Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa
File:                     3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          qkqrj9/N2V1M+ri4JRAjh2Xtl5l0eXftPC6OL0jPaCQ=
Subject key identifier:   0C:59:D1:87:62:05:A4:64:48:18:BA:25:77:F5:74:B5:D8:8B:EC:2A
Certificate issuer:       /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial:       577760634733AE2F104F3B625201060102B6C0D5
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa
Signing time:             Mon 11 May 2026 17:55:57 +0000
ROA not before:           Mon 11 May 2026 17:50:57 +0000
ROA not after:            Mon 10 May 2027 17:55:57 +0000
asID:                     148996
IP address blocks:        103.227.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
                          rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:26:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:77:60:63:47:33:ae:2f:10:4f:3b:62:52:01:06:01:02:b6:c0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
        Validity
            Not Before: May 11 17:50:57 2026 GMT
            Not After : May 10 17:55:57 2027 GMT
        Subject: CN=0C59D1876205A4644818BA2577F574B5D88BEC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:46:ad:a2:dc:bf:20:46:48:0e:68:a0:bc:
                    22:fd:68:a8:87:2c:31:3c:13:5d:7b:77:31:0d:12:
                    89:e0:9b:b9:c9:cf:6e:46:52:9a:28:d2:9d:bd:f4:
                    b8:1b:b3:e4:77:dd:7b:26:31:c3:42:39:51:70:60:
                    ec:51:77:2e:5d:fa:a4:af:10:ad:c3:ea:50:c0:f4:
                    9a:34:c8:1f:e6:c7:31:f1:6a:83:fd:7b:bb:b5:73:
                    6b:1f:7e:e1:0c:14:36:21:ef:be:0b:ff:10:d4:62:
                    dd:dd:5e:19:39:29:b2:0c:1a:c7:67:f0:e7:58:6c:
                    85:68:e1:fc:dd:46:e1:3b:ee:b8:e2:cf:23:b8:53:
                    de:24:d5:dd:81:77:55:3c:3f:04:23:b6:93:2b:3c:
                    f7:45:89:f2:f9:37:a0:21:9b:f3:67:cc:27:1b:7d:
                    9d:95:3b:21:bb:77:fd:7f:04:b5:db:57:c0:1b:36:
                    2b:de:3f:2a:bb:49:97:5a:b0:35:bb:87:0a:2e:17:
                    e2:4b:be:45:f4:01:16:5f:ca:4c:d8:c0:ab:f0:ed:
                    d0:c4:5c:df:6b:97:b9:06:d1:62:d0:2f:c0:db:88:
                    51:db:78:c3:26:b7:48:0a:d4:e8:12:e9:6e:13:a9:
                    14:a5:74:50:46:bd:c6:94:b1:cd:aa:4a:88:39:dd:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:D1:87:62:05:A4:64:48:18:BA:25:77:F5:74:B5:D8:8B:EC:2A
            X509v3 Authority Key Identifier:
                keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32342d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:a4:12:99:c8:05:8b:d0:68:47:41:82:41:91:86:8a:59:
         b9:d2:cf:12:a6:5d:fc:9b:02:9e:ea:20:63:6a:7d:7d:cf:de:
         21:4f:64:57:1d:f3:3c:e2:56:aa:b0:4d:12:e5:88:62:4f:18:
         53:1e:f2:49:c5:4e:97:21:7f:53:f8:92:31:01:c3:e1:0a:84:
         3f:6d:53:67:c4:c5:82:01:af:3e:aa:0d:b6:cf:29:d5:76:00:
         bb:85:c9:22:4b:fb:24:ff:f7:04:91:45:c1:0a:ef:ee:58:26:
         6e:18:fc:00:ee:e3:ff:f1:11:8a:9b:98:a4:cc:3c:be:62:48:
         40:10:12:7c:9a:a0:8a:3c:68:ae:f1:65:2d:ca:fa:2b:84:4d:
         a3:6d:68:40:d0:39:7a:9c:32:91:d1:d4:b7:0a:1f:01:69:3b:
         67:7c:a2:c1:f2:d4:ac:80:ca:cf:ee:70:03:33:ce:7f:f4:8e:
         9b:fe:fc:fe:11:e2:5e:36:3c:a0:12:19:19:13:12:2f:57:96:
         e8:01:9c:17:a6:70:4b:22:79:8d:ab:29:af:0f:d2:84:96:28:
         ff:76:ca:a5:28:c2:b5:cb:ff:70:73:70:d3:55:bd:fe:95:88:
         3f:e4:fd:e6:e8:cb:37:b7:be:13:37:ef:2d:07:16:0a:69:f6:
         8f:fd:2b:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:00:22 2026 by rpki-client