Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MYSENSE/0/3130332e3135392e3132302e302f32332d3234203d3e2037353336.roa
File:                     3130332e3135392e3132302e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier:          HGj5xRMuvvtmQIzof8KslpkotgP8Py8HkTjO64zzy9w=
Subject key identifier:   23:CD:F4:B5:27:75:F4:84:E9:F3:D7:AC:B9:8A:37:4D:AA:8F:96:DB
Certificate issuer:       /CN=30E4756C3689C858A7C34D135FCAFB2BED1133D1
Certificate serial:       270C37F5A9B156995FAABFF8718008B8DA63BE29
Authority key identifier: 30:E4:75:6C:36:89:C8:58:A7:C3:4D:13:5F:CA:FB:2B:ED:11:33:D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30E4756C3689C858A7C34D135FCAFB2BED1133D1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MYSENSE/0/3130332e3135392e3132302e302f32332d3234203d3e2037353336.roa
Signing time:             Mon 11 May 2026 17:56:57 +0000
ROA not before:           Mon 11 May 2026 17:51:57 +0000
ROA not after:            Mon 10 May 2027 17:56:57 +0000
asID:                     7536
IP address blocks:        103.159.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MYSENSE/0/30E4756C3689C858A7C34D135FCAFB2BED1133D1.crl
                          rsync://rpkica.twnic.tw/rpki/MYSENSE/0/30E4756C3689C858A7C34D135FCAFB2BED1133D1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30E4756C3689C858A7C34D135FCAFB2BED1133D1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0c:37:f5:a9:b1:56:99:5f:aa:bf:f8:71:80:08:b8:da:63:be:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30E4756C3689C858A7C34D135FCAFB2BED1133D1
        Validity
            Not Before: May 11 17:51:57 2026 GMT
            Not After : May 10 17:56:57 2027 GMT
        Subject: CN=23CDF4B52775F484E9F3D7ACB98A374DAA8F96DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:84:7a:d5:a1:c2:3a:11:33:ea:fc:4b:73:b7:
                    8b:f2:7c:e6:0c:57:3a:95:8d:9e:63:9f:3f:3a:4b:
                    41:dd:3a:43:b3:a1:5c:f9:3c:59:a7:8b:c3:84:a8:
                    56:16:8e:d0:98:2e:06:a8:05:d7:ce:39:7e:b4:6c:
                    cd:ad:fc:71:0f:cc:c4:4a:25:3a:83:21:a4:7c:1a:
                    0f:60:3e:62:83:3b:d7:ae:98:48:66:a2:99:8d:86:
                    59:3a:8c:f6:be:de:bc:3d:35:ab:69:3e:40:ec:d9:
                    70:8b:d5:6e:dc:1c:ee:14:7a:0c:69:18:9f:bd:f5:
                    96:d8:6b:fb:93:f6:ca:24:27:60:cb:c7:c3:77:2b:
                    c4:0a:c2:df:f1:dd:7f:c7:a2:45:4e:ea:b2:da:f2:
                    5c:52:7d:1e:d9:b9:f9:dd:2f:68:09:ad:8b:24:52:
                    5f:7e:38:c0:24:28:e1:3e:dd:77:1a:58:aa:82:e9:
                    6e:4f:1b:c3:e4:06:e0:d3:95:31:a2:e7:45:ce:a7:
                    45:30:13:9f:96:36:22:4f:5c:32:10:51:b1:ef:1a:
                    bd:17:5e:8f:5f:ae:da:71:5b:aa:96:65:ea:e7:5d:
                    11:14:ed:43:59:42:cc:37:9e:a2:f1:c9:4f:39:fd:
                    8e:51:d8:67:9c:ce:91:63:e7:c3:e6:1b:a6:bf:35:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CD:F4:B5:27:75:F4:84:E9:F3:D7:AC:B9:8A:37:4D:AA:8F:96:DB
            X509v3 Authority Key Identifier:
