Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138480/0/3130332e3138302e31362e302f32332d3234203d3e203633383933.roa
File:                     3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (raw, json)
Hash identifier:          5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=
Subject key identifier:   D7:77:39:67:F8:D5:E3:C4:DA:A6:2B:37:25:09:15:C2:2E:50:87:8E
Certificate issuer:       /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Certificate serial:       19FAC7EADDB3DA6113EDE6A904A3A004B1342FE0
Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138480/0/3130332e3138302e31362e302f32332d3234203d3e203633383933.roa
Signing time:             Mon 11 May 2026 17:15:41 +0000
ROA not before:           Mon 11 May 2026 17:10:41 +0000
ROA not after:            Mon 10 May 2027 17:15:41 +0000
asID:                     63893
IP address blocks:        103.180.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
                          rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:fa:c7:ea:dd:b3:da:61:13:ed:e6:a9:04:a3:a0:04:b1:34:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
        Validity
            Not Before: May 11 17:10:41 2026 GMT
            Not After : May 10 17:15:41 2027 GMT
        Subject: CN=D7773967F8D5E3C4DAA62B37250915C22E50878E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:09:4d:38:01:11:69:09:c5:aa:79:e5:c7:
                    a2:fb:3a:3f:44:ae:cb:a2:0d:4d:5f:66:79:55:6a:
                    e8:04:1c:ba:e9:22:e7:23:c9:16:3a:cb:d7:02:17:
                    83:ab:08:38:2c:6e:c8:f1:c3:3e:f5:9f:d3:72:26:
                    74:35:f2:2e:b5:79:5a:e6:a4:a5:3f:d5:ec:75:e6:
                    cb:1e:3a:90:44:ef:69:e2:8f:9d:e8:6c:df:42:23:
                    50:b9:bc:4b:82:37:39:80:bd:e5:5a:18:da:39:ce:
                    22:a0:00:27:74:a7:96:93:8f:6f:2d:81:67:66:2b:
                    ce:f0:32:20:df:9c:00:ac:19:fe:af:c2:65:d6:7d:
                    ef:3d:3d:29:15:84:68:5f:49:80:51:d7:e7:14:ec:
                    e4:57:25:5c:4f:78:65:25:1f:33:ad:20:c1:1e:97:
                    a2:9e:2a:c6:1f:ad:63:b6:1c:b9:c4:58:a7:1d:1d:
                    3a:ba:a2:7b:53:d4:26:8d:b9:98:15:d4:8a:5f:8c:
                    60:47:ae:8e:c4:2f:a9:5c:ad:87:4e:db:55:65:38:
                    c0:7e:ac:93:90:82:56:d7:37:a4:e0:04:47:ba:01:
                    bc:31:b2:94:fb:aa:be:7d:72:c8:71:be:63:dc:52:
                    0d:cb:c5:91:e4:db:08:7b:e9:84:dd:97:9f:86:f1:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:77:39:67:F8:D5:E3:C4:DA:A6:2B:37:25:09:15:C2:2E:50:87:8E
            X509v3 Authority Key Identifier:
                keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/3130332e3138302e31362e302f32332d3234203d3e203633383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:54:9b:7c:82:c1:11:c0:7b:1a:06:0b:5f:b9:c0:48:a5:17:
         48:09:a8:40:c7:f0:1f:23:fa:31:46:4c:e3:4f:5d:b4:bb:ec:
         3c:4b:9e:ae:fc:32:24:50:75:3f:06:e0:bf:ff:42:90:dc:1e:
         23:1a:30:b2:23:24:2c:fa:a3:08:15:5b:c8:08:3f:90:2c:7a:
         2b:bb:97:67:a7:46:2e:ec:1f:48:05:21:23:4b:a4:ed:72:70:
         79:73:57:20:19:28:74:a2:6a:92:ce:a2:e0:b7:0a:02:6a:f3:
         8c:0f:1b:87:e8:56:0c:80:f1:e7:28:5e:0d:06:6d:94:92:9e:
         8e:64:d0:e7:ec:ab:44:ee:13:c8:ef:a1:de:ad:4f:bb:9c:a6:
         4f:42:d1:97:de:7a:c1:e9:3f:17:d5:c4:e1:b1:bd:eb:ce:90:
         26:5a:66:0a:b2:08:a4:46:72:f0:9e:e9:1c:31:04:e1:f8:2c:
         1d:c1:ef:58:2c:ae:3a:28:db:21:41:5a:fe:73:54:f2:5c:ca:
         f0:03:d0:53:f4:fd:9f:71:ef:01:5d:24:29:63:78:aa:4e:89:
         8d:b1:12:ec:e7:e0:8d:b8:8b:49:f6:64:9f:f4:93:cc:15:92:
         03:3f:da:52:aa:57:37:a1:11:32:37:40:29:d7:04:dc:a0:2c:
         85:69:25:cb
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUGfrH6t2z2mET7eapBKOgBLE0L+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0MwMUE3RUU3OUM3
NDFGQjNBMzAeFw0yNjA1MTExNzEwNDFaFw0yNzA1MTAxNzE1NDFaMDMxMTAvBgNV
BAMTKEQ3NzczOTY3RjhENUUzQzREQUE2MkIzNzI1MDkxNUMyMkU1MDg3OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzwlNOAERaQnFqnnlx6L7Oj9E
rsuiDU1fZnlVaugEHLrpIucjyRY6y9cCF4OrCDgsbsjxwz71n9NyJnQ18i61eVrm
pKU/1ex15sseOpBE72nij53obN9CI1C5vEuCNzmAveVaGNo5ziKgACd0p5aTj28t
gWdmK87wMiDfnACsGf6vwmXWfe89PSkVhGhfSYBR1+cU7ORXJVxPeGUlHzOtIMEe
l6KeKsYfrWO2HLnEWKcdHTq6ontT1CaNuZgV1IpfjGBHro7EL6lcrYdO21VlOMB+
rJOQglbXN6TgBEe6AbwxspT7qr59cshxvmPcUg3LxZHk2wh76YTdl5+G8Tz1AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU13c5Z/jV48Tapis3JQkVwi5Qh44wHwYDVR0j
BBgwFoAURrO+1AbByWD1z6zAGn7nnHQfs6MwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz
ODQ4MC8wLzQ2QjNCRUQ0MDZDMUM5NjBGNUNGQUNDMDFBN0VFNzlDNzQxRkIzQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0Mw
MUE3RUU3OUM3NDFGQjNBMy5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcw
C4ZkcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQ1AxMTM4NDgwLzAvMzEz
MDMzMmUzMTM4MzAyZTMxMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMzMzgz
OTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ7QQMA0GCSqGSIb3DQEBCwUAA4IBAQCUVJt8gsERwHsa
BgtfucBIpRdICahAx/AfI/oxRkzjT120u+w8S56u/DIkUHU/BuC//0KQ3B4jGjCy
IyQs+qMIFVvICD+QLHoru5dnp0Yu7B9IBSEjS6TtcnB5c1cgGSh0omqSzqLgtwoC
avOMDxuH6FYMgPHnKF4NBm2Ukp6OZNDn7KtE7hPI76HerU+7nKZPQtGX3nrB6T8X
1cThsb3rzpAmWmYKsgikRnLwnukcMQTh+Cwdwe9YLK46KNshQVr+c1TyXMrwA9BT
9P2fce8BXSQpY3iqTomNsRLs5+CNuItJ9mSf9JPMFZIDP9pSqlc3oREyN0Ap1wTc
oCyFaSXL
-----END CERTIFICATE-----
Generated at Wed May 13 03:52:47 2026 by rpki-client