Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa
File:                     3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier:          cQkjcrDW6Cw958N6gtJjxyd/adphXQyJjpPcfgZ5xG4=
Subject key identifier:   9E:C0:BB:28:F7:D5:82:19:64:9C:D9:CB:5F:F5:B9:0D:8E:A0:D1:EF
Certificate issuer:       /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial:       0DE74C1770322CA1F5AB2424A025DEF6CE8D4AA6
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa
Signing time:             Mon 11 May 2026 17:44:45 +0000
ROA not before:           Mon 11 May 2026 17:39:45 +0000
ROA not after:            Mon 10 May 2027 17:44:45 +0000
asID:                     213607
IP address blocks:        103.177.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
                          rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e7:4c:17:70:32:2c:a1:f5:ab:24:24:a0:25:de:f6:ce:8d:4a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
        Validity
            Not Before: May 11 17:39:45 2026 GMT
            Not After : May 10 17:44:45 2027 GMT
        Subject: CN=9EC0BB28F7D58219649CD9CB5FF5B90D8EA0D1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c2:bd:76:63:e2:3e:a9:d3:d2:0c:bb:47:69:
                    bf:7d:f3:ec:da:73:bf:aa:82:8f:76:d7:5c:00:44:
                    dd:1a:8d:d9:6d:88:af:0a:1d:91:40:0b:0e:f4:24:
                    6c:1e:80:56:12:43:f8:87:6e:5a:8d:78:1f:28:49:
                    60:c2:bb:9d:17:5d:aa:4d:f2:19:86:a9:60:85:fb:
                    75:af:9a:2c:bc:35:bf:ff:95:c8:fc:72:52:db:ff:
                    91:65:97:26:3b:90:4d:cd:f3:00:a4:d3:db:66:b0:
                    2c:51:f7:57:ed:1b:47:45:3a:6a:19:e6:c0:ca:4f:
                    66:c5:5b:60:d4:53:c7:08:00:18:a7:18:be:a4:9b:
                    38:20:5e:ed:34:f1:f7:20:9a:62:bc:f8:65:8e:5b:
                    86:be:b7:c7:5c:4a:b9:b1:c1:7f:81:ca:05:0a:a1:
                    da:e0:5c:3e:00:bf:7e:61:d5:b7:42:c1:09:88:9e:
                    c8:41:f3:f1:45:24:bc:3b:34:fc:b7:34:f7:7b:1f:
                    8c:ba:6e:f8:1c:1b:1b:c4:6f:00:2e:48:d3:32:44:
                    45:8d:0e:a4:41:38:bb:0f:de:e8:b1:4d:b6:71:3b:
                    24:b4:c2:2a:28:b0:3e:68:dc:4f:58:65:67:90:3d:
                    be:6e:31:40:57:8b:62:b9:0e:15:ff:60:88:fb:59:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:BB:28:F7:D5:82:19:64:9C:D9:CB:5F:F5:B9:0D:8E:A0:D1:EF
            X509v3 Authority Key Identifier:
                keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32342d3234203d3e20323133363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:02:ba:36:c5:6f:fb:5c:c1:79:f9:72:16:87:c2:29:42:bd:
         3f:9c:80:f7:c6:96:89:a6:d0:d2:53:97:83:d7:2c:c9:1e:46:
         29:7d:b7:d6:69:93:c2:70:2f:29:29:bf:68:36:f8:b7:c1:d7:
         ae:f3:b0:1e:3b:95:6f:93:8a:47:e1:d0:4c:ab:00:4a:7b:4b:
         33:91:58:44:1b:ff:d5:85:68:ac:00:b3:19:48:79:c1:10:ee:
         c9:bd:fa:b4:da:17:49:bb:1c:6d:1d:0a:d0:9e:5f:f1:96:80:
         5f:b5:78:72:a9:a1:bc:0c:27:6d:61:39:5d:17:af:05:ee:39:
         e8:93:14:b4:f3:6a:13:91:e0:b4:57:97:b1:ff:95:a1:2e:28:
         75:e4:f3:ee:68:d9:eb:a0:ac:0d:f9:f9:cc:9d:c3:98:27:6e:
         09:07:d9:9b:a4:68:e0:c0:5a:32:4f:e0:7d:2f:0b:78:59:43:
         ec:a6:1a:09:c9:de:f0:28:13:7b:bd:05:c8:65:57:fd:bd:3c:
         6a:13:51:24:56:e5:0b:d7:13:96:3b:b7:1a:7c:2b:f8:0a:12:
         a1:00:99:6a:c7:8b:1a:8a:6f:da:b9:d8:56:a2:49:f6:9a:17:
         57:49:f1:f6:13:e8:b1:e7:cb:05:bd:90:f4:ca:c8:e7:49:dc:
         ff:c3:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:16 2026 by rpki-client