Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa
File:                     3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa (raw, json)
Hash identifier:          pqABpk3IMEQeCPJ1YCuMzE9VdO7tiwLb3Csx2ef6igs=
Subject key identifier:   1C:57:D7:84:92:61:50:B9:F4:72:96:1A:0F:FA:18:32:DA:B5:8C:5D
Certificate issuer:       /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial:       23A945D4FB8AE44E514777629F396118C95CE105
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa
Signing time:             Tue 14 Jul 2026 03:03:48 +0000
ROA not before:           Tue 14 Jul 2026 02:58:48 +0000
ROA not after:            Tue 13 Jul 2027 03:03:48 +0000
asID:                     203013
IP address blocks:        103.130.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
                          rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a9:45:d4:fb:8a:e4:4e:51:47:77:62:9f:39:61:18:c9:5c:e1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
        Validity
            Not Before: Jul 14 02:58:48 2026 GMT
            Not After : Jul 13 03:03:48 2027 GMT
        Subject: CN=1C57D784926150B9F472961A0FFA1832DAB58C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:07:3a:ad:2c:3f:bc:73:8b:75:e5:79:34:
                    db:6f:27:7d:9f:24:2d:57:69:d6:69:c0:38:5b:df:
                    bd:73:dd:32:8e:a5:fe:da:80:56:71:94:a9:fa:d0:
                    01:87:5b:82:1e:7d:78:4f:81:ae:7b:8b:11:0a:aa:
                    9f:9a:ff:8f:34:81:c9:14:32:2d:f9:22:3e:98:8e:
                    65:e0:9c:1b:6f:8d:78:f3:32:8c:c4:38:01:5e:4e:
                    d3:59:99:1b:13:a0:75:b7:f5:f4:9d:49:ff:1d:22:
                    ff:d3:3e:da:fa:90:70:f9:12:c3:e3:89:a6:31:8a:
                    85:67:37:44:bd:6d:33:7d:be:4e:fe:9a:36:c3:c9:
                    5d:bb:93:1e:93:ea:08:ea:f2:8a:5b:16:1c:8a:35:
                    06:b5:83:5e:48:61:bd:85:50:da:e3:10:c4:b8:fb:
                    6f:37:ea:7d:10:f6:be:2c:0b:31:eb:a5:2e:63:73:
                    2a:f2:b8:fa:a6:0c:31:bc:c4:5d:79:0d:51:5c:23:
                    43:70:b7:8c:3e:3f:f8:62:d2:be:2d:04:ca:67:b5:
                    79:8b:1b:b3:c8:18:66:fd:32:7d:c3:32:23:b6:a0:
                    09:fe:c4:74:e5:58:ec:a6:ff:f0:aa:d9:01:ae:5a:
                    89:a3:12:bc:c1:65:e4:ff:e8:ed:8f:1e:c7:0d:eb:
                    5c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:57:D7:84:92:61:50:B9:F4:72:96:1A:0F:FA:18:32:DA:B5:8C:5D
            X509v3 Authority Key Identifier:
                keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3234392e302f32342d3234203d3e20323033303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:e5:74:90:ff:5e:62:d8:2c:69:e1:a7:4e:d3:e4:06:5b:a3:
         bc:ac:3d:08:7e:5e:6d:3b:9a:8c:74:9a:e4:a2:ff:88:7b:20:
         72:89:91:2e:de:42:0d:13:fe:eb:98:95:48:55:ec:2b:3c:7c:
         f6:77:f9:f6:5b:56:8f:6f:19:3c:d7:53:99:89:27:a9:4c:12:
         f1:18:d5:de:14:95:22:b2:f6:f6:74:fa:36:1c:d1:b0:31:80:
         96:61:8a:58:1d:06:c5:97:ca:72:ca:0d:b5:3c:eb:28:c0:b1:
         70:12:3c:dc:6a:16:76:a3:64:5a:1d:a0:b1:f4:9c:0c:3d:7c:
         cb:c0:80:a2:63:40:d5:b9:84:3e:37:8d:c0:dc:8a:0b:bf:96:
         21:cf:02:1f:48:ea:7e:eb:25:0b:9c:cd:63:ff:6a:ce:c9:1c:
         11:dc:40:6f:a9:44:1d:9e:c5:0c:a4:41:b6:84:04:b2:0e:46:
         6b:12:f9:ff:04:7e:a4:8e:04:8b:8f:8b:48:72:ab:12:83:26:
         18:cf:15:1e:0c:ac:35:38:85:b3:76:6c:53:0e:bf:a3:26:1d:
         33:b9:0f:60:00:92:82:79:93:fb:26:7d:e3:53:89:18:f9:cf:
         c5:27:2e:fe:24:dc:2f:a1:6e:f1:18:8f:0f:11:35:d0:a5:ad:
         28:8d:0a:8f
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUI6lF1PuK5E5RR3dinzlhGMlc4QUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVFMTRF
QkZDQzc4OTAeFw0yNjA3MTQwMjU4NDhaFw0yNzA3MTMwMzAzNDhaMDMxMTAvBgNV
BAMTKDFDNTdENzg0OTI2MTUwQjlGNDcyOTYxQTBGRkExODMyREFCNThDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVQc6rSw/vHOLdeV5NNtvJ32f
JC1XadZpwDhb371z3TKOpf7agFZxlKn60AGHW4IefXhPga57ixEKqp+a/480gckU
Mi35Ij6YjmXgnBtvjXjzMozEOAFeTtNZmRsToHW39fSdSf8dIv/TPtr6kHD5EsPj
iaYxioVnN0S9bTN9vk7+mjbDyV27kx6T6gjq8opbFhyKNQa1g15IYb2FUNrjEMS4
+2836n0Q9r4sCzHrpS5jcyryuPqmDDG8xF15DVFcI0Nwt4w+P/hi0r4tBMpntXmL
G7PIGGb9Mn3DMiO2oAn+xHTlWOym//Cq2QGuWomjErzBZeT/6O2PHscN61wlAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUHFfXhJJhULn0cpYaD/oYMtq1jF0wHwYDVR0j
BBgwFoAUluwyQY9dt9JyEy9PYV7uFOv8x4kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1RJSS8w
Lzk2RUMzMjQxOEY1REI3RDI3MjEzMkY0RjYxNUVFRTE0RUJGQ0M3ODkuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOTZFQzMyNDE4RjVEQjdEMjcyMTMyRjRGNjE1RUVF
MTRFQkZDQzc4OS5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NUSUkvMC8zMTMwMzMyZTMxMzMzMDJl
MzIzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMzMzAzMTMzLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ4L5MA0GCSqGSIb3DQEBCwUAA4IBAQDD5XSQ/15i2Cxp4adO0+QGW6O8
rD0Ifl5tO5qMdJrkov+IeyByiZEu3kINE/7rmJVIVewrPHz2d/n2W1aPbxk811OZ
iSepTBLxGNXeFJUisvb2dPo2HNGwMYCWYYpYHQbFl8pyyg21POsowLFwEjzcahZ2
o2RaHaCx9JwMPXzLwICiY0DVuYQ+N43A3IoLv5YhzwIfSOp+6yULnM1j/2rOyRwR
3EBvqUQdnsUMpEG2hASyDkZrEvn/BH6kjgSLj4tIcqsSgyYYzxUeDKw1OIWzdmxT
Dr+jJh0zuQ9gAJKCeZP7Jn3jU4kY+c/FJy7+JNwvoW7xGI8PETXQpa0ojQqP
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:52 2026 by rpki-client