Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCC1223342/0/3130332e3138302e31382e302f32332d3234203d3e203633383933.roa
File:                     3130332e3138302e31382e302f32332d3234203d3e203633383933.roa (raw, json)
Hash identifier:          YHu6xUiyV20ecZfxOWBbvKCz1hQvQ5fZsJlGMsXnUjk=
Subject key identifier:   DD:FF:23:8B:3C:49:B6:44:7F:5A:A6:9C:AE:6B:C2:50:BA:5C:A3:95
Certificate issuer:       /CN=67919719E801E94CCA89D7569D37B67D252A261F
Certificate serial:       4281A7C2B77D1A05E2DA2E616038A347C2EE7FAB
Authority key identifier: 67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCC1223342/0/3130332e3138302e31382e302f32332d3234203d3e203633383933.roa
Signing time:             Mon 11 May 2026 17:15:42 +0000
ROA not before:           Mon 11 May 2026 17:10:42 +0000
ROA not after:            Mon 10 May 2027 17:15:42 +0000
asID:                     63893
IP address blocks:        103.180.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl
                          rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:81:a7:c2:b7:7d:1a:05:e2:da:2e:61:60:38:a3:47:c2:ee:7f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67919719E801E94CCA89D7569D37B67D252A261F
        Validity
            Not Before: May 11 17:10:42 2026 GMT
            Not After : May 10 17:15:42 2027 GMT
        Subject: CN=DDFF238B3C49B6447F5AA69CAE6BC250BA5CA395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:25:6c:7d:95:8e:9b:ff:f8:5b:11:b1:85:c3:
                    51:84:8b:84:1f:0c:58:ef:f0:e8:0c:39:ed:9b:21:
                    de:3d:7d:de:da:56:95:d5:b0:ba:3c:26:09:0b:c9:
                    13:4a:cf:81:64:16:49:ae:5f:41:87:e6:8b:9c:b9:
                    c1:b5:c5:10:8a:9b:e2:f2:3d:0d:41:9e:2a:82:61:
                    a8:87:5c:bd:1b:d3:56:e9:60:1c:3e:7a:8d:31:54:
                    51:39:dc:18:a2:c6:a3:77:a2:cc:b2:a3:ec:df:19:
                    3a:03:1f:3a:7f:66:94:15:e5:8b:27:6f:b6:40:c3:
                    a4:42:53:97:ee:b7:da:88:fd:fc:f3:83:de:85:49:
                    f3:f1:9f:25:eb:a2:ad:3d:57:4f:2f:d6:f7:2a:f6:
                    6f:5a:a1:a3:d6:86:49:11:ca:9d:d6:c1:46:f5:1a:
                    07:ce:3b:ce:f1:8a:52:03:cc:c4:e1:e2:4f:db:15:
                    41:62:bb:ed:f0:c2:1b:0f:71:59:f6:86:69:c7:2a:
                    09:a5:41:d8:95:8f:51:fd:ab:f7:fa:d1:dc:5b:f1:
                    a4:e7:4a:bd:d6:b3:85:8e:fa:f8:21:31:c4:87:b7:
                    4c:c8:be:c3:d0:8e:f1:a4:a0:e4:b3:37:08:9b:16:
                    61:df:5d:63:0b:7b:53:75:d7:6a:99:77:a3:df:fb:
                    fc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FF:23:8B:3C:49:B6:44:7F:5A:A6:9C:AE:6B:C2:50:BA:5C:A3:95
            X509v3 Authority Key Identifier:
                keyid:67:91:97:19:E8:01:E9:4C:CA:89:D7:56:9D:37:B6:7D:25:2A:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/67919719E801E94CCA89D7569D37B67D252A261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/67919719E801E94CCA89D7569D37B67D252A261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCC1223342/0/3130332e3138302e31382e302f32332d3234203d3e203633383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:24:db:ca:8e:94:e7:e4:1a:9c:ad:ec:6c:9e:a8:c4:f5:36:
         86:c2:18:e9:de:3b:72:71:ca:8a:9a:c5:ad:81:c2:5d:13:05:
         42:f2:ba:aa:c5:c0:c6:9c:25:1f:84:9a:b6:b8:2b:97:ea:06:
         35:cb:4c:aa:69:30:a3:b6:6f:64:4c:9b:05:0d:bd:a3:70:02:
         a8:f8:3a:63:cd:e3:41:ce:d4:3e:12:83:20:53:a2:48:e5:e7:
         d6:4f:ed:5c:84:6b:be:10:2c:7e:38:3b:41:13:a9:b8:2e:e4:
         a9:32:24:5e:96:5a:85:c5:d2:7c:ec:e6:7f:ee:43:09:f7:b8:
         3b:08:fc:0b:92:d7:82:68:4f:4f:b0:2a:11:04:a7:53:40:81:
         86:b4:bf:c7:24:0f:84:80:ab:c8:8b:d5:fb:5d:53:37:e5:fe:
         5f:65:ba:bd:9d:75:10:58:04:53:28:4b:4a:df:f2:68:8b:4b:
         25:bc:5e:f1:b0:2e:5f:c4:4f:4f:4d:19:32:fc:49:22:a1:e1:
         11:99:4e:17:9b:3d:64:b2:05:67:f5:97:83:2c:d4:40:3a:e3:
         eb:ba:32:d2:b8:3f:d7:25:5a:58:0f:69:44:7c:29:2e:ce:ce:
         57:4b:cd:33:5a:1b:b8:fc:ae:ad:3f:4a:d2:17:4b:76:75:51:
         06:97:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:36 2026 by rpki-client