Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3234203d3e203138343234.roa
File:                     3130332e3133362e36302e302f32332d3234203d3e203138343234.roa (raw, json)
Hash identifier:          S921sHM83532MrUOCNr9PKJiFCun7WT0K6Mp3+xNGBE=
Subject key identifier:   28:D5:4A:02:D3:67:FE:F9:4B:6C:BD:58:76:49:8C:54:46:BC:CF:A8
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       0255ECE871260708897527E32F6D1031D396802A
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:11:45 +0000
ROA not before:           Mon 11 May 2026 17:06:45 +0000
ROA not after:            Mon 10 May 2027 17:11:45 +0000
asID:                     18424
IP address blocks:        103.136.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:55:ec:e8:71:26:07:08:89:75:27:e3:2f:6d:10:31:d3:96:80:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: May 11 17:06:45 2026 GMT
            Not After : May 10 17:11:45 2027 GMT
        Subject: CN=28D54A02D367FEF94B6CBD5876498C5446BCCFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:d7:25:d2:67:ab:69:6a:33:25:2f:06:5e:
                    5b:d7:e3:00:8f:67:3e:fe:2d:f7:6b:f1:07:8c:74:
                    22:d8:8d:66:cf:63:91:ff:b9:4e:6e:e9:4b:3e:4b:
                    c7:c8:ba:53:7f:0e:64:7a:c6:cd:7c:58:08:aa:22:
                    3a:85:1d:9b:dc:ae:b2:30:d1:e0:e3:d4:9e:51:b6:
                    0f:fc:2e:c2:21:b6:67:d1:b9:46:a6:5d:ad:1a:7e:
                    7b:82:bf:ca:af:c1:b0:d2:58:3c:a7:eb:c9:54:c7:
                    c8:87:cb:1c:d6:a9:10:66:49:d2:6b:38:a7:6d:4d:
                    e3:fb:f9:1c:d2:4b:b5:70:30:96:04:36:1a:ac:20:
                    67:2e:60:f7:06:93:bb:c0:0a:fc:e2:e3:cd:b8:49:
                    9c:24:7d:3f:d2:0f:8e:d4:56:4c:03:59:f0:fb:a0:
                    07:43:e6:a2:14:92:fd:6b:3b:34:7d:32:ee:07:0d:
                    ac:54:74:3d:13:8d:d7:d9:f1:57:d1:dd:47:fd:8e:
                    2d:f2:1f:1c:1f:56:14:84:81:09:a1:95:d5:27:6f:
                    b2:b1:64:b8:4e:cb:df:7f:c8:1b:0a:9c:be:df:13:
                    8d:8f:df:a0:e8:54:23:53:4f:a1:61:9a:3d:a8:b7:
                    89:8b:18:ad:0f:62:2c:57:d6:10:05:f5:87:2b:6e:
                    89:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D5:4A:02:D3:67:FE:F9:4B:6C:BD:58:76:49:8C:54:46:BC:CF:A8
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:e3:40:90:4d:2b:6b:7a:f2:31:a8:96:bf:81:a8:be:54:5f:
         5c:92:e7:4c:90:d0:58:89:d9:2e:75:70:27:b0:0f:a2:b3:73:
         e1:15:f0:e4:f1:7e:f1:a0:75:7e:1a:0c:68:93:29:a6:2b:46:
         d5:7c:6c:c2:61:a0:e3:d9:a0:6e:66:93:b4:d5:c3:e9:86:5b:
         68:3c:23:8d:23:b6:84:66:09:ad:f8:2d:39:1b:d8:b6:04:40:
         98:d6:4e:5f:85:fb:9d:ef:8a:1d:95:ec:15:ea:35:22:f0:6c:
         fb:8c:b9:bb:d2:63:b3:f7:a1:03:1a:bc:56:04:5f:8e:cc:68:
         16:c2:4d:50:d9:46:55:59:24:d4:2e:89:74:7c:6e:17:99:b6:
         76:48:07:e0:d7:cd:59:c8:18:c6:4b:26:24:99:4f:f9:1a:b4:
         38:dd:0b:f4:ec:36:50:02:fc:81:14:5c:48:bb:74:1a:81:c8:
         ea:c1:b4:00:8a:d6:f2:0b:15:25:cb:e3:d2:b2:6d:2c:4c:d1:
         fe:36:f6:6d:ae:f6:6f:5a:8c:b8:f2:e6:33:ae:8a:aa:00:80:
         22:4e:a9:0c:9f:ce:c7:de:22:3c:43:22:83:f6:8a:88:a0:c1:
         e7:7b:da:95:e0:6f:17:52:6b:0b:21:81:97:c2:c6:f3:05:d9:
         1b:6a:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:03 2026 by rpki-client