Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa
File:                     3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa (raw, json)
Hash identifier:          t6zLUrqLxN1841JGifIZEELL55tSwuOCwFhWjmskA2M=
Subject key identifier:   93:5F:3F:20:58:1C:E4:33:B3:A0:C8:96:A0:EC:8B:F8:4B:70:19:99
Certificate issuer:       /CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
Certificate serial:       43410594326918A9A92B44D20865901ED60459CC
Authority key identifier: 96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa
Signing time:             Mon 11 May 2026 17:57:10 +0000
ROA not before:           Mon 11 May 2026 17:52:10 +0000
ROA not after:            Mon 10 May 2027 17:57:10 +0000
asID:                     133948
IP address blocks:        103.130.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl
                          rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:41:05:94:32:69:18:a9:a9:2b:44:d2:08:65:90:1e:d6:04:59:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96EC32418F5DB7D272132F4F615EEE14EBFCC789
        Validity
            Not Before: May 11 17:52:10 2026 GMT
            Not After : May 10 17:57:10 2027 GMT
        Subject: CN=935F3F20581CE433B3A0C896A0EC8BF84B701999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:96:0c:eb:30:37:80:8a:11:ae:31:f3:80:
                    c4:c8:76:29:10:c2:71:48:ae:b1:00:88:e7:37:7d:
                    4c:8a:00:9a:7d:f5:ec:8c:67:1c:6d:70:55:91:37:
                    65:73:79:9c:4b:12:e7:46:8d:1b:43:c5:e1:da:ea:
                    51:7b:b1:ac:2d:ee:90:a7:8a:7c:92:25:26:aa:3c:
                    e3:20:1a:46:25:a8:1c:98:14:92:0b:5c:ae:51:94:
                    b4:bc:f4:93:ec:4f:97:79:2b:16:a1:2d:8f:95:ce:
                    a2:23:81:4f:ec:21:ca:4c:4e:46:80:4a:d4:79:fb:
                    32:69:af:b1:de:13:56:08:a7:81:a5:51:1f:0f:fc:
                    1a:e9:e8:e3:8e:83:ae:52:67:24:3a:d1:f4:6a:30:
                    85:b9:af:1c:92:6a:64:73:57:28:d0:31:4d:4b:54:
                    d4:32:ba:03:45:52:2f:00:0d:8d:7e:c8:31:0b:10:
                    a8:ae:44:92:af:3e:5d:f1:f2:c2:86:fc:d3:c5:00:
                    11:43:0d:64:bd:66:c1:71:38:7e:05:fe:84:56:d9:
                    4a:fb:78:87:ea:f6:38:a4:fe:32:e8:2c:3a:4b:e8:
                    59:f4:8c:4d:26:8f:76:c1:1f:7e:dd:48:e9:93:48:
                    fc:54:e6:d1:05:3c:7a:dc:f8:9e:3c:8a:ef:dc:ee:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:3F:20:58:1C:E4:33:B3:A0:C8:96:A0:EC:8B:F8:4B:70:19:99
            X509v3 Authority Key Identifier:
                keyid:96:EC:32:41:8F:5D:B7:D2:72:13:2F:4F:61:5E:EE:14:EB:FC:C7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CTII/0/96EC32418F5DB7D272132F4F615EEE14EBFCC789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/96EC32418F5DB7D272132F4F615EEE14EBFCC789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CTII/0/3130332e3133302e3235302e302f32342d3234203d3e20313333393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:9d:5c:a4:e2:c7:2d:95:c0:fa:bd:cd:a7:ae:28:91:31:
         81:2c:7d:80:38:07:f6:70:a9:3d:1c:ae:2f:37:6c:02:59:82:
         7a:12:3c:2d:e1:03:a0:b3:3c:a3:6e:28:e7:d6:6b:b9:23:83:
         db:ed:d8:49:83:d1:ed:a4:9f:64:d5:da:2c:a4:a0:70:33:71:
         d4:a8:71:03:63:59:02:4a:54:d9:6a:11:a4:1b:02:7b:19:5b:
         11:fe:86:62:3f:c0:0e:0e:85:3d:c5:f0:f0:a1:bd:ae:f8:08:
         33:45:8d:dd:19:e4:58:a0:ea:d4:d6:84:c0:7f:25:8b:17:67:
         f2:b0:06:56:59:80:10:2d:ed:28:58:4e:6f:f8:d0:19:50:51:
         5b:47:0b:61:03:13:a2:f1:43:38:99:6d:4f:a1:a9:fc:5f:5a:
         96:34:de:e2:fc:79:76:64:a0:43:25:87:63:ea:ff:7e:38:81:
         b6:a5:2b:78:46:6d:d0:10:67:87:f7:9b:4b:bb:78:35:0f:d6:
         ee:8d:83:26:76:f1:88:1b:cb:12:06:2f:62:6e:95:94:dc:8b:
         13:70:b7:c0:3d:f1:5a:92:1c:ea:0a:01:fa:8d:5f:dd:9f:f6:
         51:ad:f3:50:f4:90:42:30:e8:10:8b:3f:ac:3a:d1:5b:4a:f1:
         3e:a4:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:46 2026 by rpki-client