Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa
File:                     3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa (raw, json)
Hash identifier:          iG/RKgeK0WnHEYeyY7HDeBCF1wwyNY/516KS8KYs4xI=
Subject key identifier:   AA:BD:21:94:6A:FC:DA:0B:D6:DD:43:11:7E:F6:B5:08:DD:B8:44:86
Certificate issuer:       /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial:       7F568A22CEF64EDC6FF28F5F266468450A2EE262
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa
Signing time:             Mon 11 May 2026 17:56:09 +0000
ROA not before:           Mon 11 May 2026 17:51:09 +0000
ROA not after:            Mon 10 May 2027 17:56:09 +0000
asID:                     138415
IP address blocks:        103.104.148.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
                          rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:56:8a:22:ce:f6:4e:dc:6f:f2:8f:5f:26:64:68:45:0a:2e:e2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Validity
            Not Before: May 11 17:51:09 2026 GMT
            Not After : May 10 17:56:09 2027 GMT
        Subject: CN=AABD21946AFCDA0BD6DD43117EF6B508DDB84486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:9b:0c:f5:7e:e4:ce:5a:d3:9b:23:6d:67:
                    fd:68:3f:4f:6b:63:81:22:80:17:b8:64:af:82:38:
                    fa:73:cb:05:43:54:d4:e1:b9:7f:78:8e:c0:8d:73:
                    cc:27:b7:25:d1:de:5c:db:e1:97:0a:4c:57:8c:23:
                    d5:d0:20:94:cd:74:86:02:e9:ca:ff:37:4a:37:fd:
                    f9:15:ca:e1:2d:a8:35:3f:b2:45:fe:94:9d:ec:cf:
                    5b:92:49:48:b8:ee:61:15:4d:c0:35:90:65:f8:21:
                    4d:b9:8a:a3:f4:aa:35:a4:81:c4:e9:13:ee:6d:bf:
                    f6:e6:b3:1a:66:f1:ee:aa:c7:0c:92:60:26:90:8b:
                    60:bb:03:70:cd:41:5b:fa:41:36:59:af:bf:fc:4d:
                    85:64:93:cb:b6:eb:75:49:52:aa:fe:61:e6:b8:9b:
                    10:45:58:80:17:bc:04:07:8f:c9:11:4b:12:12:3c:
                    31:20:49:bd:ff:44:4a:b1:80:a9:ea:f5:82:33:5d:
                    61:74:9e:a5:44:b7:0c:0b:de:a3:8b:5b:a0:1c:d1:
                    f4:ed:62:59:f8:79:d8:14:fe:94:1b:6c:5d:b1:98:
                    37:fc:14:bb:09:9f:b5:9b:84:da:a8:ae:16:7e:90:
                    34:28:dc:e3:89:cb:97:7c:4f:8a:7e:6f:64:05:76:
                    54:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:21:94:6A:FC:DA:0B:D6:DD:43:11:7E:F6:B5:08:DD:B8:44:86
            X509v3 Authority Key Identifier:
                keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3134382e302f32332d3332203d3e20313338343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:81:af:04:c0:41:46:6a:2c:89:37:a7:ce:6b:b6:a6:a3:50:
         6f:21:c3:44:6e:70:ae:f3:d2:60:0f:af:0d:cd:1e:15:49:02:
         fc:ff:02:6c:14:de:b2:50:18:e9:83:f9:c9:67:a1:28:e3:84:
         69:76:3a:a5:66:ed:7e:05:56:09:8b:13:04:06:74:f8:84:85:
         e5:8b:c2:21:05:2c:ae:75:23:6d:71:50:8c:81:c2:59:c4:cb:
         03:c4:ce:ea:d4:9e:4a:9b:e7:cd:30:0c:35:8e:e3:8d:5a:6c:
         d4:53:61:53:74:f9:79:86:89:b3:64:42:7e:f6:65:9e:e6:df:
         8a:25:a4:75:5f:2b:84:cc:86:67:7e:b6:42:a7:f4:29:a6:00:
         42:64:5a:e4:03:f6:c4:f1:a7:c5:09:11:c0:79:78:e2:da:c3:
         2b:99:21:ce:36:d5:72:aa:24:52:49:47:38:2a:a3:39:93:45:
         5f:1a:ad:bd:cf:de:99:79:2f:91:46:91:41:e8:f8:28:ec:1c:
         83:cd:20:af:fd:8e:56:fd:99:93:6d:43:89:e5:b8:a4:7c:8e:
         40:ff:b3:50:f5:6b:cf:3c:3f:ec:10:e0:d0:cc:ec:7f:49:56:
         af:e4:5d:7d:60:49:87:ae:c7:6a:57:39:67:cf:00:9d:3e:92:
         b4:f8:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:43 2026 by rpki-client