Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa
File:                     3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa (raw, json)
Hash identifier:          /BkzGnIADOG5q6v5Jcjt5hTu07e9hGlwOm8KNG5UzOI=
Subject key identifier:   B2:02:8D:DE:A8:F4:65:B9:A9:E1:8B:37:91:63:70:C3:AF:81:19:F4
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       2E13DF8E2B29F78B3680D7327BC3BCEEE48842CB
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa
Signing time:             Wed 22 Jul 2026 05:04:01 +0000
ROA not before:           Wed 22 Jul 2026 04:59:01 +0000
ROA not after:            Wed 21 Jul 2027 05:04:01 +0000
asID:                     203013
IP address blocks:        103.135.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:13:df:8e:2b:29:f7:8b:36:80:d7:32:7b:c3:bc:ee:e4:88:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: Jul 22 04:59:01 2026 GMT
            Not After : Jul 21 05:04:01 2027 GMT
        Subject: CN=B2028DDEA8F465B9A9E18B37916370C3AF8119F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:69:93:fc:59:2f:8f:1d:f7:01:d2:cf:46:
                    e6:07:fc:20:19:0a:dc:9c:51:58:69:71:3a:52:cb:
                    f0:33:de:24:3f:dd:52:03:17:75:8b:e5:76:f9:fe:
                    8e:38:4a:3a:4a:3b:81:e1:59:eb:c4:7f:e2:27:90:
                    0c:f3:37:9e:57:36:a0:28:b3:a2:7e:b7:5e:66:63:
                    16:0c:c4:f0:0f:27:dc:85:61:22:65:23:4c:d9:c4:
                    a8:68:55:a5:9d:3f:5d:2c:f0:bc:3a:80:dd:94:3b:
                    af:27:b0:78:22:ee:8d:b0:a3:c6:c7:08:86:2c:53:
                    12:66:62:88:7b:95:37:35:9f:43:59:fc:fc:2e:ff:
                    5f:44:c3:35:fd:2b:f9:d5:53:95:2a:ed:27:2c:fb:
                    fe:4a:f5:a6:34:dd:bc:eb:5b:08:49:35:b1:7c:da:
                    f2:ad:b0:4c:f7:e6:a8:00:c4:68:3e:34:91:95:18:
                    3e:1d:2f:3d:2c:d0:eb:31:5a:94:2b:77:04:a2:58:
                    e6:d2:c1:02:01:f8:9c:24:70:96:c2:6f:40:c0:05:
                    21:88:4d:a9:52:a3:d3:24:c2:a1:6f:c8:f4:df:7a:
                    24:da:8f:b0:36:e8:d9:0a:fa:e2:c6:9d:62:b4:79:
                    c4:b2:6c:34:f6:c4:1d:35:31:89:ce:51:55:78:83:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:8D:DE:A8:F4:65:B9:A9:E1:8B:37:91:63:70:C3:AF:81:19:F4
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32302e302f32322d3234203d3e20323033303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:3b:20:41:76:e8:b0:e3:02:24:05:5b:7e:10:c5:22:0b:7f:
         bf:2d:0a:b4:85:e1:85:15:03:57:3d:69:93:48:4c:0a:0b:5d:
         42:58:2f:05:55:64:3b:7a:c1:0c:17:6c:7f:78:97:55:b1:67:
         c3:4f:de:b4:97:18:1b:48:40:b8:81:37:0c:cd:63:67:4d:c0:
         ac:60:d3:37:f9:61:a8:36:94:3e:e8:74:b1:e3:53:de:e2:fd:
         31:ba:f1:ba:aa:69:53:ff:e2:63:ec:a9:70:25:43:3a:b3:56:
         63:f3:44:04:af:df:09:a1:16:16:dd:0d:a4:4e:2e:06:af:9f:
         e8:45:50:84:c5:aa:60:d0:32:e9:1a:c2:2c:5b:0b:ca:d3:4c:
         58:61:a0:65:5e:fd:30:cf:09:34:86:34:78:de:16:7c:9c:49:
         61:71:63:4e:6c:10:b3:c4:53:88:5c:b1:14:18:8b:03:3e:c5:
         04:36:da:74:a8:d0:15:18:98:c2:85:4c:d9:f9:cb:10:fe:10:
         24:c6:8f:d5:91:69:99:24:b9:6f:e0:3a:c6:57:65:db:a1:76:
         0f:28:96:16:78:18:aa:1f:2e:49:a6:14:ac:35:03:5a:71:7e:
         e5:9c:f7:34:01:8b:17:99:87:4f:98:c5:a9:5a:8b:97:ef:27:
         40:19:34:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:42 2026 by rpki-client