Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/BOOKS/0/3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa
File:                     3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa (raw, json)
Hash identifier:          38TYeX+oJtOc/DoknBxIqH/fjs1oSmUXDDdootW8reI=
Subject key identifier:   14:99:C0:85:89:6C:14:4E:7D:F7:DF:5D:25:6D:68:C5:3C:65:AC:25
Certificate issuer:       /CN=0CA9C32F7806470F750EC53431D4F322F0851573
Certificate serial:       1984558A261D70FA44D90095E7FFC9CAE7B9DE80
Authority key identifier: 0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BOOKS/0/3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa
Signing time:             Mon 11 May 2026 17:19:44 +0000
ROA not before:           Mon 11 May 2026 17:14:44 +0000
ROA not after:            Mon 10 May 2027 17:19:44 +0000
asID:                     9919
IP address blocks:        103.125.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl
                          rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:84:55:8a:26:1d:70:fa:44:d9:00:95:e7:ff:c9:ca:e7:b9:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CA9C32F7806470F750EC53431D4F322F0851573
        Validity
            Not Before: May 11 17:14:44 2026 GMT
            Not After : May 10 17:19:44 2027 GMT
        Subject: CN=1499C085896C144E7DF7DF5D256D68C53C65AC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:43:eb:32:9e:7c:a0:e6:f6:45:ab:15:4c:
                    c9:68:9e:df:ee:e5:9f:93:9d:5c:9a:7e:0f:1a:e7:
                    d4:76:23:7a:2a:c6:f5:2a:3d:a5:0b:85:28:b0:0f:
                    ab:92:4a:d2:a5:c5:94:9c:b5:55:fe:95:6f:b0:b0:
                    48:41:0c:8b:d2:09:1d:82:b5:51:07:95:be:e9:61:
                    82:c1:23:14:cf:cc:e3:72:00:bf:9c:1a:2d:b5:d3:
                    e5:67:8a:fe:9a:78:3d:f3:35:1b:6a:78:e8:cc:06:
                    8b:29:4e:94:75:0d:69:63:3b:53:97:d4:ae:19:56:
                    74:fb:af:76:a3:db:77:6c:63:d4:83:c3:7a:00:7a:
                    d8:56:d6:22:3a:9a:cc:2b:1a:61:0d:a8:e6:ce:ba:
                    9f:3f:25:bb:ec:3a:cb:bb:51:ce:fe:23:d8:cd:48:
                    df:4f:3e:cc:be:80:47:59:88:45:1d:9b:4e:73:60:
                    ff:81:03:d6:98:ca:8f:36:f3:12:bc:a1:c0:01:f3:
                    90:ca:e7:db:25:64:50:86:ef:b1:07:0f:00:49:5d:
                    02:79:91:88:4b:50:c0:c9:c0:b5:b2:ba:ce:05:68:
                    d0:c4:ab:e2:84:bf:88:7d:6e:dc:75:63:66:bb:20:
                    33:81:80:0f:90:a5:71:08:2f:e3:75:15:80:ee:19:
                    2a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:C0:85:89:6C:14:4E:7D:F7:DF:5D:25:6D:68:C5:3C:65:AC:25
            X509v3 Authority Key Identifier:
                keyid:0C:A9:C3:2F:78:06:47:0F:75:0E:C5:34:31:D4:F3:22:F0:85:15:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/0CA9C32F7806470F750EC53431D4F322F0851573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0CA9C32F7806470F750EC53431D4F322F0851573.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BOOKS/0/3130332e3132352e3232382e302f32322d3234203d3e2039393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:15:f9:a9:6a:8d:ce:ea:68:7e:17:e8:23:db:a2:ae:c1:19:
         51:6e:09:4c:52:94:d9:24:1e:b3:f6:18:d6:e2:68:cf:4b:61:
         f8:c8:08:5e:06:c2:6a:7d:86:95:73:5c:d8:d3:89:9a:70:12:
         6b:54:d1:40:dc:73:3a:dc:5c:10:40:34:d0:89:ef:66:2f:a2:
         9d:9a:eb:dd:9b:0e:86:89:34:d7:1a:0c:33:e9:5d:bc:3c:5f:
         41:91:d4:bc:90:90:c4:49:9d:87:13:e3:01:3f:b0:5b:bf:f1:
         0b:cf:48:f7:48:5f:ae:41:e2:df:85:d0:23:8a:9a:e6:c8:71:
         88:f0:e0:51:f5:29:72:19:cd:25:96:8a:67:d9:f0:a2:51:ce:
         cb:0a:74:cd:7a:a9:20:98:83:92:46:02:dd:87:ea:38:f2:5b:
         b6:26:3f:c9:d0:40:d7:dc:7e:1d:20:24:56:4f:ab:c8:8c:e7:
         aa:67:5d:5b:c9:26:f0:c6:62:e3:92:6d:7a:3c:26:ac:6d:98:
         86:8b:21:29:12:8d:6c:ab:75:1a:5b:95:fc:61:95:1f:01:51:
         cd:55:cf:c4:44:88:ab:8b:02:8e:1c:95:6a:e6:99:94:2e:30:
         15:9b:2d:5f:df:40:3b:fe:dc:e3:29:ea:b3:b8:42:15:c4:e1:
         28:01:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:12 2026 by rpki-client