Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32342d3234203d3e20313331363431.roa
File:                     3130332e3133362e36302e302f32342d3234203d3e20313331363431.roa (raw, json)
Hash identifier:          R18TzZ1IDWFwbtB1qOREfkakmZjht8pAzFUb/1BBUak=
Subject key identifier:   04:EC:11:AB:43:7F:B5:88:34:4D:7F:E9:A6:84:16:D6:3E:CC:C9:C9
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       51922AE340F1E469B831A0ED6FF6EC73DB4269
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32342d3234203d3e20313331363431.roa
Signing time:             Mon 11 May 2026 17:07:12 +0000
ROA not before:           Mon 11 May 2026 17:02:12 +0000
ROA not after:            Mon 10 May 2027 17:07:12 +0000
asID:                     131641
IP address blocks:        103.136.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:92:2a:e3:40:f1:e4:69:b8:31:a0:ed:6f:f6:ec:73:db:42:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: May 11 17:02:12 2026 GMT
            Not After : May 10 17:07:12 2027 GMT
        Subject: CN=04EC11AB437FB588344D7FE9A68416D63ECCC9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:95:6a:e0:51:e7:31:85:47:d1:e1:e2:5d:
                    70:f6:d3:02:f6:3f:69:3b:a2:2b:26:a6:d0:bc:eb:
                    fa:9f:53:03:a8:6f:5c:fe:72:5f:41:de:8f:17:8b:
                    c7:78:3c:63:1f:84:68:5f:60:48:fe:6e:41:cd:80:
                    4c:a6:9e:60:03:6e:eb:00:41:36:1a:ea:5d:83:81:
                    21:09:2f:21:3a:a2:7d:0d:08:fc:ab:3e:89:d9:f0:
                    27:e5:80:48:2d:28:b1:9a:13:45:05:82:4a:db:66:
                    db:bb:e8:18:92:ab:0a:16:64:9c:56:bd:ec:d3:32:
                    68:83:b5:a9:b5:bf:7c:c5:c7:40:dc:83:a1:73:d4:
                    5e:03:1c:1d:b6:ff:af:14:bf:a9:d3:b6:8f:91:61:
                    54:62:ec:d1:24:6f:47:de:41:93:2a:18:42:33:30:
                    dc:dd:11:65:eb:64:34:84:f0:16:cc:2a:e5:1e:59:
                    90:3e:6e:3f:11:9b:0c:14:f5:23:6d:5c:82:d7:8f:
                    1e:bc:48:15:7e:c6:26:0b:08:41:6d:5b:21:ed:f2:
                    7c:93:ff:0e:dc:b0:01:05:9b:c9:0b:5b:52:37:15:
                    89:b9:c2:07:4d:8d:06:da:fb:d0:39:63:0b:f2:c8:
                    d4:7a:a5:fb:3d:bd:4f:6d:2d:69:4b:2c:6c:0d:30:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EC:11:AB:43:7F:B5:88:34:4D:7F:E9:A6:84:16:D6:3E:CC:C9:C9
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32342d3234203d3e20313331363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:f8:17:1c:46:7d:dd:49:7c:da:2d:cb:63:9a:48:01:df:6f:
         af:92:4e:ff:e4:55:47:6b:3d:7f:b2:9d:03:60:d8:93:9b:72:
         5f:5c:57:ab:5c:05:57:13:23:5b:aa:98:09:2d:d9:a7:6d:c2:
         89:1c:c0:84:48:c6:cb:73:80:c3:85:f1:c7:94:77:ce:70:1a:
         42:9d:4d:0a:ec:4b:5e:23:b8:0b:b9:b9:98:e6:7e:f2:fc:57:
         4c:69:6c:3e:2c:0c:f6:c8:16:af:89:6b:f5:4b:98:a7:18:eb:
         fb:2f:f8:8a:41:a0:33:2b:b9:09:87:cc:4d:4d:63:8f:98:ef:
         81:dc:69:82:1a:0e:23:e0:3f:af:6f:32:a7:04:28:9d:b8:b8:
         a1:88:8c:a1:b7:60:17:19:fe:e7:44:b2:89:9a:ac:8d:db:7e:
         df:86:50:fd:17:36:d9:5d:2e:61:7d:5e:f4:23:7d:e2:ad:7c:
         cf:f9:29:47:6a:68:f0:ad:c7:10:0a:62:50:6e:46:fb:38:47:
         8f:65:af:cb:29:c6:16:cc:1b:a0:ef:f5:7c:cf:74:cc:a1:0c:
         0f:69:b3:85:68:e0:2d:57:dc:b9:70:5d:10:c8:8e:d2:76:28:
         98:73:d5:33:1e:3f:7c:6d:f8:b6:f4:0e:4b:90:ba:f2:1a:92:
         b6:45:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:01 2026 by rpki-client