Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/AIRPAYTW/0/3130332e3132372e3233322e302f32322d3234203d3e20313331363335.roa
File:                     3130332e3132372e3233322e302f32322d3234203d3e20313331363335.roa (raw, json)
Hash identifier:          J7DWwSASsdA8dD64JOz4sh4t2+e29R0X4AQ/z1Utjq8=
Subject key identifier:   0A:5F:AD:29:B9:DB:49:6D:A9:F2:E7:DB:F4:57:10:B6:BD:D9:F1:CC
Certificate issuer:       /CN=631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74
Certificate serial:       4C6CA0B4C670B212F1D1876CF21AF43231E717A2
Authority key identifier: 63:1C:A9:A6:A0:71:EA:A6:5C:6D:0F:9D:75:33:EB:8A:71:8E:7C:74
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/3130332e3132372e3233322e302f32322d3234203d3e20313331363335.roa
Signing time:             Mon 11 May 2026 17:05:04 +0000
ROA not before:           Mon 11 May 2026 17:00:04 +0000
ROA not after:            Mon 10 May 2027 17:05:04 +0000
asID:                     131635
IP address blocks:        103.127.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.crl
                          rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6c:a0:b4:c6:70:b2:12:f1:d1:87:6c:f2:1a:f4:32:31:e7:17:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74
        Validity
            Not Before: May 11 17:00:04 2026 GMT
            Not After : May 10 17:05:04 2027 GMT
        Subject: CN=0A5FAD29B9DB496DA9F2E7DBF45710B6BDD9F1CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:8e:a7:3c:84:47:6e:75:bb:d9:e3:2e:dc:
                    70:73:5d:f2:10:7c:4f:45:8f:38:3b:53:62:da:70:
                    a5:dc:18:de:f0:ab:d0:c0:ef:a2:c1:7f:f4:34:3e:
                    20:ba:b4:ad:12:1d:18:54:3e:72:69:71:e9:43:cb:
                    8f:9e:83:a5:b4:42:6a:3f:b5:ed:a0:f0:f5:cf:fb:
                    52:40:d9:6e:41:30:16:ff:84:b1:ae:01:bf:9e:e8:
                    b6:72:a5:38:fa:24:66:54:11:5c:3a:13:93:b9:e9:
                    f9:06:6b:1c:90:b7:52:54:44:16:bb:dd:6a:4f:43:
                    8b:dd:b3:7d:82:0a:67:c5:a7:5f:c9:3b:01:55:1f:
                    a0:e6:12:6a:0e:ec:de:4c:67:71:f6:fc:24:a0:f6:
                    cb:08:d2:ab:7a:0f:67:ba:ca:c1:16:39:8e:97:9d:
                    72:58:64:b7:5b:2d:e5:f1:01:f9:9a:a3:f9:54:6b:
                    56:b6:c5:c0:07:c7:5a:17:f1:8b:2e:49:9f:28:56:
                    36:3c:fb:22:3c:83:e2:1a:10:83:c0:ae:07:7b:6e:
                    40:74:20:e5:c2:80:c6:eb:40:58:87:89:6a:b1:eb:
                    5c:bb:f2:c9:38:73:56:5b:af:dc:74:ed:2f:71:66:
                    da:0e:85:e7:6d:0b:e9:98:d6:6e:03:b1:89:76:89:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5F:AD:29:B9:DB:49:6D:A9:F2:E7:DB:F4:57:10:B6:BD:D9:F1:CC
            X509v3 Authority Key Identifier:
