Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e203138343139.roa
File:                     36312e36302e3139322e302f32302d3234203d3e203138343139.roa (raw, json)
Hash identifier:          4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=
Subject key identifier:   C1:E8:1A:AD:F8:D8:A9:59:20:7A:24:7A:04:F8:5D:84:DE:12:CD:61
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       1A90BA5C7E0F8919C4D5226318C1A77D563D20A4
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e203138343139.roa
Signing time:             Tue 08 Sep 2026 07:44:02 +0000
ROA not before:           Tue 08 Sep 2026 07:39:02 +0000
ROA not after:            Tue 07 Sep 2027 07:44:02 +0000
asID:                     18419
IP address blocks:        61.60.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 04:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:90:ba:5c:7e:0f:89:19:c4:d5:22:63:18:c1:a7:7d:56:3d:20:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Sep  8 07:39:02 2026 GMT
            Not After : Sep  7 07:44:02 2027 GMT
        Subject: CN=C1E81AADF8D8A959207A247A04F85D84DE12CD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:11:a7:8e:d2:55:c7:96:f5:03:b1:82:41:
                    a6:6a:c4:3b:39:17:ca:c0:dd:94:8c:3f:40:1e:dd:
                    8e:10:a1:0e:cc:86:b2:0b:7d:42:fd:5d:ba:37:a7:
                    90:98:f6:11:fb:75:28:6f:83:eb:96:e2:6d:48:6d:
                    49:3d:92:19:04:89:45:74:79:86:b7:a0:8e:d5:58:
                    47:9c:05:85:66:a6:a5:16:29:3c:0a:a2:57:d3:60:
                    e2:81:7f:8f:9d:1f:b0:74:5b:b4:a0:ca:9a:dc:98:
                    09:7e:c9:9d:22:cc:2c:04:16:f3:32:37:ec:c6:1f:
                    e4:ea:07:bc:cf:26:3e:d3:1b:6e:f0:dc:b0:52:f2:
                    00:97:01:57:de:5f:97:c5:26:a9:de:49:6f:16:e0:
                    6a:d0:6e:a6:9a:8b:8d:90:e7:5b:17:c9:7f:1e:b5:
                    cc:70:d8:9f:a6:72:5d:2b:dc:18:2e:88:14:a7:c8:
                    e3:dd:5f:19:9f:fd:00:b2:fd:72:f3:30:54:1c:95:
                    57:ea:a8:46:57:e8:ff:62:9b:53:57:28:4d:e9:f5:
                    69:72:f9:58:ec:15:72:22:3b:03:df:46:8e:1d:a0:
                    7f:80:a1:34:d5:4c:9f:31:67:bb:07:52:c6:a9:16:
                    a1:86:72:2a:c0:f0:c2:85:c9:53:8e:2c:c1:54:89:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E8:1A:AD:F8:D8:A9:59:20:7A:24:7A:04:F8:5D:84:DE:12:CD:61
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/36312e36302e3139322e302f32302d3234203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.60.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:e8:ba:c9:97:37:ff:cd:72:0d:06:f2:79:7b:ad:3e:60:43:
         2b:e6:1d:72:da:3e:1c:dd:5d:b2:5d:4d:78:3d:4f:31:d2:86:
         fd:1b:e7:02:93:90:00:bc:b2:8f:0b:fa:c8:a2:c2:98:c2:c0:
         d3:7d:6a:9e:9d:8e:b9:0d:b4:51:bd:76:43:5b:f9:1a:74:10:
         c5:ca:eb:26:4a:84:cc:60:d8:ea:eb:cb:da:39:f9:85:b3:b9:
         0d:d6:4c:76:fe:db:0a:78:f1:c5:de:c3:d2:8e:ae:e0:ff:0b:
         d6:29:df:a5:3f:ee:46:c3:79:fe:be:69:70:9a:99:bc:82:6f:
         bf:90:69:ca:81:0a:b8:12:1c:49:42:fd:52:51:aa:01:a0:4f:
         28:c0:5d:b9:1e:41:f9:18:e5:98:d1:5b:4a:e7:1a:16:94:87:
         68:3f:f2:46:41:d3:7c:d0:5c:11:74:4e:f1:48:ad:2a:f2:12:
         97:81:5f:7a:d1:c3:2a:32:8c:be:cd:9e:04:76:99:19:95:42:
         c2:d9:eb:85:4b:69:6c:99:20:85:9a:cf:81:26:79:54:5e:91:
         e5:33:12:59:0b:f3:fd:24:91:6a:16:e9:4e:30:3f:00:20:4d:
         ee:cd:0d:28:f0:8f:44:57:94:db:37:12:38:18:7c:ab:1c:89:
         95:6e:12:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:22:26 2026 by rpki-client