Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa
File:                     3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa (raw, json)
Hash identifier:          QJpakj5AI9RKVWG2PgQIpjIivIC60des2reJiowl4os=
Subject key identifier:   55:0C:14:03:9A:F8:7D:3A:29:7A:80:B6:DF:F4:75:1A:F6:34:A9:EC
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       5E0B4238C60A7AAB60A72FD0FBF080B997832487
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa
Signing time:             Mon 11 May 2026 17:36:13 +0000
ROA not before:           Mon 11 May 2026 17:31:13 +0000
ROA not after:            Mon 10 May 2027 17:36:13 +0000
asID:                     131633
IP address blocks:        103.135.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0b:42:38:c6:0a:7a:ab:60:a7:2f:d0:fb:f0:80:b9:97:83:24:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:31:13 2026 GMT
            Not After : May 10 17:36:13 2027 GMT
        Subject: CN=550C14039AF87D3A297A80B6DFF4751AF634A9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:3a:52:2f:98:12:79:61:3c:5d:11:67:51:
                    05:88:a9:e6:41:f2:98:f9:ea:91:87:d1:b6:70:95:
                    80:d3:ba:5f:5f:23:89:98:15:2b:13:9f:a0:96:7f:
                    c3:46:a7:3b:e9:cc:72:87:92:a5:5c:cd:f6:46:a5:
                    f8:72:16:a4:4e:ba:95:1b:f3:7b:88:da:08:27:0b:
                    76:32:04:5d:e3:50:52:0a:37:f6:03:39:cd:17:30:
                    af:86:47:cb:22:1c:1c:fc:ca:88:9b:39:f5:86:61:
                    3c:71:c3:ab:6c:e3:3c:0f:ff:6f:97:c6:36:8d:06:
                    37:16:9b:f5:d7:36:19:e9:f1:27:c4:44:1a:4a:61:
                    83:b4:71:aa:e7:35:04:8e:17:e5:f1:fb:fd:92:ec:
                    98:eb:1d:b3:f6:0b:11:f5:fd:25:fe:c8:84:64:7c:
                    e0:ef:2a:6e:de:3c:a7:4b:8c:7d:d3:35:c5:2a:9d:
                    62:12:1f:65:96:e3:1a:04:f5:42:76:ef:80:4c:58:
                    90:c2:fb:67:ea:f2:63:78:64:99:6a:f7:f5:96:af:
                    0f:cb:b6:96:0a:09:4d:f7:46:a7:fa:f1:b3:78:a4:
                    c3:c9:29:81:33:0a:4f:17:6b:9a:06:59:d8:6b:89:
                    e6:c1:1d:57:5a:96:36:cc:26:1a:95:f0:6d:09:1a:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0C:14:03:9A:F8:7D:3A:29:7A:80:B6:DF:F4:75:1A:F6:34:A9:EC
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3234203d3e20313331363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:66:cf:3e:d4:30:dd:99:f4:c3:96:05:a7:f6:41:e8:a7:a9:
         86:fd:89:92:5d:d2:46:b2:57:eb:81:ef:96:42:dd:e8:80:12:
         64:b1:36:68:70:1e:62:aa:08:10:47:ac:a2:07:5a:d1:d0:89:
         44:f4:25:c8:50:0a:d2:0b:e4:28:ae:8a:2b:be:f7:4d:80:f2:
         e3:0b:74:07:de:6f:b8:7a:22:65:e9:ef:f6:f2:b4:15:0a:fe:
         7e:22:ad:ba:ee:c9:5d:59:1e:3e:ea:1a:2d:f5:38:82:40:b2:
         ff:88:ac:cb:0a:e3:14:db:2e:15:34:11:07:06:46:d5:99:05:
         33:cf:3b:41:3b:ca:37:73:4b:10:9f:51:b2:b9:c8:83:44:40:
         3d:76:04:de:ea:61:3b:28:df:a4:47:a3:88:28:fd:b8:4e:c6:
         a4:8d:3b:c4:a7:da:59:b0:d5:e4:c3:54:c1:26:93:e5:62:27:
         bb:75:d8:2a:86:ab:f2:7c:38:80:90:dd:27:8c:48:49:30:bc:
         6d:30:18:70:bb:47:04:95:aa:a5:f0:af:16:0a:36:33:cd:2d:
         b5:cd:79:b6:6b:25:ab:53:f1:94:e1:d0:64:7b:7c:e7:14:11:
         51:dc:01:a3:d5:0d:98:b2:80:e9:59:c4:c3:bc:06:6b:6c:95:
         82:04:12:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:01 2026 by rpki-client