Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGNALPRO/0/3136332e35322e3134302e302f32332d3234203d3e20313534393032.roa
File:                     3136332e35322e3134302e302f32332d3234203d3e20313534393032.roa (raw, json)
Hash identifier:          DFS62jGqHUbGiqZkbjTTdcqfJnyD3VfgCzpFf73zt+A=
Subject key identifier:   D0:03:A7:F4:14:CA:25:04:73:D5:D5:5A:C4:04:64:1B:79:3A:C0:9D
Certificate issuer:       /CN=4115181D72CC034A7B256A0C7F9D7DA86F222523
Certificate serial:       56F1DB66A5C11825DDC2F608EA92CF562BB906F8
Authority key identifier: 41:15:18:1D:72:CC:03:4A:7B:25:6A:0C:7F:9D:7D:A8:6F:22:25:23
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/3136332e35322e3134302e302f32332d3234203d3e20313534393032.roa
Signing time:             Mon 14 Sep 2026 06:44:01 +0000
ROA not before:           Mon 14 Sep 2026 06:39:01 +0000
ROA not after:            Mon 13 Sep 2027 06:44:01 +0000
asID:                     154902
IP address blocks:        163.52.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.crl
                          rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 11:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:db:66:a5:c1:18:25:dd:c2:f6:08:ea:92:cf:56:2b:b9:06:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4115181D72CC034A7B256A0C7F9D7DA86F222523
        Validity
            Not Before: Sep 14 06:39:01 2026 GMT
            Not After : Sep 13 06:44:01 2027 GMT
        Subject: CN=D003A7F414CA250473D5D55AC404641B793AC09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:44:43:b5:00:d9:a1:14:bd:3c:12:64:b4:
                    b0:61:cd:3d:97:15:db:17:b1:db:58:8c:db:f8:f6:
                    f6:27:1c:0f:b7:d1:d5:31:56:40:e0:76:d7:2b:8c:
                    46:0d:78:f5:3e:22:c0:7d:ad:84:86:26:33:d4:07:
                    d2:9d:1b:7f:29:e8:ac:da:ff:b2:29:ad:55:07:ae:
                    da:6e:81:c3:a0:38:e3:d7:4f:fe:ff:aa:4d:e6:7f:
                    a7:73:e8:62:69:12:a1:da:4b:fb:d4:b3:b9:73:bb:
                    f2:c7:d9:89:fd:05:05:25:04:7f:23:95:48:d5:2e:
                    05:94:db:5c:78:45:0b:8a:2a:53:99:49:45:2a:6d:
                    a6:ba:58:55:c4:e5:36:51:91:a7:95:23:07:d4:81:
                    95:05:72:58:b2:76:f4:a3:c9:9b:2f:51:1e:f8:a1:
                    4e:ab:86:8b:2d:8a:2a:99:91:0e:0a:17:f7:68:9a:
                    a1:f4:78:65:1f:16:bc:96:00:55:5e:6e:75:ad:d9:
                    a0:c1:50:d9:46:a8:55:37:cb:fb:39:c9:fe:19:f3:
                    ed:05:20:b0:ad:7f:b9:84:21:0c:8b:83:84:71:e5:
                    89:f6:b9:df:b5:71:75:38:1a:fe:10:3b:46:0e:85:
                    27:63:55:98:47:7c:98:14:bd:e9:9b:96:49:b8:6a:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:A7:F4:14:CA:25:04:73:D5:D5:5A:C4:04:64:1B:79:3A:C0:9D
            X509v3 Authority Key Identifier:
                keyid:41:15:18:1D:72:CC:03:4A:7B:25:6A:0C:7F:9D:7D:A8:6F:22:25:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/4115181D72CC034A7B256A0C7F9D7DA86F222523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4115181D72CC034A7B256A0C7F9D7DA86F222523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGNALPRO/0/3136332e35322e3134302e302f32332d3234203d3e20313534393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:92:24:d4:e9:0d:36:eb:c9:dc:c9:77:a2:13:a5:c1:8a:ce:
         53:f0:e1:a1:fb:b0:fb:5f:9e:3d:cf:ff:32:29:eb:de:17:91:
         30:5c:ae:76:02:d7:da:9b:98:7d:80:a6:cf:ca:32:9f:a1:e7:
         f1:3f:34:d5:20:0b:b7:cc:03:a7:c3:56:ed:a4:bc:db:a8:9b:
         aa:51:75:a0:16:c7:3d:ca:c7:9f:7d:61:fc:e6:30:11:98:54:
         59:92:38:d3:99:b2:7a:b6:85:36:b7:9f:71:21:5a:49:50:1a:
         9f:25:4d:2d:1b:af:74:90:7d:95:cf:2a:3b:54:76:5a:c4:f2:
         ad:94:a6:85:88:79:b0:bb:fe:b1:9c:b0:ac:5b:a5:63:ab:10:
         75:8e:3d:ed:ea:96:de:dc:be:c5:98:6c:d4:02:85:a6:df:b9:
         da:d0:8d:5b:11:53:42:6c:fe:ea:75:ef:c8:21:57:71:db:7d:
         88:d7:c0:d0:62:c5:79:88:2d:cf:a0:d9:62:e8:1e:02:56:9e:
         4d:64:ac:7e:4e:bd:be:1c:e0:ad:82:18:4f:33:bf:a3:e7:d4:
         c6:c1:73:f2:d2:b7:a2:32:91:89:2d:bd:0d:5d:e1:61:a3:11:
         fc:b4:20:96:f2:91:aa:25:c2:14:a7:96:62:b4:aa:53:df:c3:
         7f:6b:84:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:56 2026 by rpki-client