Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa
File:                     3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (raw, json)
Hash identifier:          jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=
Subject key identifier:   2D:BF:39:87:82:1D:FC:D7:31:F7:F6:DC:2D:90:12:35:88:0D:AF:02
Certificate issuer:       /CN=3D576C4841082805B3CDBD7337F3963A8833174B
Certificate serial:       363839D9C43497ACF4859C4C5F10C7C6302FCA60
Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa
Signing time:             Mon 11 May 2026 17:39:26 +0000
ROA not before:           Mon 11 May 2026 17:34:26 +0000
ROA not after:            Mon 10 May 2027 17:39:26 +0000
asID:                     139637
IP address blocks:        103.119.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl
                          rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:38:39:d9:c4:34:97:ac:f4:85:9c:4c:5f:10:c7:c6:30:2f:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B
        Validity
            Not Before: May 11 17:34:26 2026 GMT
            Not After : May 10 17:39:26 2027 GMT
        Subject: CN=2DBF3987821DFCD731F7F6DC2D901235880DAF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:48:c4:e7:a4:96:8a:9f:72:6e:a9:22:0e:
                    00:a6:7a:6d:ee:a2:04:1c:00:04:12:8b:77:04:a4:
                    15:f3:57:e7:29:7f:23:61:a0:73:29:d1:0a:9c:2d:
                    3a:1a:82:45:e5:43:be:32:d7:cc:08:6f:ae:98:a7:
                    ce:f8:32:4c:b0:a6:02:9a:1b:b7:9e:11:5f:a5:6b:
                    33:de:10:82:7c:b1:ad:ca:77:0a:24:cc:c6:14:b2:
                    fd:14:7a:25:c5:f8:ee:45:b4:6a:00:f7:91:93:53:
                    e7:64:9e:50:ae:38:0b:e8:43:5d:06:76:e8:85:9e:
                    a9:de:24:06:e3:11:97:c7:bb:f8:9c:1c:9b:74:14:
                    3d:26:5b:cd:53:3f:c6:11:f5:de:5b:b1:97:49:c5:
                    0e:b4:54:10:a2:73:b5:5d:38:33:e1:96:dd:7e:45:
                    d3:c6:1b:da:8a:1c:38:af:3d:d4:20:f7:c4:f2:3d:
                    32:f2:c4:48:c3:63:cf:c0:7a:a7:7c:1f:07:0e:62:
                    2a:7d:66:4b:f3:69:fe:4a:10:39:ea:a8:42:44:80:
                    f4:c4:59:b4:4a:d1:68:10:f0:26:66:38:e2:4e:ff:
                    8f:89:01:bf:f5:f0:f8:c4:81:e4:b3:f6:64:09:a0:
                    9a:2b:69:31:b2:e9:2e:55:6b:58:cd:d2:b9:5b:cf:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:39:87:82:1D:FC:D7:31:F7:F6:DC:2D:90:12:35:88:0D:AF:02
            X509v3 Authority Key Identifier:
                keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:d6:d4:78:68:24:f5:a9:3e:b8:5a:62:83:11:97:9b:7f:
         77:fe:ba:c3:04:c7:4a:fe:04:e2:80:75:b1:e8:60:8b:cf:73:
         b6:14:81:5d:0f:05:06:26:f4:5b:62:4c:d8:46:ba:bc:4b:44:
         a4:a7:c1:9a:74:35:67:86:97:a6:da:8a:0a:fa:fe:75:49:5b:
         d5:1a:bc:97:55:88:56:fc:ad:3b:a5:02:db:c2:c9:b9:e5:5c:
         bd:04:8f:a8:17:cb:af:b1:d6:03:43:b5:86:3f:39:30:b1:e0:
         d3:08:f5:13:a2:c3:4b:d4:c5:12:17:32:2b:d0:88:75:1a:c2:
         1b:6c:96:ce:d2:d9:69:1c:18:fa:7d:a1:81:63:8f:18:86:d4:
         7a:26:7c:85:12:d9:a7:ef:6b:4c:a9:54:b5:55:eb:b1:01:e1:
         08:46:80:c2:48:fa:66:fa:f7:66:1c:69:10:ee:c1:69:47:2c:
         9a:52:cf:28:87:4f:37:3a:6d:dd:16:17:4c:4d:06:ad:77:32:
         c1:b1:4e:bb:9d:6b:fb:f5:8d:07:b3:f5:c5:46:a9:fd:b2:fe:
         c6:f1:ed:1d:67:44:70:0d:09:97:9f:66:b9:bb:21:51:62:55:
         98:20:0b:78:85:5c:47:56:2d:c9:1b:32:ed:0e:80:28:4f:87:
         0e:43:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:03 2026 by rpki-client