Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa
File:                     3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=
Subject key identifier:   2E:AE:11:21:9C:4F:00:42:3B:A8:37:A9:3F:68:58:A7:5D:2C:6B:54
Certificate issuer:       /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8
Certificate serial:       7D5693089343A4D1D5FEAE632C426C5CD4E70C0B
Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa
Signing time:             Mon 11 May 2026 17:31:22 +0000
ROA not before:           Mon 11 May 2026 17:26:22 +0000
ROA not after:            Mon 10 May 2027 17:31:22 +0000
asID:                     8075
IP address blocks:        103.131.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl
                          rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:56:93:08:93:43:a4:d1:d5:fe:ae:63:2c:42:6c:5c:d4:e7:0c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8
        Validity
            Not Before: May 11 17:26:22 2026 GMT
            Not After : May 10 17:31:22 2027 GMT
        Subject: CN=2EAE11219C4F00423BA837A93F6858A75D2C6B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a7:ee:8b:49:c9:94:23:9a:4c:06:6a:09:6a:
                    57:78:bf:13:a8:70:1e:46:f6:d3:27:4a:dc:6b:7d:
                    fd:d8:f1:76:fa:0a:6a:96:c1:2e:5a:eb:c7:67:22:
                    a8:72:ce:14:15:ba:82:c4:38:40:fa:e9:51:c4:1d:
                    13:3e:eb:9b:a2:98:fb:e9:3f:cd:56:fa:66:b7:a2:
                    84:29:eb:d6:df:83:ae:c3:ef:a6:35:21:70:4c:42:
                    50:6d:c6:1c:20:ec:cf:5a:85:14:b9:12:11:00:54:
                    55:96:8c:9c:41:30:2e:8e:c4:ae:31:07:bc:12:9e:
                    10:b0:90:ba:81:40:1a:8f:fa:47:3e:2e:45:80:17:
                    91:65:2f:c5:5b:9c:25:ef:05:0b:fd:16:24:3a:b1:
                    f1:0c:cd:b1:7e:e1:e9:ba:1e:f9:85:72:20:86:81:
                    2c:17:3e:60:49:e3:dd:d9:8d:c7:a9:3e:19:57:d8:
                    07:44:39:4a:3e:08:5e:98:43:fc:3d:9f:2b:bc:f8:
                    74:8d:5d:9a:08:b1:00:20:59:9f:3a:4f:13:f5:b8:
                    be:72:df:99:b4:d3:66:ed:96:37:6b:eb:f9:c7:36:
                    26:ac:2f:98:a9:44:ff:91:7b:da:a8:c7:57:f3:7c:
                    68:28:e9:e7:63:a8:73:30:1a:0e:ab:df:d5:b0:fb:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:11:21:9C:4F:00:42:3B:A8:37:A9:3F:68:58:A7:5D:2C:6B:54
            X509v3 Authority Key Identifier:
                keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9e:9c:37:a8:a2:fa:19:7e:fe:e1:b4:48:8a:4d:de:54:05:
         85:22:be:7a:b0:13:00:a8:66:7f:8f:4b:c5:81:59:7a:c7:b5:
         77:61:07:b6:23:ac:e5:f8:f0:65:e2:43:d1:08:d9:d6:d6:2b:
         10:8a:6a:36:8f:00:a7:7b:e5:40:96:ce:17:52:a2:cf:ee:89:
         c5:18:04:cf:8b:03:4f:af:00:ca:ca:79:3f:ef:1c:ba:f7:f0:
         18:e2:01:39:36:b0:c6:eb:c7:c2:42:bc:0e:7d:9c:36:16:62:
         38:95:90:24:c3:f5:09:ab:f7:53:ae:c2:89:c3:1d:6e:e3:83:
         c9:35:69:03:90:50:e9:0a:3d:a6:fa:9c:8d:ac:9f:09:8b:48:
         bb:2a:13:b3:d5:04:52:dc:14:f2:9e:b1:5b:9e:2f:f0:e7:be:
         a2:a3:66:6b:0e:c8:65:31:81:8a:81:79:6b:2b:2b:06:b3:b4:
         06:19:a3:10:5b:ec:47:6b:a3:a6:ef:31:d9:0e:cc:42:ea:6f:
         50:40:cf:7c:72:19:12:23:ec:96:bf:18:47:c4:0a:30:39:1c:
         c5:59:5f:46:5a:e0:fa:a5:6f:5a:36:27:71:b6:20:03:85:db:
         6d:45:54:88:8e:22:11:f4:a2:71:f3:2f:64:a8:7a:4b:15:60:
         14:0c:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:04 2026 by rpki-client