Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TPEFUBON/1/3136322e342e3131362e302f32332d3234203d3e20333936393832.roa
File:                     3136322e342e3131362e302f32332d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          fT2QEB2EreHbWWRvrSr8grinnLRhG3E/TvTvBPKkl5w=
Subject key identifier:   59:25:A9:48:16:0C:03:2F:E1:D3:FD:42:61:3C:73:E5:0D:8C:28:DB
Certificate issuer:       /CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A
Certificate serial:       5D9AC8324B426510A6022791598F599F4F562604
Authority key identifier: A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/3136322e342e3131362e302f32332d3234203d3e20333936393832.roa
Signing time:             Mon 25 May 2026 02:43:51 +0000
ROA not before:           Mon 25 May 2026 02:38:51 +0000
ROA not after:            Mon 24 May 2027 02:43:51 +0000
asID:                     396982
IP address blocks:        162.4.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl
                          rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9a:c8:32:4b:42:65:10:a6:02:27:91:59:8f:59:9f:4f:56:26:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8B81BA95B8036B78E08972E6FF77ECDDA475A
        Validity
            Not Before: May 25 02:38:51 2026 GMT
            Not After : May 24 02:43:51 2027 GMT
        Subject: CN=5925A948160C032FE1D3FD42613C73E50D8C28DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:4b:d0:18:45:98:3e:e8:80:a3:07:06:6e:
                    aa:da:00:4d:9e:02:95:46:29:69:6e:db:ed:19:92:
                    0e:bc:76:99:63:b6:57:ae:42:1e:70:a8:4b:fd:60:
                    e7:41:f6:b7:d3:3f:6e:89:51:5c:73:ce:53:0a:7e:
                    f0:8b:a9:bf:1e:96:f3:fc:92:83:25:ee:77:03:42:
                    d4:79:16:a0:2e:3a:54:14:4e:97:7a:75:40:e3:01:
                    b9:54:76:72:5a:9a:72:f7:b0:95:a0:cc:68:9b:e1:
                    b8:ba:11:71:da:c9:9f:f9:be:e7:c6:1c:c8:47:1d:
                    20:ed:bd:b2:d2:ae:31:e1:b7:dc:4c:7b:b0:29:44:
                    34:75:5a:40:9f:8c:18:ce:c4:db:50:d3:fb:39:8a:
                    06:13:50:e6:c5:c5:b5:cf:4c:4b:ca:cd:90:28:31:
                    d0:05:47:10:55:5f:76:ae:66:ac:70:1b:87:4b:a5:
                    03:f8:94:a0:b3:c9:69:04:5d:85:47:12:c3:6b:97:
                    20:c4:cb:dc:f8:db:46:c2:ea:e2:84:24:5f:55:d8:
                    e8:59:0d:77:3d:f0:1e:f9:89:08:a8:12:a1:a2:66:
                    bf:05:15:bc:0e:46:36:a3:37:90:18:31:a2:a2:eb:
                    fd:92:85:55:d2:63:29:d8:19:20:01:5c:22:a6:13:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:25:A9:48:16:0C:03:2F:E1:D3:FD:42:61:3C:73:E5:0D:8C:28:DB
            X509v3 Authority Key Identifier:
                keyid:A4:D8:B8:1B:A9:5B:80:36:B7:8E:08:97:2E:6F:F7:7E:CD:DA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/A4D8B81BA95B8036B78E08972E6FF77ECDDA475A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/1/3136322e342e3131362e302f32332d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:4c:8d:5d:e7:60:75:01:82:eb:07:d9:58:84:54:ba:5e:38:
         a9:99:0c:39:01:f6:23:15:f6:42:5c:95:6e:e1:2c:c8:5f:0c:
         bb:d8:be:ae:29:81:60:26:ed:69:1f:69:b0:65:06:69:14:54:
         13:d5:54:29:d8:44:f4:61:4e:0f:d3:87:a3:fc:89:8f:c7:5d:
         b1:dc:e4:59:54:2a:aa:5e:2c:5c:ec:59:9d:b5:9b:0d:55:3b:
         8a:7a:e8:a6:65:92:7e:50:7e:59:e0:9a:1a:28:10:77:d8:b5:
         98:e2:8b:60:86:e7:84:85:0e:8b:fc:60:94:2a:5a:3d:8f:a7:
         13:38:22:0d:b5:85:5a:b3:ad:5e:6f:44:8a:6a:12:08:7e:3d:
         1d:d8:7b:fe:0c:a7:dd:f8:49:96:36:e8:e3:5b:ad:0d:6a:9a:
         58:74:d9:58:70:7f:54:54:8e:79:a1:4c:d3:f2:0e:ea:ec:7a:
         94:ca:d5:53:ae:37:31:02:33:b6:54:43:f5:8b:dc:6c:0c:05:
         ce:2e:1d:db:7e:1d:9a:c9:6f:65:a5:4e:d8:68:19:40:42:98:
         1b:ab:75:f1:37:1e:31:ab:24:0a:0f:da:df:73:04:d3:f1:bf:
         53:47:63:82:26:be:12:5d:04:29:38:90:28:18:2d:dc:4d:60:
         a4:60:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:36 2026 by rpki-client