Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32342d3234203d3e20323038393332.roa
File:                     3130332e3133352e32322e302f32342d3234203d3e20323038393332.roa (raw, json)
Hash identifier:          2jKmsFA/4FFA8Uec2ltToiEb29B4iAKyAlOM9BJdgLo=
Subject key identifier:   56:C6:53:2C:ED:D7:07:95:A7:5E:76:C2:56:AF:3C:52:9C:78:74:60
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       6E176CC9A7AD870FA49CFB77B52C659F730B9B37
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32342d3234203d3e20323038393332.roa
Signing time:             Mon 11 May 2026 17:40:18 +0000
ROA not before:           Mon 11 May 2026 17:35:18 +0000
ROA not after:            Mon 10 May 2027 17:40:18 +0000
asID:                     208932
IP address blocks:        103.135.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:17:6c:c9:a7:ad:87:0f:a4:9c:fb:77:b5:2c:65:9f:73:0b:9b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:35:18 2026 GMT
            Not After : May 10 17:40:18 2027 GMT
        Subject: CN=56C6532CEDD70795A75E76C256AF3C529C787460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:70:f5:b6:57:be:29:e6:2e:b7:24:89:c1:
                    47:be:9b:f3:54:56:f7:fe:8f:d0:be:e7:9d:01:bd:
                    27:2f:7e:d7:db:69:cd:49:35:14:a0:ff:ea:3b:2f:
                    bc:e8:9b:3d:87:fa:dc:ab:c4:4d:a1:2e:85:98:f6:
                    83:0f:f7:cd:1a:d6:ad:4e:87:d3:ba:6b:7f:fc:b7:
                    85:c3:06:57:9e:a7:9a:4e:cf:6a:bd:cb:12:16:49:
                    42:c8:ab:a0:3d:45:93:6f:98:2b:d4:1b:42:9e:5a:
                    5b:c8:04:f3:f9:6b:61:ef:a4:17:08:e6:dd:fb:18:
                    c9:d3:70:ac:c2:06:31:a8:81:2b:d8:c8:79:c1:7d:
                    33:e9:b9:2e:6e:bd:84:7f:16:b5:28:5d:ea:4a:e2:
                    03:4f:fc:40:31:50:7d:f2:04:c8:d6:ad:36:62:e0:
                    3b:b9:55:4f:15:b2:09:62:70:0c:1f:4d:a5:3c:5a:
                    22:18:b8:0e:5e:b3:cf:a1:5b:8b:1b:87:35:a1:d3:
                    21:d2:be:41:a3:3f:78:e8:45:a6:eb:50:52:15:3e:
                    62:4d:e4:54:22:4c:b7:fd:6f:4e:40:d5:b0:25:81:
                    63:d8:d1:87:b3:15:a0:ed:0c:e7:14:e7:03:68:86:
                    50:98:84:ab:79:1c:0b:83:9f:4d:62:aa:be:95:96:
                    54:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:53:2C:ED:D7:07:95:A7:5E:76:C2:56:AF:3C:52:9C:78:74:60
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32342d3234203d3e20323038393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:eb:75:90:f1:c8:d4:4e:7a:1f:53:c7:5e:5e:41:9d:d7:
         bf:01:da:5c:49:7a:6f:c6:98:39:10:3e:70:a0:1a:81:64:d4:
         9e:9f:2b:ec:58:58:ed:1c:f7:c3:34:44:ef:3e:32:eb:ed:db:
         a9:3b:93:d1:0e:36:0c:15:17:ec:5c:b5:75:6f:80:b1:86:9c:
         31:e5:16:87:90:f2:0b:ce:3d:eb:e7:c3:9a:51:86:07:51:94:
         40:d2:40:47:3c:b1:f6:45:d7:e8:a9:1a:fd:b9:27:88:85:2e:
         c4:98:07:e8:63:14:fb:a5:ac:14:24:44:c7:2f:ca:4a:ec:db:
         77:96:3d:10:a8:74:7c:94:90:de:88:e6:1b:b6:02:22:5f:58:
         58:6c:fe:b9:8e:8a:9e:b7:9e:1f:43:74:a8:08:68:dd:47:12:
         4b:6f:c2:aa:67:96:24:3d:99:d2:64:49:6c:02:0f:eb:a4:9d:
         3f:87:7d:bb:10:14:12:a6:18:3f:c3:9a:c8:8e:38:f7:fd:cf:
         d0:41:1d:1b:71:c3:95:ef:0e:52:3e:33:31:87:7d:e4:73:ad:
         6b:d5:c2:69:83:ad:6f:bf:d0:cc:99:30:85:2a:fd:1d:63:a1:
         0e:d7:14:27:19:fe:d1:68:a0:40:68:28:85:81:e9:02:87:d1:
         67:02:5e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:56 2026 by rpki-client