Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HUSHENGXIN/0/3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa
File:                     3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          9QLLKde7xB+44T3GJTEMGiTgMX83XZhXuc69+/0GzrU=
Subject key identifier:   68:CA:73:AD:59:2F:29:B6:1E:B0:CB:78:8C:90:2F:60:A6:9C:50:39
Certificate issuer:       /CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
Certificate serial:       0E2F2D0E69CF94673436A2BD53D788CB6775FA
Authority key identifier: 27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:38:01 +0000
ROA not before:           Mon 11 May 2026 17:33:01 +0000
ROA not after:            Mon 10 May 2027 17:38:01 +0000
asID:                     131642
IP address blocks:        103.127.216.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl
                          rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2f:2d:0e:69:cf:94:67:34:36:a2:bd:53:d7:88:cb:67:75:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2730CF9F132716F178F88FB1F268CE51CA264C9F
        Validity
            Not Before: May 11 17:33:01 2026 GMT
            Not After : May 10 17:38:01 2027 GMT
        Subject: CN=68CA73AD592F29B61EB0CB788C902F60A69C5039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:51:5c:52:c4:3f:12:ff:d5:99:e8:11:5c:90:
                    8d:ab:6c:91:2b:6a:76:d5:d1:7f:fb:97:2f:4d:33:
                    29:e1:6c:1c:09:eb:5f:34:fb:40:7a:8d:1b:50:74:
                    66:48:41:a1:04:96:3c:3f:8e:2f:12:11:40:bb:56:
                    8d:f2:fb:c1:e6:1a:fe:4e:ab:c2:5e:f5:93:a1:0b:
                    52:31:33:f0:ae:a8:46:13:28:32:db:56:a2:81:1a:
                    50:a9:f9:2c:d8:c4:9e:82:40:8e:e7:71:44:f2:60:
                    94:95:c2:7c:6b:dd:2d:84:e3:96:22:52:94:22:04:
                    dd:aa:e4:05:09:be:e1:97:b8:02:15:0e:41:e8:f3:
                    10:76:f8:e8:1e:03:0d:d3:fe:5b:0d:94:56:fb:63:
                    e0:d4:5b:34:22:ea:32:91:31:aa:5d:96:08:ec:4e:
                    24:2a:92:07:67:23:49:c8:b7:58:6a:75:18:00:74:
                    b8:b6:7b:a8:c2:8e:89:a2:d4:5e:e3:13:96:88:b3:
                    5c:8a:0d:52:b5:a7:c3:5c:3a:e2:7b:65:30:d3:86:
                    d0:96:07:ca:a2:64:9b:79:25:92:56:5d:86:e1:10:
                    23:2e:d7:3c:7b:b0:b4:92:1b:6c:26:ca:9e:b9:85:
                    2a:36:ac:7d:2c:10:98:05:16:58:33:ee:14:91:4c:
                    d3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CA:73:AD:59:2F:29:B6:1E:B0:CB:78:8C:90:2F:60:A6:9C:50:39
            X509v3 Authority Key Identifier:
                keyid:27:30:CF:9F:13:27:16:F1:78:F8:8F:B1:F2:68:CE:51:CA:26:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/2730CF9F132716F178F88FB1F268CE51CA264C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2730CF9F132716F178F88FB1F268CE51CA264C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUSHENGXIN/0/3130332e3132372e3231362e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:28:8c:bb:28:81:7c:89:6d:a6:cc:90:72:be:e1:60:52:02:
