Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASSMAU/0/3130332e3132322e3131382e302f32342d3234203d3e20323132333538.roa
File:                     3130332e3132322e3131382e302f32342d3234203d3e20323132333538.roa (raw, json)
Hash identifier:          IqczOsSNOaaA3YMeUmmuTAy9pXLIHlqn9TgiNBSHbTM=
Subject key identifier:   39:74:64:0E:A5:1E:D0:3F:2D:FE:76:D2:4D:D9:B2:4F:BE:42:9C:B0
Certificate issuer:       /CN=E812027AE484273C81255DEF31441251E758ED82
Certificate serial:       150EC879CD2F00BE6E601C456DC5E976DC34EAF3
Authority key identifier: E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASSMAU/0/3130332e3132322e3131382e302f32342d3234203d3e20323132333538.roa
Signing time:             Mon 11 May 2026 17:52:44 +0000
ROA not before:           Mon 11 May 2026 17:47:44 +0000
ROA not after:            Mon 10 May 2027 17:52:44 +0000
asID:                     212358
IP address blocks:        103.122.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl
                          rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:0e:c8:79:cd:2f:00:be:6e:60:1c:45:6d:c5:e9:76:dc:34:ea:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E812027AE484273C81255DEF31441251E758ED82
        Validity
            Not Before: May 11 17:47:44 2026 GMT
            Not After : May 10 17:52:44 2027 GMT
        Subject: CN=3974640EA51ED03F2DFE76D24DD9B24FBE429CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:bc:5f:3d:e6:38:4e:d8:4c:c9:d6:4e:da:
                    eb:8f:ff:a4:56:ac:7a:f6:14:9b:e0:f0:e0:98:15:
                    9e:32:15:83:b9:13:3f:56:26:38:5d:65:f9:d7:bf:
                    28:ff:0b:98:d8:e4:24:c1:59:93:8a:21:71:91:79:
                    ec:40:30:83:f3:c1:60:8d:52:19:13:f5:30:1e:cf:
                    93:1d:69:ed:f0:01:a5:f4:9e:d7:9f:8d:51:65:7e:
                    89:67:46:86:b0:53:66:7e:c5:07:7a:dd:6b:6f:2e:
                    3f:55:d6:2e:a8:9d:70:2e:56:21:05:b0:8a:21:32:
                    33:91:0c:98:19:c7:ea:a7:00:22:70:d6:f6:bd:91:
                    97:53:a6:8e:43:83:76:f4:64:8e:92:6f:55:7e:97:
                    9d:a6:22:4f:70:6a:af:73:8e:3f:1f:f8:17:f9:e0:
                    15:89:b7:7a:ba:0a:0a:66:7a:13:70:61:c6:e6:de:
                    c4:ae:53:f4:f8:2f:68:54:2b:76:2a:2b:5c:a8:90:
                    dd:02:9a:73:da:00:f8:67:88:a4:c5:89:15:97:b2:
                    f1:d9:2a:92:47:76:a3:ea:d1:45:03:38:4c:d3:4b:
                    5d:c1:a5:da:1f:b5:a6:6b:1c:53:d9:15:dd:73:f1:
                    5d:4b:e1:10:f8:55:37:b5:6a:2e:f7:39:aa:82:fb:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:74:64:0E:A5:1E:D0:3F:2D:FE:76:D2:4D:D9:B2:4F:BE:42:9C:B0
            X509v3 Authority Key Identifier:
                keyid:E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/3130332e3132322e3131382e302f32342d3234203d3e20323132333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:48:5f:73:2c:26:9c:fb:89:0f:0b:c9:e9:c5:0c:7b:e9:b2:
         32:19:d2:03:11:f9:fa:a5:21:2b:3b:fc:a0:5e:28:4a:f6:ad:
         6d:ce:ed:b1:3b:a3:d1:ef:24:42:bc:9f:09:fe:8f:e2:81:91:
         22:48:9f:5b:db:40:94:ab:54:75:05:0a:73:1e:9c:d3:a3:58:
         2a:40:4a:11:04:ba:1d:f8:23:00:5a:1c:18:52:a4:ea:98:db:
         04:73:95:63:31:20:f3:3a:c8:9f:1c:62:15:82:2f:31:0c:5d:
         be:75:2c:6d:da:22:a5:a7:41:e1:20:b6:41:00:28:8a:b0:59:
         9e:99:3f:b5:74:07:68:39:56:0d:e3:cc:dc:73:d5:12:1b:6a:
         77:20:ec:2b:72:7f:60:5b:97:0a:06:cf:1b:fc:78:58:e9:4c:
         ce:85:db:b1:05:57:de:be:a2:43:1d:a0:e7:da:2b:66:43:52:
         1e:41:0f:c1:b0:68:fa:dc:55:0b:3a:fa:57:51:9b:94:ec:09:
         c1:44:7c:29:58:96:ce:cb:72:2f:cb:b4:7f:4f:98:11:13:82:
         c4:c1:f4:16:74:5c:23:71:9d:b5:93:71:50:49:a6:e7:ac:64:
         c9:72:1a:88:9f:8f:e7:a3:26:d1:fe:17:d4:99:2e:85:08:1e:
         53:07:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:12:17 2026 by rpki-client