Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e2034373830.roa
File:                     3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier:          3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=
Subject key identifier:   83:21:4B:52:C2:DD:9B:18:6A:0D:AF:65:83:9B:31:E3:B4:2D:10:06
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       51E94B32DAA84E9B60BDED6E177399809A84A44C
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e2034373830.roa
Signing time:             Tue 08 Sep 2026 07:44:01 +0000
ROA not before:           Tue 08 Sep 2026 07:39:01 +0000
ROA not after:            Tue 07 Sep 2027 07:44:01 +0000
asID:                     4780
IP address blocks:        150.129.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e9:4b:32:da:a8:4e:9b:60:bd:ed:6e:17:73:99:80:9a:84:a4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Sep  8 07:39:01 2026 GMT
            Not After : Sep  7 07:44:01 2027 GMT
        Subject: CN=83214B52C2DD9B186A0DAF65839B31E3B42D1006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:80:42:7a:48:d4:37:52:4d:d8:57:44:a3:
                    ff:df:38:72:11:29:c2:b4:70:0d:57:c9:27:8b:aa:
                    8b:bf:90:8f:b1:7d:77:4a:d1:d2:fa:d7:3e:08:31:
                    ac:36:06:fa:d6:c6:91:67:61:cc:28:68:4e:75:cc:
                    32:fc:fa:15:64:54:40:ea:5c:d5:51:a7:24:ea:ca:
                    30:7e:62:28:d0:75:58:a9:9f:ce:c3:dd:e9:be:54:
                    ca:a1:91:f7:2e:ca:38:df:c5:b5:3f:4e:7c:2a:8a:
                    0c:fe:b2:dc:51:bc:3e:4a:3e:68:dd:c8:cb:1f:fb:
                    be:92:6a:68:b9:e9:41:ab:4a:08:7c:a3:ec:ba:86:
                    82:cf:02:09:cd:6c:10:85:43:14:1d:31:c9:5e:17:
                    79:6e:a0:c8:f4:69:2b:e6:ff:54:80:b8:e3:30:af:
                    42:66:78:0c:5d:19:e6:81:f0:b2:7c:90:28:fc:e3:
                    6d:83:37:ff:da:ee:9f:3a:c9:b3:81:fa:4c:cc:6e:
                    ab:cb:97:63:64:c0:69:ff:d5:76:b8:26:f7:dd:e8:
                    e3:bf:48:04:15:78:c8:03:47:54:9a:00:db:d6:24:
                    18:4b:eb:42:8e:c3:a6:17:12:62:f1:77:b3:2f:8d:
                    94:fa:a8:ca:54:ea:be:bd:8b:6a:8a:fd:b8:f2:be:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:21:4B:52:C2:DD:9B:18:6A:0D:AF:65:83:9B:31:E3:B4:2D:10:06
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e37322e302f32322d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:92:bc:e2:f0:ad:89:ae:42:86:a8:c5:10:da:51:7d:22:75:
         b8:ce:40:44:f9:71:8f:58:39:ad:7d:63:6c:33:5e:6b:dd:a9:
         22:1f:14:0e:ab:72:7c:3a:c2:f6:cd:5c:f0:9d:b6:7e:e4:ba:
         c6:42:fd:f7:a6:82:15:4e:a1:1a:84:f5:9a:7c:8a:2a:e4:b7:
         3d:1c:3b:b8:fc:ff:f9:db:16:b9:fc:f7:a7:38:11:8f:9d:b1:
         8a:47:df:c2:e1:26:aa:f4:c9:91:80:4f:9b:c1:78:d8:69:6a:
         b2:86:9b:bc:54:4a:4e:d6:f5:40:72:c4:01:2b:28:aa:61:66:
         21:9a:d8:7a:46:b8:30:9b:aa:88:2e:ed:13:a1:97:a1:83:72:
         34:1f:e4:04:ce:3c:e4:36:53:a6:fc:40:18:38:84:a0:9f:2d:
         7a:ff:54:91:f5:7b:19:56:83:2b:2e:df:9e:49:63:28:67:39:
         69:9a:3d:33:87:e9:56:cb:f9:5a:b3:07:99:16:11:83:ff:d3:
         d8:b7:02:29:7f:41:0f:2a:4e:47:27:e7:d9:f2:c9:e8:50:d3:
         4a:31:2b:60:7a:4f:ab:4c:9e:60:86:5e:bf:0e:17:39:c8:a0:
         59:27:59:97:d6:94:a8:e8:55:bb:8f:85:49:65:a7:50:3b:88:
         41:c0:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:01:33 2026 by rpki-client