                keyid:30:E4:75:6C:36:89:C8:58:A7:C3:4D:13:5F:CA:FB:2B:ED:11:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MYSENSE/0/30E4756C3689C858A7C34D135FCAFB2BED1133D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30E4756C3689C858A7C34D135FCAFB2BED1133D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MYSENSE/0/3130332e3135392e3132302e302f32332d3234203d3e2037353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:3b:c7:bf:1f:ce:4e:e1:02:87:a3:61:e5:31:3e:fb:0c:0d:
         05:ec:94:e5:80:8e:95:1d:df:c8:5a:57:21:70:5c:76:c7:21:
         1f:ca:51:02:4a:d4:b5:ef:d6:01:4d:a8:2f:43:80:83:47:03:
         06:90:aa:d7:0e:af:2c:e4:4b:f0:ab:8f:78:94:e5:60:40:4c:
         46:de:69:e0:1c:64:34:d8:26:a1:a0:bd:82:61:7a:df:01:26:
         3a:cb:a0:a4:9e:f8:e2:42:70:2d:6d:4b:fd:9a:15:c0:3f:e3:
         2c:b2:e7:83:7c:76:d9:20:8c:16:2b:13:ce:ab:b7:0a:35:a5:
         a3:8b:73:ab:d5:e6:e4:9f:ec:ff:66:09:cf:b4:42:9b:de:d5:
         79:fc:1a:7e:7f:8b:f5:7c:2f:a8:4f:0e:6e:f4:c7:a3:7e:41:
         37:82:61:c2:50:4b:79:a8:af:7f:a7:3f:2a:54:2e:6e:36:64:
         8d:2b:ac:a8:1d:18:00:03:f5:a7:74:20:df:f6:71:b3:d9:66:
         10:1b:e3:3d:61:05:b3:61:75:05:16:b0:9e:22:55:dd:64:3d:
         a8:ee:92:0a:01:f9:cf:a7:51:b8:5c:2e:ff:ae:b9:96:da:f4:
         1a:4f:dd:4d:16:13:7a:16:f4:fb:29:77:23:32:1e:5c:86:72:
         d6:b0:54:e6
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUJww39amxVplfqr/4cYAIuNpjvikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBFNDc1NkMzNjg5Qzg1OEE3QzM0RDEzNUZDQUZCMkJF
RDExMzNEMTAeFw0yNjA1MTExNzUxNTdaFw0yNzA1MTAxNzU2NTdaMDMxMTAvBgNV
BAMTKDIzQ0RGNEI1Mjc3NUY0ODRFOUYzRDdBQ0I5OEEzNzREQUE4Rjk2REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhHrVocI6ETPq/Etzt4vyfOYM
VzqVjZ5jnz86S0HdOkOzoVz5PFmni8OEqFYWjtCYLgaoBdfOOX60bM2t/HEPzMRK
JTqDIaR8Gg9gPmKDO9eumEhmopmNhlk6jPa+3rw9NatpPkDs2XCL1W7cHO4Uegxp
GJ+99ZbYa/uT9sokJ2DLx8N3K8QKwt/x3X/HokVO6rLa8lxSfR7ZufndL2gJrYsk
Ul9+OMAkKOE+3XcaWKqC6W5PG8PkBuDTlTGi50XOp0UwE5+WNiJPXDIQUbHvGr0X
Xo9frtpxW6qWZernXREU7UNZQsw3nqLxyU85/Y5R2GeczpFj58PmG6a/NamlAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUI830tSd19ITp89esuYo3TaqPltswHwYDVR0j
BBgwFoAUMOR1bDaJyFinw00TX8r7K+0RM9EwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVlTRU5T
RS8wLzMwRTQ3NTZDMzY4OUM4NThBN0MzNEQxMzVGQ0FGQjJCRUQxMTMzRDEuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzBFNDc1NkMzNjg5Qzg1OEE3QzM0RDEzNUZD
QUZCMkJFRDExMzNEMS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01ZU0VOU0UvMC8zMTMwMzMyZTMx
MzUzOTJlMzEzMjMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzczNTMzMzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnn3gwDQYJKoZIhvcNAQELBQADggEBAKQ7x78fzk7hAoejYeUxPvsM
DQXslOWAjpUd38haVyFwXHbHIR/KUQJK1LXv1gFNqC9DgINHAwaQqtcOryzkS/Cr
j3iU5WBATEbeaeAcZDTYJqGgvYJhet8BJjrLoKSe+OJCcC1tS/2aFcA/4yyy54N8
dtkgjBYrE86rtwo1paOLc6vV5uSf7P9mCc+0Qpve1Xn8Gn5/i/V8L6hPDm70x6N+
QTeCYcJQS3mor3+nPypULm42ZI0rrKgdGAAD9ad0IN/2cbPZZhAb4z1hBbNhdQUW
sJ4iVd1kPajukgoB+c+nUbhcLv+uuZba9BpP3U0WE3oW9PspdyMyHlyGctawVOY=
-----END CERTIFICATE-----
Generated at Wed May 13 06:19:18 2026 by rpki-client