Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NKBNET/0/3130332e3133302e34382e302f32322d3234203d3e2037343832.roa
File:                     3130332e3133302e34382e302f32322d3234203d3e2037343832.roa (raw, json)
Hash identifier:          1XWO79v70d0DECH7Xj/kPutEjOsPSVEabfarX+KunFQ=
Subject key identifier:   CA:F0:32:87:5E:57:D1:00:63:98:C8:D1:D6:06:24:BA:09:C2:86:7D
Certificate issuer:       /CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E
Certificate serial:       255B6B085F424E9B6FAA164EA6846170CA97219A
Authority key identifier: 5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NKBNET/0/3130332e3133302e34382e302f32322d3234203d3e2037343832.roa
Signing time:             Mon 11 May 2026 16:45:44 +0000
ROA not before:           Mon 11 May 2026 16:40:44 +0000
ROA not after:            Mon 10 May 2027 16:45:44 +0000
asID:                     7482
IP address blocks:        103.130.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl
                          rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5b:6b:08:5f:42:4e:9b:6f:aa:16:4e:a6:84:61:70:ca:97:21:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A2BEE24395B36F4FFA95753F6731515C588BA9E
        Validity
            Not Before: May 11 16:40:44 2026 GMT
            Not After : May 10 16:45:44 2027 GMT
        Subject: CN=CAF032875E57D1006398C8D1D60624BA09C2867D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:49:40:03:3e:21:9d:3e:e6:68:c9:6c:f7:
                    7f:b1:96:f9:aa:2c:96:f1:5a:cf:fe:0b:68:0c:20:
                    47:b0:93:5f:f9:97:41:75:14:06:50:5e:b2:df:9f:
                    a7:13:78:d3:7d:11:98:22:16:98:19:e8:a1:54:c0:
                    f4:f1:39:95:52:14:25:3e:6a:36:d3:0a:4c:f8:18:
                    8c:de:4f:3f:52:3e:8d:3f:89:a9:f0:d3:65:97:27:
                    38:df:aa:2e:7c:2e:49:1d:35:de:8d:bf:ac:0c:1f:
                    b6:48:49:47:85:69:b5:36:e6:91:34:ab:15:8c:23:
                    72:13:85:bf:aa:66:e2:e0:0d:7d:2f:56:6a:db:8b:
                    02:86:ab:de:58:14:20:46:a6:c3:f1:90:bb:14:cd:
                    8e:b8:7d:51:61:f5:1f:7a:64:c4:25:b1:89:f2:e0:
                    b0:3a:f1:aa:3d:61:ca:2b:05:08:9d:71:0d:86:cf:
                    0a:75:14:00:2f:39:a5:94:07:ad:4a:f3:9a:06:cd:
                    ac:ca:21:a4:cc:a4:8a:28:dd:74:cf:2f:f1:0a:03:
                    67:44:b8:2c:90:28:59:8e:96:ae:98:94:e4:c7:c1:
                    19:83:56:f1:b6:d8:d4:d9:a7:d5:95:6b:93:98:6d:
                    52:f6:8d:e9:3f:f5:3b:df:9c:18:69:03:5b:c0:44:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F0:32:87:5E:57:D1:00:63:98:C8:D1:D6:06:24:BA:09:C2:86:7D
            X509v3 Authority Key Identifier:
