Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa
File:                     3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (raw, json)
Hash identifier:          vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=
Subject key identifier:   7B:81:DC:41:FD:24:CD:AB:C3:9B:19:ED:EE:3A:B6:33:9D:15:B0:42
Certificate issuer:       /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial:       7BD3785E36DD44DB7757DFA82261BB921F9465AA
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa
Signing time:             Mon 11 May 2026 17:18:19 +0000
ROA not before:           Mon 11 May 2026 17:13:19 +0000
ROA not after:            Mon 10 May 2027 17:18:19 +0000
asID:                     38136
IP address blocks:        103.160.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
                          rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:24:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d3:78:5e:36:dd:44:db:77:57:df:a8:22:61:bb:92:1f:94:65:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
        Validity
            Not Before: May 11 17:13:19 2026 GMT
            Not After : May 10 17:18:19 2027 GMT
        Subject: CN=7B81DC41FD24CDABC39B19EDEE3AB6339D15B042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:08:99:db:65:db:06:f2:f8:14:15:bb:aa:
                    0a:b3:6d:67:a0:c5:fc:e3:e0:ef:f3:08:61:c8:3a:
                    a5:53:dc:d4:d8:f1:55:15:80:75:49:43:57:eb:58:
                    6d:d5:22:cd:3a:0f:a4:65:c2:87:2f:a4:82:21:3f:
                    5c:1e:df:46:3b:42:0e:60:86:33:81:50:ed:2f:a6:
                    40:f5:87:7d:83:28:67:fb:17:09:6c:7f:e5:01:9a:
                    98:2b:55:e1:ec:5a:a0:67:ac:e1:4c:54:ec:34:a3:
                    d5:5a:c2:28:03:01:fc:45:b1:46:cf:04:d4:4e:e9:
                    1c:96:21:84:b8:89:64:5e:7d:a0:d8:92:5c:33:b0:
                    42:98:72:58:ec:83:fa:7d:0d:d7:ee:7b:64:47:99:
                    ab:7f:92:42:4e:dd:27:e0:31:13:56:c2:12:4e:68:
                    28:88:ab:cf:c4:94:40:ae:b9:e0:45:c0:13:df:f3:
                    10:a4:4f:ef:19:77:84:39:f0:9b:4e:0d:83:d5:41:
                    54:8e:31:b3:cb:09:a4:fd:0f:32:a1:3d:85:13:f9:
                    e2:d6:4f:45:9e:95:89:f1:91:a7:7d:3b:38:99:92:
                    38:c1:ad:81:54:9e:2f:c0:a6:67:09:4e:32:36:15:
                    8c:ce:cd:8b:3f:b7:f8:c9:3d:02:df:4d:c5:8c:a2:
                    87:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:DC:41:FD:24:CD:AB:C3:9B:19:ED:EE:3A:B6:33:9D:15:B0:42
            X509v3 Authority Key Identifier:
                keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:02:58:a8:4f:f2:c0:e8:cd:d8:56:d1:a1:79:97:c1:65:46:
         06:43:16:f6:43:1f:58:ae:4a:73:b9:60:2f:dd:d1:cd:0f:ab:
         d0:6e:40:68:fd:6e:ea:e6:9e:fd:dc:28:82:f1:a9:0a:e3:0d:
         77:c2:7d:e9:a7:37:8f:9f:85:02:55:08:31:a4:35:10:ed:78:
         e6:ea:a7:a2:63:5e:4e:19:6d:66:b8:e7:c1:25:92:d0:2a:85:
         83:f9:c6:09:7b:31:2e:3b:27:80:10:f4:99:a6:ce:5b:88:e3:
         06:6a:dd:f3:27:50:fe:35:81:9f:16:03:96:50:3d:19:31:53:
         4a:3f:9b:07:6d:41:a5:41:77:90:dd:25:3f:71:a5:be:67:07:
         21:76:ab:bc:0f:4f:04:e4:85:13:d6:27:ca:27:9d:4b:63:cd:
         c4:7d:8b:00:95:1d:0e:40:cd:93:df:9a:ac:16:82:27:9f:39:
         c2:16:8d:30:76:3b:b3:8b:ff:64:a1:bb:ce:40:f4:e4:3e:4a:
         34:83:f0:a2:a4:00:9d:84:92:5f:a2:74:e2:ec:db:d8:d3:09:
         21:33:da:19:e3:de:6a:3a:63:ad:11:84:b7:e6:09:fc:78:04:
         ef:4b:2b:b0:88:84:76:71:1c:ac:cd:8c:88:5e:4e:95:4e:59:
         bd:e2:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:05 2026 by rpki-client