Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/INFORICH/0/3130332e3135322e3235322e302f32332d3234203d3e20313331363734.roa
File:                     3130332e3135322e3235322e302f32332d3234203d3e20313331363734.roa (raw, json)
Hash identifier:          V8i1CNi9KvQygvK2n7ExFbNEN66BfXSX8swl32jKAok=
Subject key identifier:   1D:53:0D:C0:6F:11:95:73:AC:7B:F9:E9:98:EA:ED:01:C5:75:75:54
Certificate issuer:       /CN=2246FA22721287A616226553235161DB0C06A86A
Certificate serial:       62BB7DF75C97DF15E4AD75626FF417693F4120A1
Authority key identifier: 22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/INFORICH/0/3130332e3135322e3235322e302f32332d3234203d3e20313331363734.roa
Signing time:             Mon 11 May 2026 17:09:46 +0000
ROA not before:           Mon 11 May 2026 17:04:46 +0000
ROA not after:            Mon 10 May 2027 17:09:46 +0000
asID:                     131674
IP address blocks:        103.152.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl
                          rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bb:7d:f7:5c:97:df:15:e4:ad:75:62:6f:f4:17:69:3f:41:20:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2246FA22721287A616226553235161DB0C06A86A
        Validity
            Not Before: May 11 17:04:46 2026 GMT
            Not After : May 10 17:09:46 2027 GMT
        Subject: CN=1D530DC06F119573AC7BF9E998EAED01C5757554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:66:bd:8f:19:4d:e7:66:c1:d7:2f:10:28:
                    fe:74:5b:51:41:86:ba:47:de:7f:37:0b:a5:99:b2:
                    61:14:59:6a:fa:89:81:b0:c3:00:4c:bd:10:f9:a9:
                    45:45:37:b1:22:c9:cc:e8:92:3b:12:e1:d4:6d:1c:
                    50:ea:d8:24:05:df:52:0b:6d:1c:4f:52:e9:d5:bd:
                    10:e1:09:f7:03:b0:41:e4:89:aa:19:1d:b5:34:f6:
                    49:11:0c:ba:b8:0f:a1:08:8c:56:a8:2b:86:82:70:
                    51:82:a1:f6:ca:43:63:13:f4:ec:f8:e7:98:a3:12:
                    5a:fd:92:58:af:69:08:24:ef:74:58:7f:90:26:cd:
                    17:7a:2c:c8:dc:23:5b:17:af:18:df:6e:ec:94:c4:
                    08:28:ea:3e:95:8d:73:72:11:32:f0:9a:e8:bc:48:
                    4a:4b:4c:9b:94:e7:b2:95:0a:c5:35:00:7f:85:c4:
                    8b:e1:91:33:6a:8c:df:79:23:51:df:27:c4:09:83:
                    61:28:42:6f:3e:ae:b0:8f:6a:42:2a:e4:fc:42:70:
                    ef:7f:84:f7:01:3c:46:29:b5:4f:53:05:5a:0e:5d:
                    49:29:8e:ac:86:af:0f:f1:36:bf:a5:ff:21:43:11:
                    dc:b9:1d:37:12:68:91:5d:c6:e0:72:2a:df:b8:83:
                    a4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:0D:C0:6F:11:95:73:AC:7B:F9:E9:98:EA:ED:01:C5:75:75:54
            X509v3 Authority Key Identifier:
