Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa
File:                     3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa (raw, json)
Hash identifier:          JMHd5OxzysIcZM3XC770NhHz5R1MfZGIE6Db7xvSS4g=
Subject key identifier:   C5:EE:6C:98:3F:69:1D:29:89:1B:25:F1:90:20:7E:3A:AB:C6:A7:B7
Certificate issuer:       /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial:       0EEE9DCCE315EDFA9A260AFB9E408578FB73ECEF
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa
Signing time:             Mon 11 May 2026 17:57:41 +0000
ROA not before:           Mon 11 May 2026 17:52:41 +0000
ROA not after:            Mon 10 May 2027 17:57:41 +0000
asID:                     131151
IP address blocks:        103.158.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
                          rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ee:9d:cc:e3:15:ed:fa:9a:26:0a:fb:9e:40:85:78:fb:73:ec:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
        Validity
            Not Before: May 11 17:52:41 2026 GMT
            Not After : May 10 17:57:41 2027 GMT
        Subject: CN=C5EE6C983F691D29891B25F190207E3AABC6A7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:43:45:ed:ae:c4:a6:7b:9b:5e:7a:1c:ed:44:
                    43:62:ef:73:fa:0d:8c:ba:33:3a:3f:a4:ce:c0:50:
                    c5:5e:37:2c:d6:97:55:17:0d:93:48:4b:94:5a:d8:
                    63:fd:7c:14:9e:76:f6:96:50:d0:24:52:b6:88:d8:
                    ec:df:1d:9e:c5:e4:1c:44:55:72:4c:80:4a:a4:7d:
                    6b:74:07:81:a2:54:b0:ac:27:f3:b9:1c:0e:c8:31:
                    06:c7:4e:d8:44:d1:ee:9c:f1:cd:20:f4:03:98:9f:
                    ad:23:6e:22:49:b6:c2:24:34:d4:e7:fa:ee:90:a1:
                    1d:ec:f9:05:a5:65:36:4e:bb:48:6f:ab:9c:65:4e:
                    d7:0a:c6:2b:3a:1a:cf:dd:4b:e8:85:59:b5:0b:4b:
                    99:49:07:06:50:b8:20:cc:83:89:fd:05:99:68:1d:
                    fb:47:81:18:92:54:b1:a9:cd:50:e8:d6:ba:b8:4c:
                    56:94:0b:09:b0:3b:6a:0a:16:9d:02:33:1f:5e:93:
                    66:80:00:cd:af:04:46:de:54:20:92:d5:92:de:90:
                    ee:c5:c1:8b:dd:f7:cb:47:54:0f:41:13:87:68:3e:
                    3d:ab:1d:5c:7d:f8:ea:23:ea:33:de:1b:cd:ca:23:
                    e5:9a:23:99:20:50:ad:46:a3:2a:f0:00:8b:f2:14:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EE:6C:98:3F:69:1D:29:89:1B:25:F1:90:20:7E:3A:AB:C6:A7:B7
            X509v3 Authority Key Identifier:
                keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3135382e3232382e302f32332d3234203d3e20313331313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:52:0d:e5:e0:a5:3c:b0:1c:88:f0:71:25:f0:5a:25:5d:ed:
         7b:de:db:f3:53:4c:4d:d7:94:72:69:02:73:1e:b2:3d:69:94:
         82:83:0d:fc:d3:70:ce:11:0f:52:e9:16:94:7b:87:60:e9:2b:
         5e:cc:4e:05:93:b0:7e:fc:fb:a9:f5:fd:99:f8:06:15:2d:cf:
         11:54:ce:30:0e:70:57:06:50:22:6c:e5:b4:ec:1b:1a:25:a3:
         a3:02:21:07:48:dc:80:3a:51:dc:62:97:e4:12:53:65:37:2e:
         70:5e:a2:82:30:cb:c7:22:26:60:ea:02:9c:f7:4f:8c:99:df:
         a2:66:0f:e5:38:3f:58:2d:42:e4:9e:f0:57:b6:35:52:1f:d6:
         39:f8:c6:4a:00:09:96:33:21:db:3b:c3:d2:03:ec:37:67:ca:
         04:a1:a6:9e:cc:e2:96:c7:4b:12:66:37:b9:a7:fe:c0:10:5e:
         2b:3e:e6:ea:1e:09:f4:4f:c6:f6:eb:e1:c4:ca:d0:63:62:2b:
         2f:07:2c:be:51:18:6f:1d:77:30:b6:58:85:f2:ec:55:bb:d3:
         93:4d:e6:d5:ac:7f:2d:57:c6:f3:99:f5:36:37:a1:f8:37:0d:
         02:82:ee:6d:df:c9:cd:02:56:6b:04:76:1b:df:58:4d:a9:a9:
         75:26:2a:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:47:47 2026 by rpki-client