Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3135302e302f32342d3234203d3e20313331353933.roa
File:                     3130332e34322e3135302e302f32342d3234203d3e20313331353933.roa (raw, json)
Hash identifier:          DvjaE0rOOS8Dfbo1FyKnc3vMaf8ZSVw5iUgo/IGe4/g=
Subject key identifier:   B9:28:96:D5:DF:86:CF:4B:73:90:88:57:69:A6:D3:4A:53:C8:C0:C0
Certificate issuer:       /CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
Certificate serial:       7C6A3C9B71D26DFD88DFCEEAC8BF68112DEB1370
Authority key identifier: E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3135302e302f32342d3234203d3e20313331353933.roa
Signing time:             Mon 11 May 2026 17:07:23 +0000
ROA not before:           Mon 11 May 2026 17:02:23 +0000
ROA not after:            Mon 10 May 2027 17:07:23 +0000
asID:                     131593
IP address blocks:        103.42.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl
                          rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:05:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6a:3c:9b:71:d2:6d:fd:88:df:ce:ea:c8:bf:68:11:2d:eb:13:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
        Validity
            Not Before: May 11 17:02:23 2026 GMT
            Not After : May 10 17:07:23 2027 GMT
        Subject: CN=B92896D5DF86CF4B7390885769A6D34A53C8C0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:6e:de:12:f8:03:8c:c4:87:1e:89:25:08:
                    76:6e:42:a5:f9:fd:5f:f3:1e:a9:17:75:d5:ca:68:
                    b7:a7:18:63:62:d7:73:96:13:5a:3a:5d:29:28:cc:
                    46:4d:98:20:21:73:d6:91:34:35:37:1f:8d:3d:a4:
                    ba:dd:ae:88:43:10:b3:37:3e:ac:e7:7c:46:47:3b:
                    89:bb:89:b5:c0:6f:2d:22:f9:76:67:2f:68:40:05:
                    a1:cb:a0:01:c8:f5:6f:12:a1:54:4c:fc:77:b9:65:
                    ef:18:c9:ab:36:cc:13:b3:b5:ca:9e:4c:56:21:df:
                    b9:5a:12:fb:bd:12:da:dc:85:7d:75:87:52:46:8c:
                    c9:57:e3:2c:d3:13:f3:ee:fb:74:25:3e:35:e6:90:
                    bc:37:e9:74:73:39:67:55:22:07:93:ad:58:7c:e4:
                    5f:ae:41:62:60:f9:be:8c:c5:6b:d3:76:a3:b8:6d:
                    87:7b:9e:4b:ca:97:59:a4:6e:2d:4c:1f:4f:41:e6:
                    6d:50:07:a9:07:9e:df:60:82:79:72:ac:7e:9d:74:
                    92:97:36:9c:38:29:7f:0f:85:ad:49:54:fd:d2:14:
                    88:e0:ff:9f:9a:85:71:d5:91:25:62:52:03:48:62:
                    c3:24:d6:87:35:69:cf:ee:45:dc:9b:1f:f3:c6:8e:
                    e1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:28:96:D5:DF:86:CF:4B:73:90:88:57:69:A6:D3:4A:53:C8:C0:C0
            X509v3 Authority Key Identifier:
                keyid:E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3135302e302f32342d3234203d3e20313331353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:50:46:44:b3:14:00:d8:7c:dd:c0:a8:d1:87:b9:42:6a:
         08:40:b5:19:2f:11:aa:5c:98:62:88:c9:58:8f:ac:b7:db:72:
         8c:5e:7b:87:e3:a4:60:eb:6a:97:7a:1e:72:6d:e8:05:04:6c:
         d8:1c:8c:74:12:da:47:83:c3:54:4c:6b:e2:d4:1f:29:36:dd:
         4c:e2:4d:60:70:23:23:de:15:a0:53:a2:1b:07:92:c0:70:20:
         8c:7e:f2:e9:2f:eb:2f:6c:c8:cc:0e:df:b1:be:7f:26:aa:98:
         f9:f5:80:5a:9b:02:ff:c1:95:b0:07:ee:22:68:ef:8b:f2:51:
         ad:f4:88:bd:cd:da:6e:8e:45:58:6c:64:d5:f3:6c:db:f6:34:
         48:21:f5:5b:cd:49:9b:e3:e1:a7:9d:58:8b:be:bf:c6:d5:57:
         04:9d:64:8d:04:f0:81:ae:51:d5:89:74:66:fa:8e:19:58:58:
         e8:f9:da:8d:e5:3f:e3:1d:32:c6:fd:ad:c7:28:8f:36:c9:11:
         98:a4:82:ed:68:92:e7:ff:32:8e:88:81:c8:92:14:b5:19:d8:
         9b:f4:8d:75:4e:ad:d7:d0:19:a0:7a:e9:14:29:db:0a:09:3c:
         12:b5:7e:be:02:ab:86:44:3f:a9:59:bb:ab:0b:cd:a2:1d:76:
         90:40:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:56 2026 by rpki-client