Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa
File:                     3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa (raw, json)
Hash identifier:          OZwQnvVk4yetwjei/3UcgDl7U/wG9KFLqEYavrhzVlI=
Subject key identifier:   6C:CC:3D:48:E3:A6:2E:D8:40:83:FE:04:11:7C:39:31:64:77:76:E7
Certificate issuer:       /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial:       7908E8C2D0FC385E5E9950D576E2EBD9F31E6154
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa
Signing time:             Mon 11 May 2026 17:55:49 +0000
ROA not before:           Mon 11 May 2026 17:50:49 +0000
ROA not after:            Mon 10 May 2027 17:55:49 +0000
asID:                     131617
IP address blocks:        103.104.149.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
                          rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:08:e8:c2:d0:fc:38:5e:5e:99:50:d5:76:e2:eb:d9:f3:1e:61:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Validity
            Not Before: May 11 17:50:49 2026 GMT
            Not After : May 10 17:55:49 2027 GMT
        Subject: CN=6CCC3D48E3A62ED84083FE04117C3931647776E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:d8:02:a1:14:b5:12:61:5e:b2:ed:a9:55:
                    d7:91:87:a2:f8:52:2b:36:ac:54:7d:6b:ea:8c:16:
                    c7:d5:ba:d2:3d:83:12:77:52:a2:18:40:66:1d:85:
                    2d:e3:3f:20:3f:2e:b1:2e:c1:57:d4:87:b3:25:44:
                    59:53:9c:f1:b8:06:32:37:6a:ac:ff:fa:6d:d6:67:
                    6f:9a:9f:49:71:39:27:54:60:95:f5:67:dd:70:6a:
                    78:4a:b0:58:99:be:0e:f7:dc:c0:0c:8e:9e:e9:7b:
                    4e:72:32:fb:25:43:c7:26:d6:c2:58:4b:3a:84:85:
                    f3:a2:12:d7:07:bc:00:08:a5:37:58:35:79:d7:ba:
                    60:cb:56:a0:7c:36:67:33:0a:d3:05:ac:12:8e:08:
                    ab:ed:99:4f:ff:ae:12:0f:ca:5f:cb:57:c2:19:52:
                    c5:f0:b3:f4:12:84:d2:fe:6b:f7:15:29:11:6e:e2:
                    b5:30:74:75:ae:dc:22:0a:8c:7d:62:b8:8d:e9:1a:
                    2c:8d:35:ef:42:e6:63:c3:ae:6e:f3:8e:b4:ef:f9:
                    0f:7d:fc:ae:58:d2:79:bd:49:2b:9c:35:19:e0:e9:
                    5b:92:f3:d3:e7:a4:20:87:6f:39:84:1e:0b:17:be:
                    21:6e:e5:bc:17:e8:71:f4:94:ac:50:35:e5:f0:fd:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CC:3D:48:E3:A6:2E:D8:40:83:FE:04:11:7C:39:31:64:77:76:E7
            X509v3 Authority Key Identifier:
                keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3134392e302f32342d3332203d3e20313331363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:d9:3f:23:7a:b4:26:ce:5d:04:9e:f4:c2:5b:1c:dc:01:
         4e:db:d3:90:5c:ca:d3:88:07:bc:6e:59:39:6b:b4:70:29:8d:
         73:21:a3:e0:dd:97:80:d6:9f:88:a9:c0:44:c6:15:b8:19:43:
         b3:c9:39:31:33:0d:4b:c8:ff:41:95:0c:dc:64:6c:50:e3:6b:
         4f:d5:eb:f9:3e:48:13:3e:ae:4c:45:fc:3e:ea:c8:7a:12:09:
         3f:0e:31:0f:5a:6d:be:1f:e2:e3:b7:16:c1:4d:b0:6f:6d:e3:
         cf:6b:37:94:42:ef:16:2c:72:5f:04:42:d5:0e:18:a9:cb:46:
         6d:43:32:56:25:db:48:39:5e:76:aa:05:6a:0a:b6:bf:32:34:
         bd:b1:3a:c0:81:88:60:b0:a6:86:3d:4f:e0:88:04:f6:5a:69:
         96:75:ab:f1:cb:80:5f:3a:16:6b:21:fc:b0:bb:fd:a3:ea:e9:
         76:1a:41:24:cf:46:5d:52:ce:ab:60:15:1e:5f:44:90:25:fa:
         98:28:eb:56:49:19:97:0a:97:6b:9f:e5:4d:0e:26:06:97:d8:
         6f:03:bb:b9:77:f4:9a:68:4f:45:7e:e7:76:bd:4d:30:a1:f7:
         3b:8a:9e:01:50:7e:ae:75:e5:e0:50:c8:c7:46:4b:52:07:e7:
         1d:7b:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:56 2026 by rpki-client