                keyid:5A:2B:EE:24:39:5B:36:F4:FF:A9:57:53:F6:73:15:15:C5:88:BA:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/5A2BEE24395B36F4FFA95753F6731515C588BA9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5A2BEE24395B36F4FFA95753F6731515C588BA9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKBNET/0/3130332e3133302e34382e302f32322d3234203d3e2037343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:bd:ab:2c:c4:3e:c9:e5:a9:b0:08:a5:c9:a8:9d:d2:9c:6c:
         f8:57:0b:94:5a:05:6d:2b:c5:7c:6a:38:ec:21:76:37:4e:a4:
         98:57:67:d1:f6:35:69:fd:2c:01:68:4b:07:54:d9:14:c3:11:
         6b:e6:15:16:2d:83:4a:4b:d7:3e:8f:27:19:aa:ea:42:b2:34:
         80:66:a1:ed:1f:98:ca:ba:55:7b:ec:78:81:8c:44:40:24:55:
         bd:df:9b:51:df:74:67:a6:1d:31:44:d3:63:31:0a:32:23:01:
         1b:f0:38:e1:44:0c:91:73:08:00:e5:54:ab:a3:a3:56:39:21:
         af:15:2b:24:d0:b6:a8:44:73:75:bc:56:02:83:35:86:40:b3:
         ca:07:0b:08:48:5b:80:0e:7e:32:ba:66:f6:bb:1d:11:a6:97:
         55:39:87:13:7d:79:53:31:e4:77:cb:ce:46:3a:89:31:35:77:
         f5:35:b8:3d:1d:99:9b:4a:bd:dd:27:37:bd:10:55:da:07:34:
         8e:73:4c:9f:e4:63:d8:f1:24:57:9e:ac:38:c7:98:5d:cb:1c:
         0b:8e:c7:02:07:d7:54:54:bb:e8:03:0a:26:f9:08:90:ac:68:
         1b:91:ab:60:0a:44:16:6f:98:81:50:9e:dd:b3:df:6a:47:7a:
         66:7d:45:23
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUJVtrCF9CTptvqhZOpoRhcMqXIZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVD
NTg4QkE5RTAeFw0yNjA1MTExNjQwNDRaFw0yNzA1MTAxNjQ1NDRaMDMxMTAvBgNV
BAMTKENBRjAzMjg3NUU1N0QxMDA2Mzk4QzhEMUQ2MDYyNEJBMDlDMjg2N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9UlAAz4hnT7maMls93+xlvmq
LJbxWs/+C2gMIEewk1/5l0F1FAZQXrLfn6cTeNN9EZgiFpgZ6KFUwPTxOZVSFCU+
ajbTCkz4GIzeTz9SPo0/ianw02WXJzjfqi58LkkdNd6Nv6wMH7ZISUeFabU25pE0
qxWMI3IThb+qZuLgDX0vVmrbiwKGq95YFCBGpsPxkLsUzY64fVFh9R96ZMQlsYny
4LA68ao9YcorBQidcQ2Gzwp1FAAvOaWUB61K85oGzazKIaTMpIoo3XTPL/EKA2dE
uCyQKFmOlq6YlOTHwRmDVvG22NTZp9WVa5OYbVL2jek/9TvfnBhpA1vARNvxAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQUyvAyh15X0QBjmMjR1gYkugnChn0wHwYDVR0j
BBgwFoAUWivuJDlbNvT/qVdT9nMVFcWIup4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVU
LzAvNUEyQkVFMjQzOTVCMzZGNEZGQTk1NzUzRjY3MzE1MTVDNTg4QkE5RS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS81QTJCRUUyNDM5NUIzNkY0RkZBOTU3NTNGNjcz
MTUxNUM1ODhCQTlFLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTktCTkVULzAvMzEzMDMzMmUzMTMz
MzAyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzM0MzgzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmeCMDANBgkqhkiG9w0BAQsFAAOCAQEAKb2rLMQ+yeWpsAilyaid0pxs+FcL
lFoFbSvFfGo47CF2N06kmFdn0fY1af0sAWhLB1TZFMMRa+YVFi2DSkvXPo8nGarq
QrI0gGah7R+YyrpVe+x4gYxEQCRVvd+bUd90Z6YdMUTTYzEKMiMBG/A44UQMkXMI
AOVUq6OjVjkhrxUrJNC2qERzdbxWAoM1hkCzygcLCEhbgA5+Mrpm9rsdEaaXVTmH
E315UzHkd8vORjqJMTV39TW4PR2Zm0q93Sc3vRBV2gc0jnNMn+Rj2PEkV56sOMeY
XcscC47HAgfXVFS76AMKJvkIkKxoG5GrYApEFm+YgVCe3bPfakd6Zn1FIw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:27:18 2026 by rpki-client