Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASSMAU/0/3130332e3132322e3131392e302f32342d3234203d3e203338323534.roa
File:                     3130332e3132322e3131392e302f32342d3234203d3e203338323534.roa (raw, json)
Hash identifier:          y7sA2ji6p2pToDaDsRrnnsiXbaoBJwe5Hbaywczwg3w=
Subject key identifier:   1E:2E:F9:2E:6B:D2:A2:17:40:D8:00:5E:80:78:99:2B:65:AD:A3:E2
Certificate issuer:       /CN=E812027AE484273C81255DEF31441251E758ED82
Certificate serial:       421F664F6D9801F0D78EEC64F509F26F3000BE64
Authority key identifier: E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASSMAU/0/3130332e3132322e3131392e302f32342d3234203d3e203338323534.roa
Signing time:             Mon 11 May 2026 17:38:03 +0000
ROA not before:           Mon 11 May 2026 17:33:03 +0000
ROA not after:            Mon 10 May 2027 17:38:03 +0000
asID:                     38254
IP address blocks:        103.122.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl
                          rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1f:66:4f:6d:98:01:f0:d7:8e:ec:64:f5:09:f2:6f:30:00:be:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E812027AE484273C81255DEF31441251E758ED82
        Validity
            Not Before: May 11 17:33:03 2026 GMT
            Not After : May 10 17:38:03 2027 GMT
        Subject: CN=1E2EF92E6BD2A21740D8005E8078992B65ADA3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:85:e6:27:1c:b4:d5:5d:02:4f:51:04:d4:
                    90:d5:0d:16:eb:9c:9d:5c:f2:45:19:47:d3:df:f2:
                    2b:4f:4a:9b:40:05:85:16:37:6f:b4:f9:03:81:77:
                    a0:72:2c:cf:30:3f:5d:42:a0:87:8c:de:df:84:1e:
                    a9:e3:cc:a0:f9:21:0a:fb:ec:14:cb:9b:ff:be:de:
                    ed:4c:6e:c7:df:21:5d:5b:a6:d2:d9:4c:f2:a3:17:
                    77:be:ec:c9:2f:9a:4e:9e:f1:fb:1f:63:b1:56:9d:
                    4e:c3:46:25:96:24:4f:8e:4d:db:66:5d:ac:7e:ef:
                    24:4f:97:9c:7c:1e:2f:d7:c5:13:c7:61:db:95:5b:
                    fb:76:38:7c:59:f0:24:3c:1b:88:5e:ba:b0:08:b2:
                    39:d7:ef:61:4b:f5:16:58:60:10:cc:87:b1:c0:a0:
                    36:26:92:fc:cc:ae:bc:1e:3f:fd:69:7c:58:06:87:
                    6f:09:75:2b:dc:69:63:d4:9b:58:7a:ab:da:fe:d3:
                    66:81:e9:8e:f0:3a:8e:a2:15:50:a8:60:ce:a1:54:
                    94:07:ee:af:f6:fc:4a:a8:97:86:a3:98:1e:87:8e:
                    9a:a1:6d:68:f0:7b:2c:6c:de:ed:3d:89:92:de:f8:
                    00:4c:75:b4:f1:09:71:be:0b:75:19:07:17:68:f6:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2E:F9:2E:6B:D2:A2:17:40:D8:00:5E:80:78:99:2B:65:AD:A3:E2
            X509v3 Authority Key Identifier:
                keyid:E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/3130332e3132322e3131392e302f32342d3234203d3e203338323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:1d:5b:b3:5e:98:c1:9e:25:71:6e:57:83:d1:ca:d2:31:
         0e:9f:9b:bf:22:8a:af:29:a0:eb:6b:dc:1c:d5:f0:6d:72:58:
         96:27:4b:f5:99:f7:54:ee:56:b6:b0:ad:75:47:be:2b:e0:c9:
         bd:4f:20:ca:70:f7:d2:20:37:bd:ff:18:53:40:f9:96:69:04:
         23:56:f7:92:4b:7b:71:1a:5e:59:8e:68:70:21:7b:83:88:3e:
         8a:5f:03:57:27:c0:2f:f8:89:02:85:a8:6b:7d:ba:57:af:28:
         1b:20:97:44:e0:eb:a7:70:53:f9:72:0a:18:fb:30:c7:cc:a1:
         aa:dc:b0:24:50:f6:25:5f:74:e8:84:83:d7:b4:d9:91:b1:48:
         83:05:2f:f5:cc:7f:7e:3e:28:f7:7f:ec:c9:00:65:0e:17:e0:
         63:e1:01:9c:8b:47:29:1a:84:2a:1f:95:4c:ec:b2:b3:06:ca:
         72:f2:85:c9:99:7d:6a:39:cc:61:81:98:19:9f:e8:f1:23:6d:
         c3:0d:72:98:fc:7a:0e:60:d3:b7:ce:1f:25:7c:f1:ba:b2:28:
         56:c6:9a:c0:03:f8:b1:75:c4:16:59:04:be:c7:d7:36:d7:dd:
         5c:24:23:2b:be:54:e7:9b:fc:da:49:c8:56:e6:48:f7:d3:65:
         6e:81:ce:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 05:55:45 2026 by rpki-client