUVRXaPbor4qaUMObFRYdpSFalq6v7pBqmuz9X8UI=
Subject key identifier:   50:49:F7:5A:9D:BE:41:89:C3:0B:55:AC:C0:A0:1C:94:16:F5:C4:AD
Certificate issuer:       /CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
Certificate serial:       069AA09798898007932EE1B95C30C2BAF0EC6237
Authority key identifier: 99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3135302e3130372e36332e302f32342d3234203d3e2039363736.roa
Signing time:             Wed 10 Jun 2026 09:03:49 +0000
ROA not before:           Wed 10 Jun 2026 08:58:49 +0000
ROA not after:            Wed 09 Jun 2027 09:03:49 +0000
asID:                     9676
IP address blocks:        150.107.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl
                          rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9a:a0:97:98:89:80:07:93:2e:e1:b9:5c:30:c2:ba:f0:ec:62:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9962DC255E87C0EE63DCA0EADD4A38F06B6C555C
        Validity
            Not Before: Jun 10 08:58:49 2026 GMT
            Not After : Jun  9 09:03:49 2027 GMT
        Subject: CN=5049F75A9DBE4189C30B55ACC0A01C9416F5C4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3f:75:18:42:7f:cb:66:ad:96:cb:75:f9:7f:
                    ea:89:8f:34:77:6a:a0:ab:b3:5a:ea:fb:7e:ac:61:
                    e5:56:72:4f:ea:b8:f1:17:29:7b:49:df:c3:cd:08:
                    d9:dd:5a:b1:fd:65:d1:28:8a:ce:39:66:e6:0c:95:
                    dc:33:d7:f6:68:a2:17:d8:12:d0:7f:89:ab:c3:d0:
                    79:28:f1:07:6d:fa:20:9c:bc:ca:34:5e:03:04:20:
                    43:78:02:be:d9:05:60:e1:46:a6:9a:15:b5:69:dd:
                    fb:6e:4f:14:e8:f9:32:55:92:21:0c:a8:17:88:24:
                    15:e8:42:8e:e6:cd:1e:f3:fb:ca:fb:ee:cd:23:03:
                    c6:f2:26:5d:c6:d5:e2:e1:6d:cb:0e:0f:69:ae:cb:
                    ab:81:48:3b:f9:57:02:ab:5f:3b:fd:d3:a7:6c:5a:
                    2e:ce:be:73:e4:df:5c:7b:12:94:b0:40:f8:86:2f:
                    8b:b7:a7:45:8d:e8:aa:1f:f8:aa:3c:8a:ac:08:74:
                    d6:5c:58:be:1a:26:a6:a1:9c:4e:2f:d1:ad:f9:dc:
                    0c:6b:ce:e8:a4:14:3f:6f:31:15:a5:16:ae:79:6d:
                    02:fd:f5:8d:76:1c:2d:9c:bd:b4:4b:51:9e:b4:90:
                    43:d9:cc:8a:83:d9:c7:35:d3:b5:47:03:3c:ee:cd:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:49:F7:5A:9D:BE:41:89:C3:0B:55:AC:C0:A0:1C:94:16:F5:C4:AD
            X509v3 Authority Key Identifier:
                keyid:99:62:DC:25:5E:87:C0:EE:63:DC:A0:EA:DD:4A:38:F0:6B:6C:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9962DC255E87C0EE63DCA0EADD4A38F06B6C555C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAVECOM/0/3135302e3130372e36332e302f32342d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.107.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a3:63:04:be:c2:0f:29:19:6f:59:fc:1b:d8:0c:80:17:5b:
         42:48:d2:90:9e:79:10:a3:63:85:17:78:0c:9d:44:46:95:81:
         43:69:da:f3:4d:68:36:a7:49:1a:36:8b:82:dd:26:6d:e5:b4:
         94:30:0c:fc:05:13:a1:37:bf:87:18:04:93:94:30:b7:eb:d8:
         e5:6b:c7:3e:24:82:33:9b:cb:72:cf:92:42:c8:76:57:7b:7f:
         4b:0d:d1:62:4c:12:6b:88:7e:ce:3e:01:90:cf:cf:e0:a1:01:
         fd:ef:a5:74:6a:20:e9:f4:ba:a5:7d:c4:e6:e0:02:be:97:5d:
         cb:9a:34:70:bf:d4:55:53:dd:5a:de:f4:f4:23:9c:e0:54:cb:
         e9:7b:42:fd:30:a2:61:23:ac:02:34:77:87:d3:a0:35:00:7c:
         1d:d4:c6:7f:38:0a:45:43:52:da:95:f1:7a:b3:1e:4f:ed:fc:
         a8:16:1a:c8:b0:d8:2d:25:8d:a4:e2:7a:db:9a:36:91:9b:d1:
         56:06:47:5c:fe:d1:84:ba:ca:91:09:48:1d:ca:fa:a3:6d:95:
         a0:d8:55:b9:36:08:60:af:b5:a5:f9:30:1e:dc:5e:78:be:2c:
         b1:c9:ba:46:7d:7c:32:c2:60:86:6f:43:3d:7a:7c:12:f6:11:
         d3:37:e2:ce
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUBpqgl5iJgAeTLuG5XDDCuvDsYjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk2MkRDMjU1RTg3QzBFRTYzRENBMEVBREQ0QTM4RjA2
QjZDNTU1QzAeFw0yNjA2MTAwODU4NDlaFw0yNzA2MDkwOTAzNDlaMDMxMTAvBgNV
BAMTKDUwNDlGNzVBOURCRTQxODlDMzBCNTVBQ0MwQTAxQzk0MTZGNUM0QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyP3UYQn/LZq2Wy3X5f+qJjzR3
aqCrs1rq+36sYeVWck/quPEXKXtJ38PNCNndWrH9ZdEois45ZuYMldwz1/ZoohfY
EtB/iavD0Hko8Qdt+iCcvMo0XgMEIEN4Ar7ZBWDhRqaaFbVp3ftuTxTo+TJVkiEM
qBeIJBXoQo7mzR7z+8r77s0jA8byJl3G1eLhbcsOD2muy6uBSDv5VwKrXzv906ds
Wi7OvnPk31x7EpSwQPiGL4u3p0WN6Kof+Ko8iqwIdNZcWL4aJqahnE4v0a353Axr
zuikFD9vMRWlFq55bQL99Y12HC2cvbRLUZ60kEPZzIqD2cc107VHAzzuzeQtAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUUEn3Wp2+QYnDC1WswKAclBb1xK0wHwYDVR0j
BBgwFoAUmWLcJV6HwO5j3KDq3Uo48GtsVVwwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0FWRUNP
TS8wLzk5NjJEQzI1NUU4N0MwRUU2M0RDQTBFQURENEEzOEYwNkI2QzU1NUMuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvOTk2MkRDMjU1RTg3QzBFRTYzRENBMEVBREQ0
QTM4RjA2QjZDNTU1Qy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NBVkVDT00vMC8zMTM1MzAyZTMx
MzAzNzJlMzYzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzYzNzM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAlms/MA0GCSqGSIb3DQEBCwUAA4IBAQBio2MEvsIPKRlvWfwb2AyAF1tC
SNKQnnkQo2OFF3gMnURGlYFDadrzTWg2p0kaNouC3SZt5bSUMAz8BROhN7+HGAST
lDC369jla8c+JIIzm8tyz5JCyHZXe39LDdFiTBJriH7OPgGQz8/goQH976V0aiDp
9LqlfcTm4AK+l13LmjRwv9RVU91a3vT0I5zgVMvpe0L9MKJhI6wCNHeH06A1AHwd
1MZ/OApFQ1LalfF6sx5P7fyoFhrIsNgtJY2k4nrbmjaRm9FWBkdc/tGEusqRCUgd
yvqjbZWg2FW5Nghgr7Wl+TAe3F54viyxybpGfXwywmCGb0M9enwS9hHTN+LO
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:52:58 2026 by rpki-client