                keyid:63:1C:A9:A6:A0:71:EA:A6:5C:6D:0F:9D:75:33:EB:8A:71:8E:7C:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/631CA9A6A071EAA65C6D0F9D7533EB8A718E7C74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AIRPAYTW/0/3130332e3132372e3233322e302f32322d3234203d3e20313331363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:9e:97:e5:94:98:7b:99:af:9a:ed:2f:8a:c6:cf:14:60:
         ab:90:59:01:6c:0b:b0:3e:39:a1:50:c7:2f:e1:50:53:33:d4:
         a6:0a:12:a8:d9:d4:c7:03:73:b2:1a:19:3e:f5:8f:e4:c5:df:
         2f:87:ab:15:81:c9:fe:ab:83:f0:be:52:94:ce:1c:d2:1a:c0:
         43:51:70:35:13:81:47:c8:a4:f3:93:ba:27:95:0d:11:1a:cb:
         49:83:fd:56:d4:3d:12:0d:1b:7b:74:35:4c:09:10:b0:c0:72:
         a6:73:39:86:70:f1:64:50:ab:8f:c3:f3:56:9e:5a:e9:bc:e0:
         00:03:7e:05:2e:c2:80:61:fe:b1:e4:bc:b4:7f:c8:98:15:55:
         67:87:0d:8f:2f:db:48:90:a5:50:5a:50:4a:2e:1b:0e:42:5a:
         21:de:ed:16:ab:d6:18:56:02:d7:59:df:50:2a:23:22:81:a4:
         af:94:53:56:80:8a:7c:d4:ee:12:31:22:a2:0d:7c:ac:e0:55:
         0f:00:52:ce:b4:dd:62:ef:e8:52:fe:a3:dd:7b:60:0f:c6:3a:
         71:84:1e:07:5c:a0:4c:7a:7c:50:ea:c2:75:6e:59:ee:7d:4e:
         4a:e4:bc:b8:b0:bb:71:13:72:b2:a4:f4:9a:e0:28:cf:a9:7d:
         e2:5b:e8:44
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUTGygtMZwshLx0Yds8hr0MjHnF6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjMxQ0E5QTZBMDcxRUFBNjVDNkQwRjlENzUzM0VCOEE3
MThFN0M3NDAeFw0yNjA1MTExNzAwMDRaFw0yNzA1MTAxNzA1MDRaMDMxMTAvBgNV
BAMTKDBBNUZBRDI5QjlEQjQ5NkRBOUYyRTdEQkY0NTcxMEI2QkREOUYxQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNm46nPIRHbnW72eMu3HBzXfIQ
fE9Fjzg7U2LacKXcGN7wq9DA76LBf/Q0PiC6tK0SHRhUPnJpcelDy4+eg6W0Qmo/
te2g8PXP+1JA2W5BMBb/hLGuAb+e6LZypTj6JGZUEVw6E5O56fkGaxyQt1JURBa7
3WpPQ4vds32CCmfFp1/JOwFVH6DmEmoO7N5MZ3H2/CSg9ssI0qt6D2e6ysEWOY6X
nXJYZLdbLeXxAfmao/lUa1a2xcAHx1oX8YsuSZ8oVjY8+yI8g+IaEIPArgd7bkB0
IOXCgMbrQFiHiWqx61y78sk4c1Zbr9x07S9xZtoOhedtC+mY1m4DsYl2iYGzAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUCl+tKbnbSW2p8ufb9FcQtr3Z8cwwHwYDVR0j
BBgwFoAUYxyppqBx6qZcbQ+ddTPrinGOfHQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQUlSUEFZ
VFcvMC82MzFDQTlBNkEwNzFFQUE2NUM2RDBGOUQ3NTMzRUI4QTcxOEU3Qzc0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzYzMUNBOUE2QTA3MUVBQTY1QzZEMEY5RDc1
MzNFQjhBNzE4RTdDNzQuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQUlSUEFZVFcvMC8zMTMwMzMy
ZTMxMzIzNzJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzMxMzYz
MzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ3/oMA0GCSqGSIb3DQEBCwUAA4IBAQCU156X5ZSYe5mv
mu0visbPFGCrkFkBbAuwPjmhUMcv4VBTM9SmChKo2dTHA3OyGhk+9Y/kxd8vh6sV
gcn+q4PwvlKUzhzSGsBDUXA1E4FHyKTzk7onlQ0RGstJg/1W1D0SDRt7dDVMCRCw
wHKmczmGcPFkUKuPw/NWnlrpvOAAA34FLsKAYf6x5Ly0f8iYFVVnhw2PL9tIkKVQ
WlBKLhsOQloh3u0Wq9YYVgLXWd9QKiMigaSvlFNWgIp81O4SMSKiDXys4FUPAFLO
tN1i7+hS/qPde2APxjpxhB4HXKBMenxQ6sJ1blnufU5K5Ly4sLtxE3KypPSa4CjP
qX3iW+hE
-----END CERTIFICATE-----
Generated at Wed May 13 07:15:31 2026 by rpki-client