Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MEGAICBC/0/3130332e3232382e3231362e302f32322d3234203d3e20313331353837.roa
File:                     3130332e3232382e3231362e302f32322d3234203d3e20313331353837.roa (raw, json)
Hash identifier:          sXBxbjakpXFkTZ1n6Fei2P2V/4rzqWLcVpthiMmBo0g=
Subject key identifier:   53:61:F0:93:8A:0F:4E:C7:F4:6E:81:80:CA:45:94:0F:F7:BF:BE:EC
Certificate issuer:       /CN=51E2FA8099B147333B089016307AB2E753D7A173
Certificate serial:       027C235A96C05B1360CA6452F9D4468E8DB038F3
Authority key identifier: 51:E2:FA:80:99:B1:47:33:3B:08:90:16:30:7A:B2:E7:53:D7:A1:73
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/51E2FA8099B147333B089016307AB2E753D7A173.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/3130332e3232382e3231362e302f32322d3234203d3e20313331353837.roa
Signing time:             Mon 11 May 2026 17:03:59 +0000
ROA not before:           Mon 11 May 2026 16:58:59 +0000
ROA not after:            Mon 10 May 2027 17:03:59 +0000
asID:                     131587
IP address blocks:        103.228.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.crl
                          rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/51E2FA8099B147333B089016307AB2E753D7A173.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7c:23:5a:96:c0:5b:13:60:ca:64:52:f9:d4:46:8e:8d:b0:38:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E2FA8099B147333B089016307AB2E753D7A173
        Validity
            Not Before: May 11 16:58:59 2026 GMT
            Not After : May 10 17:03:59 2027 GMT
        Subject: CN=5361F0938A0F4EC7F46E8180CA45940FF7BFBEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0e:5b:7d:89:bc:d5:6e:36:46:7f:ee:ec:a6:
                    1a:c7:d7:89:c2:f0:dd:4b:d9:2e:34:be:0a:b7:d0:
                    6b:3d:5a:3d:32:1d:22:94:f9:d6:0a:27:77:55:e4:
                    36:60:1a:b2:93:12:2d:d2:62:b1:fb:c9:5b:e8:17:
                    a7:a9:91:ba:25:fb:9e:e9:93:d3:b2:00:68:c3:d4:
                    ed:5c:a8:65:76:93:d1:9c:62:7d:15:e6:81:1d:69:
                    18:10:f1:7a:a3:cc:f7:cf:bb:9c:49:c1:c4:3e:9c:
                    66:74:64:38:cb:dd:23:0a:8c:61:95:5b:e0:4f:d2:
                    a0:d9:60:04:da:4e:30:92:70:ac:a5:96:5a:ed:ae:
                    e7:a9:cd:eb:ea:2b:6d:e3:1c:48:32:14:27:4a:f4:
                    5f:36:4b:f1:60:da:9a:5c:66:78:0d:8b:c7:98:15:
                    9f:35:5f:3b:32:94:18:b4:8a:19:64:3d:09:f8:3f:
                    e0:b4:c7:a5:bb:70:9e:05:19:8e:4d:41:14:18:30:
                    58:f0:30:dd:3d:d4:13:76:ff:1e:5f:06:2f:f3:90:
                    af:da:9d:bb:1e:92:6c:d5:a2:1f:e5:f6:6c:f3:e3:
                    44:66:89:a1:13:cf:e3:19:cf:1f:20:ff:a8:3b:13:
                    68:7b:a0:1d:5f:20:6d:ce:cd:d0:20:6f:af:53:88:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:61:F0:93:8A:0F:4E:C7:F4:6E:81:80:CA:45:94:0F:F7:BF:BE:EC
            X509v3 Authority Key Identifier:
                keyid:51:E2:FA:80:99:B1:47:33:3B:08:90:16:30:7A:B2:E7:53:D7:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/51E2FA8099B147333B089016307AB2E753D7A173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/51E2FA8099B147333B089016307AB2E753D7A173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MEGAICBC/0/3130332e3232382e3231362e302f32322d3234203d3e20313331353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:ab:25:8a:6f:61:c7:51:ae:57:2b:5d:9c:49:8c:31:2c:2d:
         01:48:a0:66:5d:45:a9:f8:1b:02:4d:bb:fa:67:24:bb:04:c3:
         01:10:a8:ba:6e:6c:91:f3:2c:2b:37:4f:73:ae:42:15:02:eb:
         4d:b7:13:f0:ca:35:1a:d2:6e:b8:84:3a:cc:eb:ab:0f:50:52:
         1d:fc:29:8e:33:32:e5:c4:af:b5:47:4b:b3:33:1a:ff:a1:ca:
         8c:c8:72:98:9e:fc:34:59:25:95:08:cb:53:ba:a2:74:c2:0a:
         d6:23:0e:f5:8c:c0:6b:49:02:61:97:47:fb:da:c0:1e:bc:5f:
         19:49:23:32:b4:67:2e:4a:6d:54:5e:14:ca:69:fb:c0:cf:62:
         32:c6:60:7c:eb:41:3f:c2:4f:24:8f:f0:88:4d:62:e5:a1:d1:
         16:d7:56:e8:29:1b:29:05:36:30:a8:e3:90:1c:b8:88:4b:f9:
         df:ce:93:97:f3:4f:29:0c:00:af:7d:d9:04:2f:4e:27:9e:97:
         bb:ab:d6:a5:07:e5:b5:ce:a1:d3:09:0c:52:6b:28:23:98:3d:
         ad:bc:ed:e6:32:43:c6:91:25:da:c9:7f:1e:4d:d1:92:4d:e7:
         12:ad:8b:85:6d:2e:24:15:4d:29:8a:38:f1:09:24:bd:ca:7a:
         a8:48:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:47 2026 by rpki-client