Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36312e302f32342d3234203d3e203234313638.roa
File:                     3130332e3133362e36312e302f32342d3234203d3e203234313638.roa (raw, json)
Hash identifier:          y3Xt2kjac8EpAGOfATQn6d93w3ExM+twBbRTIwfgi1c=
Subject key identifier:   09:C2:31:9E:83:AE:CE:DA:EF:25:33:C2:FB:15:04:DD:D7:1D:A9:D0
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       7446033CBC7A6612435BB4CE31A7F174050C49AB
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36312e302f32342d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 16:45:51 +0000
ROA not before:           Mon 11 May 2026 16:40:51 +0000
ROA not after:            Mon 10 May 2027 16:45:51 +0000
asID:                     24168
IP address blocks:        103.136.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:03:3c:bc:7a:66:12:43:5b:b4:ce:31:a7:f1:74:05:0c:49:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: May 11 16:40:51 2026 GMT
            Not After : May 10 16:45:51 2027 GMT
        Subject: CN=09C2319E83AECEDAEF2533C2FB1504DDD71DA9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:dd:ff:67:95:d0:6c:af:93:9d:f5:b3:7b:
                    30:e9:04:09:67:2d:d2:e7:45:23:07:d3:0b:6e:a6:
                    ad:32:8d:f8:b8:38:1a:4b:34:70:f3:68:3c:2c:dc:
                    1a:4b:0d:2f:be:d5:30:39:db:4f:70:aa:56:78:b1:
                    70:74:bf:c8:c0:ff:98:2a:32:79:89:9f:26:ca:62:
                    c1:28:8a:9a:a9:5d:21:8b:9f:3a:93:e4:5b:a6:55:
                    03:32:f3:97:54:c8:31:a9:c5:dc:d8:53:f7:16:a9:
                    53:fe:b2:bf:7f:ae:99:5f:28:58:b4:96:7a:cb:f8:
                    b8:13:79:e2:9b:f3:5f:86:12:1d:a1:cb:bb:27:13:
                    f6:47:61:56:a2:a3:06:08:ba:3b:53:7a:5f:26:38:
                    5c:38:ab:9c:26:fc:f0:a4:71:28:49:91:d2:e0:52:
                    38:78:c1:05:79:19:6c:c6:7e:46:cf:b6:c3:bc:57:
                    92:01:12:90:3d:ff:fe:6b:67:98:16:82:da:56:d3:
                    32:18:6f:b0:c8:47:1d:d7:53:63:22:b0:9f:e7:57:
                    a9:fc:60:fe:f5:22:a8:ed:91:b6:bf:0f:91:22:0f:
                    64:b9:fe:34:1f:ea:26:0a:71:5c:54:ca:24:df:c9:
                    42:19:61:21:13:f2:45:e8:0e:b0:37:56:03:71:dd:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C2:31:9E:83:AE:CE:DA:EF:25:33:C2:FB:15:04:DD:D7:1D:A9:D0
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36312e302f32342d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:69:d7:7d:39:ae:08:6c:1b:62:61:59:dd:df:72:08:d5:36:
         0f:7f:fc:54:f6:58:95:f8:fb:39:0d:cf:eb:76:77:67:dc:3f:
         40:1d:c6:d7:7c:f2:cd:3c:fe:bb:31:87:c6:ea:a3:12:68:bb:
         eb:81:12:10:e9:0b:f5:0d:32:bb:9f:db:e4:66:16:2d:d4:1f:
         1e:9d:9f:ba:be:e5:61:bf:22:4e:62:92:41:0c:b7:6d:5f:6b:
         2b:77:03:01:d2:c8:c6:6e:4b:e3:ca:43:08:4c:dd:49:c9:f9:
         eb:ca:d8:41:47:87:35:7d:dc:3a:28:c9:92:c3:61:8f:b6:b9:
         0c:09:64:61:ba:cd:1d:67:31:3f:52:57:0b:d0:96:26:c1:03:
         f8:31:0c:a5:8b:d5:1d:b3:bc:44:72:cd:52:1e:80:80:c9:da:
         75:21:bf:8b:0a:ce:25:de:5e:4e:76:19:0f:73:b2:5e:07:30:
         f3:38:fe:31:77:ca:bc:30:f5:09:46:ba:dd:9d:40:93:33:6f:
         04:5c:a8:2d:e8:2f:42:4b:42:76:b2:f7:db:63:ad:eb:b2:2b:
         f8:1d:f7:89:1d:e1:a3:a9:c6:60:3d:a5:a4:99:a7:82:5e:fa:
         15:1d:a6:57:43:b7:76:9a:9f:31:84:7e:34:a6:17:7f:45:62:
         3a:4c:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:00 2026 by rpki-client