         a3:36:82:13:a5:d4:30:5e:c8:a8:9c:05:86:83:81:69:c5:86:
         d6:41:15:70:03:65:12:c6:8c:9f:ac:7a:d8:4d:f6:d2:59:40:
         38:8a:1b:05:d0:37:19:07:2c:36:37:23:26:da:47:5b:85:f9:
         5c:6f:05:7b:0d:38:0f:4a:b4:14:11:62:80:a3:e4:fa:65:e1:
         96:b5:08:2f:d0:d0:f3:ea:92:4f:a9:8b:0a:83:ae:37:5d:78:
         7e:7a:c0:f3:a2:f7:a6:6f:ac:11:34:24:b0:1e:65:57:02:7f:
         62:21:69:6c:bd:04:87:49:2d:75:ef:bb:d4:04:00:07:0d:d5:
         3b:67:96:eb:5b:2b:0a:80:47:a8:84:20:a1:89:0c:7a:1d:8a:
         f5:64:de:03:38:c9:6e:46:21:e3:f4:ca:2a:90:04:be:45:46:
         bc:d9:e9:fc:84:b4:f5:69:94:83:19:9c:be:c8:a0:1d:50:55:
         f6:81:a7:0b:75:5f:c2:74:bd:ee:4d:3d:7f:62:c2:d5:98:d2:
         52:8b:cf:12:08:ff:e0:99:fd:fb:dc:7a:f1:ab:f2:57:ea:3d:
         55:56:55:b5:29:7c:ea:2c:65:59:69:e2:e4:8e:82:39:af:8f:
         1a:53:c8:66
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgITDi8tDmnPlGc0NqK9U9eIy2d1+jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEygyNzMwQ0Y5RjEzMjcxNkYxNzhGODhGQjFGMjY4Q0U1MUNB
MjY0QzlGMB4XDTI2MDUxMTE3MzMwMVoXDTI3MDUxMDE3MzgwMVowMzExMC8GA1UE
AxMoNjhDQTczQUQ1OTJGMjlCNjFFQjBDQjc4OEM5MDJGNjBBNjlDNTAzOTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIVRXFLEPxL/1ZnoEVyQjatskStq
dtXRf/uXL00zKeFsHAnrXzT7QHqNG1B0ZkhBoQSWPD+OLxIRQLtWjfL7weYa/k6r
wl71k6ELUjEz8K6oRhMoMttWooEaUKn5LNjEnoJAjudxRPJglJXCfGvdLYTjliJS
lCIE3arkBQm+4Ze4AhUOQejzEHb46B4DDdP+Ww2UVvtj4NRbNCLqMpExql2WCOxO
JCqSB2cjSci3WGp1GAB0uLZ7qMKOiaLUXuMTloizXIoNUrWnw1w64ntlMNOG0JYH
yqJkm3klklZdhuEQIy7XPHuwtJIbbCbKnrmFKjasfSwQmAUWWDPuFJFM0wUCAwEA
AaOCAfAwggHsMB0GA1UdDgQWBBRoynOtWS8pth6wy3iMkC9gppxQOTAfBgNVHSME
GDAWgBQnMM+fEycW8Xj4j7HyaM5RyiZMnzAOBgNVHQ8BAf8EBAMCB4AwZwYDVR0f
BGAwXjBcoFqgWIZWcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9IVVNIRU5H
WElOLzAvMjczMENGOUYxMzI3MTZGMTc4Rjg4RkIxRjI2OENFNTFDQTI2NEM5Ri5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNzMwQ0Y5RjEzMjcxNkYxNzhGODhGQjFG
MjY4Q0U1MUNBMjY0QzlGLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzAL
hmhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hVU0hFTkdYSU4vMC8zMTMw
MzMyZTMxMzIzNzJlMzIzMTM2MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzEzMzMx
MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBZ3/YMA0GCSqGSIb3DQEBCwUAA4IBAQAkKIy7KIF8
iW2mzJByvuFgUgKjNoITpdQwXsionAWGg4FpxYbWQRVwA2USxoyfrHrYTfbSWUA4
ihsF0DcZByw2NyMm2kdbhflcbwV7DTgPSrQUEWKAo+T6ZeGWtQgv0NDz6pJPqYsK
g643XXh+esDzovemb6wRNCSwHmVXAn9iIWlsvQSHSS1177vUBAAHDdU7Z5brWysK
gEeohCChiQx6HYr1ZN4DOMluRiHj9MoqkAS+RUa82en8hLT1aZSDGZy+yKAdUFX2
gacLdV/CdL3uTT1/YsLVmNJSi88SCP/gmf373Hrxq/JX6j1VVlW1KXzqLGVZaeLk
joI5r48aU8hm
-----END CERTIFICATE-----
Generated at Wed May 13 08:10:21 2026 by rpki-client