Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32322d3234203d3e203138303436.roa
File:                     3130332e3133312e3132342e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier:          rK1iRwNfNRJEa7KNu9l0vHobucc63Sa5FSJCs2IflRA=
Subject key identifier:   4E:16:2D:B6:46:7A:98:D9:35:3B:F3:30:E9:36:4D:5F:9C:60:36:FE
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       3424A155333401CFAED0037DC4A1EBA5E11DD5B5
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32322d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:52:46 +0000
ROA not before:           Mon 11 May 2026 17:47:46 +0000
ROA not after:            Mon 10 May 2027 17:52:46 +0000
asID:                     18046
IP address blocks:        103.131.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:24:a1:55:33:34:01:cf:ae:d0:03:7d:c4:a1:eb:a5:e1:1d:d5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: May 11 17:47:46 2026 GMT
            Not After : May 10 17:52:46 2027 GMT
        Subject: CN=4E162DB6467A98D9353BF330E9364D5F9C6036FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:27:fe:08:27:48:66:85:62:a9:e2:4f:bb:
                    f7:da:83:c5:58:bb:12:db:e8:c3:db:7d:d7:63:cb:
                    66:cf:44:5c:22:33:6f:e8:ea:28:4f:58:e8:33:c0:
                    17:ac:cf:7e:76:b7:44:f4:60:b0:73:ff:c8:bf:60:
                    fc:35:15:fd:1e:b9:67:ab:5a:06:98:99:1e:0b:98:
                    84:f3:c0:74:7a:83:13:c8:fc:ad:8d:c5:70:a0:ec:
                    33:79:f1:d4:03:38:b2:99:10:59:ad:58:56:68:dd:
                    d3:f8:be:59:01:a7:e5:06:be:8d:08:95:59:1d:6c:
                    47:58:4f:55:e9:b2:83:d5:a0:54:bf:ff:f9:09:ce:
                    9c:33:82:12:41:c6:59:1b:60:55:72:21:33:28:86:
                    65:23:f0:2d:b7:bf:1d:45:29:72:ba:50:2e:9a:17:
                    79:c7:a5:89:9e:d1:63:29:2d:a3:49:14:1a:6e:29:
                    04:b0:52:da:72:bd:bc:72:8b:4d:7a:7b:e6:aa:2a:
                    19:71:02:e8:b5:88:8e:8c:d0:b8:bd:4c:26:44:85:
                    42:4f:dd:c9:77:bf:13:52:b2:5c:37:c6:c2:28:c2:
                    68:90:86:c9:e8:fc:74:1f:81:d8:86:ff:4c:43:01:
                    1b:e7:90:02:04:41:aa:93:45:cc:16:3a:5f:69:61:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:16:2D:B6:46:7A:98:D9:35:3B:F3:30:E9:36:4D:5F:9C:60:36:FE
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32322d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:fa:36:b7:78:f0:a7:7a:d5:2d:61:54:ef:67:19:79:b7:
         61:90:99:cb:10:17:21:a5:a0:4e:31:4e:b2:58:50:75:c4:46:
         8a:42:f0:b3:3f:10:3d:49:15:bc:af:4e:96:e9:7a:ab:12:6c:
         a1:95:29:6c:96:07:c8:fd:33:f4:fd:06:f9:42:06:4a:b9:d9:
         d4:b2:6b:65:63:a6:17:54:f5:1b:d5:ec:33:f2:42:c6:ad:dc:
         e7:43:6a:d4:a4:79:b2:99:58:30:f9:e6:e3:d5:2b:95:b0:bf:
         25:38:8f:31:00:9c:94:73:79:0b:6b:83:94:a5:b1:17:94:50:
         52:9e:57:00:66:82:d3:b3:2a:30:dd:3e:b8:d5:4b:3b:eb:4e:
         4d:0d:d4:24:42:27:47:22:f8:00:3c:ad:dd:18:96:87:3d:9c:
         bd:64:ca:cd:25:1e:34:0e:0a:0c:bf:99:00:63:95:b9:d0:89:
         f3:88:1d:bf:3d:d5:c8:da:ab:ed:04:8f:ce:7c:b8:9a:76:ac:
         50:08:12:6c:1b:35:ad:9c:22:44:10:3c:61:01:e5:76:68:f9:
         1c:5d:4f:07:16:86:9b:94:2c:9d:27:d5:5d:22:b1:ef:73:36:
         6e:3b:2c:5c:ba:c5:c8:d0:97:6a:ab:53:74:d9:cd:13:76:c2:
         ef:7c:04:f6
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUNCShVTM0Ac+u0AN9xKHrpeEd1bUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUwNjczMTRDRkM2NTA5ODM4NkE5N0U4MTEwRjc4N0Uw
NzNDQTUxRTAeFw0yNjA1MTExNzQ3NDZaFw0yNzA1MTAxNzUyNDZaMDMxMTAvBgNV
BAMTKDRFMTYyREI2NDY3QTk4RDkzNTNCRjMzMEU5MzY0RDVGOUM2MDM2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQyf+CCdIZoViqeJPu/fag8VY
uxLb6MPbfddjy2bPRFwiM2/o6ihPWOgzwBesz352t0T0YLBz/8i/YPw1Ff0euWer
WgaYmR4LmITzwHR6gxPI/K2NxXCg7DN58dQDOLKZEFmtWFZo3dP4vlkBp+UGvo0I
lVkdbEdYT1XpsoPVoFS///kJzpwzghJBxlkbYFVyITMohmUj8C23vx1FKXK6UC6a
F3nHpYme0WMpLaNJFBpuKQSwUtpyvbxyi016e+aqKhlxAui1iI6M0Li9TCZEhUJP
3cl3vxNSslw3xsIowmiQhsno/HQfgdiG/0xDARvnkAIEQaqTRcwWOl9pYYmXAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUThYttkZ6mNk1O/Mw6TZNX5xgNv4wHwYDVR0j
BBgwFoAU5QZzFM/GUJg4apfoEQ94fgc8pR4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVBPV0VS
LzAvRTUwNjczMTRDRkM2NTA5ODM4NkE5N0U4MTEwRjc4N0UwNzNDQTUxRS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FNTA2NzMxNENGQzY1MDk4Mzg2QTk3RTgxMTBG
Nzg3RTA3M0NBNTFFLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVBPV0VSLzAvMzEzMDMzMmUzMTMz
MzEyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJng3wwDQYJKoZIhvcNAQELBQADggEBAKi2+ja3ePCnetUtYVTvZxl5
t2GQmcsQFyGloE4xTrJYUHXERopC8LM/ED1JFbyvTpbpeqsSbKGVKWyWB8j9M/T9
BvlCBkq52dSya2VjphdU9RvV7DPyQsat3OdDatSkebKZWDD55uPVK5WwvyU4jzEA
nJRzeQtrg5SlsReUUFKeVwBmgtOzKjDdPrjVSzvrTk0N1CRCJ0ci+AA8rd0Yloc9
nL1kys0lHjQOCgy/mQBjlbnQifOIHb891cjaq+0Ej858uJp2rFAIEmwbNa2cIkQQ
PGEB5XZo+RxdTwcWhpuULJ0n1V0ise9zNm47LFy6xcjQl2qrU3TZzRN2wu98BPY=
-----END CERTIFICATE-----
Generated at Wed May 13 04:55:08 2026 by rpki-client