Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa
File:                     3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=
Subject key identifier:   AA:19:44:97:F8:75:8C:75:02:D0:5C:A4:D3:F9:41:94:FC:F3:1D:04
Certificate issuer:       /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial:       4E1AF7479F993A773E2FAF74148E214651028B09
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:38:04 +0000
ROA not before:           Mon 11 May 2026 17:33:04 +0000
ROA not after:            Mon 10 May 2027 17:38:04 +0000
asID:                     131642
IP address blocks:        103.137.246.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
                          rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1a:f7:47:9f:99:3a:77:3e:2f:af:74:14:8e:21:46:51:02:8b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
        Validity
            Not Before: May 11 17:33:04 2026 GMT
            Not After : May 10 17:38:04 2027 GMT
        Subject: CN=AA194497F8758C7502D05CA4D3F94194FCF31D04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:db:16:4d:79:76:81:dd:f7:73:5a:69:f5:
                    58:12:09:45:37:2e:0c:b1:b8:1b:72:48:0d:da:d9:
                    db:e4:a9:4b:61:bc:ce:2b:23:b6:7e:e0:87:dd:41:
                    87:e9:56:ae:97:15:bf:94:4e:8b:10:a9:3d:2d:cc:
                    30:7d:a5:dd:97:2b:f7:75:a5:5b:19:95:db:c4:72:
                    3d:4a:58:3a:4b:6b:2d:44:7b:80:78:73:18:e8:af:
                    cc:9c:c1:26:3b:17:c4:e3:57:c7:a6:98:35:a9:4f:
                    2d:f9:3d:33:e6:07:a7:51:47:31:4f:e8:e5:d0:53:
                    33:08:11:da:d9:d8:77:b0:9e:5a:e6:b8:2f:34:84:
                    b8:47:38:4f:ba:f0:45:6f:7b:b2:32:97:d3:c7:22:
                    6f:bf:e0:30:a1:d5:67:a7:e8:de:ba:3d:31:e5:b0:
                    e9:49:05:b1:93:19:ed:99:b9:b2:f1:e7:bb:2f:a4:
                    f1:ad:39:8d:bb:36:51:42:a4:d7:70:f4:ab:66:b7:
                    a7:a3:71:f8:79:a0:7b:d7:bb:46:e7:27:be:4e:3b:
                    d0:27:c3:d9:cd:d4:19:dc:52:eb:64:a1:a8:68:89:
                    ae:1e:3c:3c:69:e5:64:cb:4c:5d:bd:ef:75:a0:a2:
                    eb:11:58:37:b1:8b:11:1d:88:e3:49:6f:dd:b3:89:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:19:44:97:F8:75:8C:75:02:D0:5C:A4:D3:F9:41:94:FC:F3:1D:04
            X509v3 Authority Key Identifier:
                keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:79:a9:94:c6:62:53:a3:b0:4f:a5:ea:cb:31:a4:1d:85:31:
         7d:f2:af:bb:3e:5c:72:c4:67:36:6d:ae:53:ec:b9:fa:93:d0:
         e4:6d:13:3b:82:70:e8:34:81:17:9f:46:9d:48:16:25:7a:e6:
         bf:ed:7e:1e:27:9c:e3:c1:3f:c3:8d:9a:e4:76:b1:72:dd:80:
         df:6e:2b:1b:94:3e:fe:67:91:2e:b7:9d:3e:4d:50:44:d1:e7:
         ea:28:23:b6:86:db:72:99:ec:f6:b4:84:9c:49:37:2d:01:2d:
         dd:06:ba:04:30:12:3b:4e:8f:3f:f8:b0:56:97:b3:15:53:65:
         79:83:d5:5c:94:11:2f:44:47:45:e9:c4:6f:cf:cf:c4:70:8d:
         ad:8f:ca:66:7b:47:84:2d:23:35:f9:0e:7a:5d:13:f7:60:c0:
         b0:4b:e0:0e:b5:8e:75:fd:5e:9f:95:0b:bd:40:2f:39:61:4b:
         15:b1:e0:61:18:89:a7:1e:c6:48:15:f1:01:e5:67:88:b3:f3:
         ef:8a:cd:6f:c2:00:db:88:cc:99:42:39:34:36:ba:2a:63:c8:
         07:17:ea:da:0a:37:3c:5f:a8:cb:54:2e:2d:bc:b0:62:25:4d:
         ad:7c:05:7b:6a:0b:fc:ac:aa:f2:38:65:99:49:b1:b1:73:43:
         4d:33:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:59 2026 by rpki-client