Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/GRONEXT/0/3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa
File:                     3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (raw, json)
Hash identifier:          totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=
Subject key identifier:   AB:C3:1A:1D:BF:4D:D2:30:B3:FC:B5:85:18:39:A3:42:C7:98:E2:EC
Certificate issuer:       /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
Certificate serial:       7448AC000E578A776795105928077D50B1453F59
Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GRONEXT/0/3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa
Signing time:             Mon 11 May 2026 17:04:57 +0000
ROA not before:           Mon 11 May 2026 16:59:57 +0000
ROA not after:            Mon 10 May 2027 17:04:57 +0000
asID:                     131667
IP address blocks:        103.146.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl
                          rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:48:ac:00:0e:57:8a:77:67:95:10:59:28:07:7d:50:b1:45:3f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
        Validity
            Not Before: May 11 16:59:57 2026 GMT
            Not After : May 10 17:04:57 2027 GMT
        Subject: CN=ABC31A1DBF4DD230B3FCB5851839A342C798E2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e8:77:bb:ce:31:9c:f6:e1:e8:4a:14:5e:7f:
                    cd:86:13:d8:ad:e8:21:db:b3:10:c4:53:71:53:52:
                    95:a2:e8:75:c6:13:02:c2:2c:15:a5:9a:23:13:e5:
                    c8:71:72:7f:61:21:9e:df:a3:1c:cd:20:05:7a:ac:
                    ef:26:b1:96:13:15:56:71:22:11:77:f9:a6:d2:cb:
                    94:36:4d:18:e3:92:1d:2a:78:f1:91:79:ac:8c:56:
                    88:e1:66:d3:4c:7d:1b:3e:7d:1a:2c:c1:39:c7:0e:
                    91:c5:b7:9e:19:c9:ae:0a:42:b7:05:43:48:06:2b:
                    4d:6a:b6:0b:98:1c:d7:5e:8d:ec:e9:72:97:49:a0:
                    55:df:74:f3:5c:f1:38:79:7d:2f:c6:15:7b:48:c8:
                    aa:f3:38:92:99:03:9f:88:d6:75:80:97:ec:e0:66:
                    9a:25:6c:3c:0e:15:f7:4c:96:52:7f:2a:56:3f:f4:
                    56:db:72:7e:16:eb:3e:85:eb:36:2d:61:83:49:16:
                    b0:d5:b2:ad:a0:85:0a:c0:4b:07:57:89:0c:6c:0a:
                    9a:56:8a:a2:77:b2:cf:ea:96:7c:c6:d7:62:61:da:
                    fc:06:c0:71:37:8f:9a:b9:1e:2d:1d:e0:de:66:93:
                    9e:06:ab:ee:ee:86:ec:ae:2d:9d:37:7b:ae:42:3a:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C3:1A:1D:BF:4D:D2:30:B3:FC:B5:85:18:39:A3:42:C7:98:E2:EC
            X509v3 Authority Key Identifier:
                keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:65:51:ae:51:47:ee:dc:5d:da:05:9c:65:4f:03:57:e6:23:
         10:62:ff:88:c4:f0:80:9d:9a:77:13:79:2c:7e:df:5b:d5:7b:
         be:4d:56:c8:ce:7d:0a:b1:95:e0:37:4c:7a:55:37:4f:9e:e9:
         3b:8c:8c:cf:dd:2c:5f:5d:39:dd:94:49:9b:f3:a9:46:2b:a0:
         2a:07:39:07:6e:2f:9c:ea:ff:eb:36:6d:98:48:8f:f9:f9:81:
         1e:8c:34:fa:30:42:f9:25:59:b1:1e:ba:07:a1:0b:cd:8a:aa:
         c0:a2:23:3e:95:50:4f:ae:c7:66:d7:24:9e:dd:88:6f:31:55:
         71:96:e7:37:a7:07:11:9b:3d:c2:85:9c:bf:6d:93:cf:9f:7e:
         5f:45:d3:a7:5c:d8:15:8e:7d:42:b8:82:7c:01:06:c1:b7:eb:
         50:a6:2a:52:6f:e4:74:f3:aa:fb:66:c4:04:07:af:85:4a:69:
         d5:ca:53:56:75:26:f2:12:34:4e:00:e5:2f:db:4e:5a:0a:c1:
         25:c3:54:39:84:a3:f2:da:b2:b0:0e:1e:79:e2:a8:5b:49:fe:
         06:4a:2c:7a:20:e1:db:d1:e0:f1:9a:5f:a0:25:c0:d7:90:71:
         cb:ec:a2:df:74:56:0b:8f:b5:a0:af:19:0f:90:b9:4e:00:fd:
         80:b0:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:02 2026 by rpki-client