Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa
File:                     BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa (raw, json)
Hash identifier:          pZ36mWf4EmMRw0PL1g7KkkHhiDYRf5KVAOYZD8FPr4E=
Subject key identifier:   06:70:7D:10:75:6B:1E:1D:42:57:13:0A:1E:1B:AF:39:AE:88:A0:6B
Certificate issuer:       /CN=79422E30E1CBDB79522B52AADFD637F509C924A5
Certificate serial:       03
Authority key identifier: 79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa
Signing time:             Mon 13 Apr 2026 02:07:26 +0000
ROA not before:           Mon 13 Apr 2026 02:07:26 +0000
ROA not after:            Sat 10 Apr 2027 15:30:19 +0000
asID:                     38042
IP address blocks:        163.128.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 20:04:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79422E30E1CBDB79522B52AADFD637F509C924A5
        Validity
            Not Before: Apr 13 02:07:26 2026 GMT
            Not After : Apr 10 15:30:19 2027 GMT
        Subject: CN=06707D10756B1E1D4257130A1E1BAF39AE88A06B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:ea:66:b6:83:65:39:58:53:a8:d2:8f:49:
                    b7:1e:a3:70:e2:5c:a0:f8:f4:27:b9:a0:51:bc:10:
                    1c:1c:c9:e2:ab:e2:94:4e:ef:59:6a:0e:8d:04:51:
                    9b:05:30:59:9a:3f:ab:fe:f7:8d:e8:26:de:ee:41:
                    1a:ee:2b:45:05:0a:a9:5d:2b:ec:7f:aa:25:24:75:
                    f4:48:85:d4:b4:8d:36:f3:e9:26:de:87:39:e9:c7:
                    5f:d2:98:f4:49:39:87:96:fd:99:79:44:00:21:4a:
                    ac:cd:6c:4e:70:3f:69:27:40:ae:fd:ab:a0:d2:2b:
                    6d:d3:19:30:82:fc:e9:aa:1e:7c:0a:c5:cc:75:19:
                    2d:32:aa:d1:f5:8e:d3:19:18:e3:bc:1b:3e:2f:9e:
                    94:1d:41:fe:f2:26:cf:d2:66:e3:dc:9e:34:a2:c2:
                    a8:70:7c:21:9d:47:3e:a0:c0:35:1c:fd:a8:52:91:
                    7a:ca:71:cd:68:18:57:74:e2:90:db:14:44:da:ba:
                    a3:c5:57:c1:b5:2b:f1:80:e0:fd:b9:68:3f:04:29:
                    31:83:26:ac:e2:84:0e:b6:74:04:36:51:a6:c2:ae:
                    94:13:26:d2:25:89:66:43:96:8f:dc:58:70:88:e1:
                    8a:91:18:db:0b:78:3b:12:20:20:4b:61:b9:7d:d7:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:70:7D:10:75:6B:1E:1D:42:57:13:0A:1E:1B:AF:39:AE:88:A0:6B
            X509v3 Authority Key Identifier:
                keyid:79:42:2E:30:E1:CB:DB:79:52:2B:52:AA:DF:D6:37:F5:09:C9:24:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/eUIuMOHL23lSK1Kq39Y39QnJJKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eUIuMOHL23lSK1Kq39Y39QnJJKU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LINGUANG/BnB9EHVrHh1CVxMKHhuvOa6IoGs.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:df:e6:31:44:c2:41:85:dd:c5:7b:07:2b:73:78:5d:88:
         50:e0:60:2c:fe:9f:8f:01:81:01:8e:21:5b:b9:a6:ed:45:5d:
         4c:f3:8b:ac:cb:e6:10:3e:46:3f:22:9c:e4:2e:35:5e:13:ad:
         b6:b7:e1:01:82:ac:c5:f6:73:68:42:07:40:8d:0b:03:4b:0c:
         cb:e8:6b:b9:2d:29:72:72:de:c3:60:06:a3:59:d9:8d:20:a7:
         6f:ce:ee:7f:58:b4:ee:76:b1:41:d2:12:6b:61:26:30:5a:76:
         01:46:8a:f3:6b:b6:56:d8:1b:5f:8c:1f:68:e7:a3:51:55:cb:
         ce:1c:75:78:3f:09:23:7b:fb:27:0d:46:99:6c:92:5c:86:cb:
         dd:5b:06:2c:36:a4:35:72:3e:3e:e0:f4:d9:46:d3:e6:32:8d:
         56:db:9f:c3:4a:2d:34:a2:fd:f0:1f:88:20:0f:5a:fd:b1:77:
         95:ef:5c:bb:15:7c:59:22:77:bd:83:d8:ce:b1:37:a1:61:38:
         59:18:ee:ed:3f:68:87:47:8d:ac:3e:7c:df:d3:99:b0:99:8e:
         47:a3:a9:12:75:86:de:2c:c7:01:2e:a9:42:88:c8:37:da:b8:
         e1:03:1a:97:4b:25:88:d6:83:30:13:5b:00:94:04:d1:dc:d1:
         0e:f4:0b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:58 2026 by rpki-client