Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFENGTW/0/3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa
File:                     3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier:          q17bFdqrhMBLjmohT4EXtTiiL79HGPyDIQggw2a0Oyc=
Subject key identifier:   A9:7C:9A:F2:AE:CD:C3:C8:BB:5F:AD:EA:9E:E6:5C:61:80:42:1C:39
Certificate issuer:       /CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
Certificate serial:       5B2E571B39172828A2F7E3418E0B93970A539F27
Authority key identifier: 44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa
Signing time:             Mon 11 May 2026 17:56:56 +0000
ROA not before:           Mon 11 May 2026 17:51:56 +0000
ROA not after:            Mon 10 May 2027 17:56:56 +0000
asID:                     7536
IP address blocks:        103.189.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2e:57:1b:39:17:28:28:a2:f7:e3:41:8e:0b:93:97:0a:53:9f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4461702FD381CAC430A5B19A762A79E9CCBD8D09
        Validity
            Not Before: May 11 17:51:56 2026 GMT
            Not After : May 10 17:56:56 2027 GMT
        Subject: CN=A97C9AF2AECDC3C8BB5FADEA9EE65C6180421C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:d8:3d:09:18:ae:9f:97:e5:37:0e:d9:10:
                    5f:ca:82:b2:4a:dd:be:fb:85:27:68:4b:10:93:8e:
                    7e:42:10:a1:70:e8:95:30:bd:c7:95:cc:32:b6:da:
                    c3:a9:59:eb:b9:bf:60:9c:c7:ee:ff:7e:46:bc:b7:
                    b4:b1:cc:b0:55:32:4f:81:d8:28:16:93:25:16:63:
                    f3:e0:6f:ba:6d:51:3b:49:01:59:02:59:5d:fa:d7:
                    96:30:4c:d0:f0:b3:6f:45:a6:e6:e4:7a:9f:0a:ab:
                    05:67:9b:d4:15:15:0f:05:d6:bc:ce:70:bc:63:dd:
                    b6:ad:b5:ef:a0:fe:66:d6:c4:b3:db:f0:cb:8d:85:
                    be:03:0a:0f:93:cb:fc:ba:0e:d7:5f:bd:b5:0d:24:
                    15:75:b7:f3:b9:52:cc:74:d5:8d:13:2f:ef:fd:03:
                    f5:b8:30:1b:da:0e:6c:47:55:d5:46:b4:01:2b:14:
                    a8:be:d4:b2:88:e8:d7:51:77:cf:a0:77:2e:17:2e:
                    38:60:cd:d3:f9:8a:83:c6:81:c1:ab:69:70:d9:17:
                    ee:75:55:6c:04:4e:64:7c:0a:ff:61:4c:55:1d:f9:
                    f5:39:1d:bf:e1:fe:bf:df:2f:e7:ff:78:ba:53:ad:
                    52:f1:84:88:b3:31:75:04:af:52:aa:e1:de:43:7b:
                    bb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:9A:F2:AE:CD:C3:C8:BB:5F:AD:EA:9E:E6:5C:61:80:42:1C:39
            X509v3 Authority Key Identifier:
                keyid:44:61:70:2F:D3:81:CA:C4:30:A5:B1:9A:76:2A:79:E9:CC:BD:8D:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/4461702FD381CAC430A5B19A762A79E9CCBD8D09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4461702FD381CAC430A5B19A762A79E9CCBD8D09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENGTW/0/3130332e3138392e3130382e302f32332d3234203d3e2037353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:fb:a6:84:b1:73:4e:38:ac:b3:3e:33:5b:27:c5:c5:f5:70:
         b7:f3:25:e0:83:fa:0a:13:d2:63:1f:8d:64:23:de:55:48:55:
         ad:5f:c9:74:b7:d1:6a:a9:ed:e5:12:08:39:69:60:67:8e:f7:
         ec:c4:ee:e5:f2:fe:62:3f:cb:d1:47:f9:f0:a0:da:5a:c5:9c:
         92:16:c9:f8:28:02:2d:b9:79:63:8f:73:3e:e0:b8:bd:d2:6e:
         d0:c4:68:f3:95:ca:d2:ca:5f:09:1a:c0:25:c7:74:2b:b3:8f:
         60:d5:16:42:a0:8e:f0:41:89:6a:d3:62:21:2f:09:f8:38:d4:
         e6:da:34:5e:49:32:82:0c:22:74:01:aa:74:de:a5:9c:f5:cc:
         23:3e:3c:5a:ae:85:a1:83:9d:d7:6c:3b:e2:17:91:66:f5:7e:
         ee:ac:ad:bd:d1:0d:f4:e7:b8:d4:23:ca:2d:ad:f5:67:44:4e:
         7e:e7:e3:56:5c:5c:3e:a6:9e:18:99:a6:66:ac:5c:7e:6a:60:
         aa:62:46:f5:0c:a2:f5:8f:49:7e:5c:4b:86:7e:37:25:cd:ac:
         4b:b4:11:53:0f:63:fc:aa:0a:a2:fc:d5:c4:5e:2d:f2:ac:21:
         bd:9a:16:3b:d1:16:7e:84:a6:cc:5e:4e:a6:49:6a:23:5c:cc:
         35:25:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:42 2026 by rpki-client