                keyid:22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/3130332e3135322e3235322e302f32332d3234203d3e20313331363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:e5:41:64:5e:c8:b6:df:4b:20:07:b0:e9:97:5e:63:c8:3c:
         99:12:30:ac:07:1c:cc:46:4c:8b:30:34:38:d4:da:25:57:37:
         01:cb:cf:57:c9:72:9f:4d:48:ac:31:2b:8b:3c:90:3a:b4:8d:
         6f:fc:da:93:1c:18:83:7e:32:3b:53:47:38:93:eb:8a:71:6b:
         63:b4:d1:4a:04:ff:a0:31:0b:09:03:75:af:34:1a:09:b6:46:
         51:78:d6:74:0b:d6:6a:73:98:6d:e1:5d:f6:6c:65:a9:53:90:
         67:24:c7:93:65:d9:ca:a5:95:cf:80:d6:9b:59:41:a7:28:de:
         15:41:ad:40:95:0d:83:a3:ae:3e:32:fd:d0:23:8d:f5:62:e7:
         13:55:f3:f4:71:da:bb:0c:e5:f7:59:04:eb:ac:8a:21:ef:5d:
         e5:a9:24:b5:71:69:f9:fd:8c:c7:da:4c:ef:17:ff:9b:65:67:
         bd:59:bd:40:96:8a:08:5a:72:da:f6:d4:fa:bb:4c:0f:1d:7a:
         21:1d:9d:d7:ef:18:55:f7:b8:77:78:79:24:44:f8:a5:45:43:
         13:b0:cd:fa:42:07:77:81:ea:eb:9c:1e:3e:ca:ef:cf:90:18:
         b9:78:a1:53:90:ec:4b:52:56:11:da:a1:df:80:2a:99:c6:7e:
         74:cd:46:da
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUYrt991yX3xXkrXVib/QXaT9BIKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0NkZBMjI3MjEyODdBNjE2MjI2NTUzMjM1MTYxREIw
QzA2QTg2QTAeFw0yNjA1MTExNzA0NDZaFw0yNzA1MTAxNzA5NDZaMDMxMTAvBgNV
BAMTKDFENTMwREMwNkYxMTk1NzNBQzdCRjlFOTk4RUFFRDAxQzU3NTc1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk62a9jxlN52bB1y8QKP50W1FB
hrpH3n83C6WZsmEUWWr6iYGwwwBMvRD5qUVFN7EiyczokjsS4dRtHFDq2CQF31IL
bRxPUunVvRDhCfcDsEHkiaoZHbU09kkRDLq4D6EIjFaoK4aCcFGCofbKQ2MT9Oz4
55ijElr9klivaQgk73RYf5AmzRd6LMjcI1sXrxjfbuyUxAgo6j6VjXNyETLwmui8
SEpLTJuU57KVCsU1AH+FxIvhkTNqjN95I1HfJ8QJg2EoQm8+rrCPakIq5PxCcO9/
hPcBPEYptU9TBVoOXUkpjqyGrw/xNr+l/yFDEdy5HTcSaJFdxuByKt+4g6RNAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUHVMNwG8RlXOse/npmOrtAcV1dVQwHwYDVR0j
BBgwFoAUIkb6InISh6YWImVTI1Fh2wwGqGowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU5GT1JJ
Q0gvMC8yMjQ2RkEyMjcyMTI4N0E2MTYyMjY1NTMyMzUxNjFEQjBDMDZBODZBLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzIyNDZGQTIyNzIxMjg3QTYxNjIyNjU1MzIz
NTE2MURCMEMwNkE4NkEuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU5GT1JJQ0gvMC8zMTMwMzMy
ZTMxMzUzMjJlMzIzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzMxMzYz
NzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ5j8MA0GCSqGSIb3DQEBCwUAA4IBAQAN5UFkXsi230sg
B7Dpl15jyDyZEjCsBxzMRkyLMDQ41NolVzcBy89XyXKfTUisMSuLPJA6tI1v/NqT
HBiDfjI7U0c4k+uKcWtjtNFKBP+gMQsJA3WvNBoJtkZReNZ0C9Zqc5ht4V32bGWp
U5BnJMeTZdnKpZXPgNabWUGnKN4VQa1AlQ2Do64+Mv3QI431YucTVfP0cdq7DOX3
WQTrrIoh713lqSS1cWn5/YzH2kzvF/+bZWe9Wb1AlooIWnLa9tT6u0wPHXohHZ3X
7xhV97h3eHkkRPilRUMTsM36Qgd3gerrnB4+yu/PkBi5eKFTkOxLUlYR2qHfgCqZ
xn50zUba
-----END CERTIFICATE-----
Generated at Wed May 13 06:56:46 2026 by rpki-client