Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa
File:                     3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=
Subject key identifier:   95:58:9A:CD:3D:8E:39:96:EF:08:52:0E:BB:A6:30:4E:32:B8:5B:63
Certificate issuer:       /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial:       344DEBB56761688ACE9B1406416446F7B69CEA7D
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:38:04 +0000
ROA not before:           Mon 11 May 2026 17:33:04 +0000
ROA not after:            Mon 10 May 2027 17:38:04 +0000
asID:                     131642
IP address blocks:        103.137.62.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
                          rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4d:eb:b5:67:61:68:8a:ce:9b:14:06:41:64:46:f7:b6:9c:ea:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
        Validity
            Not Before: May 11 17:33:04 2026 GMT
            Not After : May 10 17:38:04 2027 GMT
        Subject: CN=95589ACD3D8E3996EF08520EBBA6304E32B85B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:dc:9c:88:bf:36:c2:c1:dd:af:4a:c1:c8:33:
                    f0:59:de:15:ca:42:1c:e8:52:a9:bc:4f:46:8e:e2:
                    ba:14:91:e8:79:63:26:91:b7:de:a6:f6:7d:e0:72:
                    6d:ee:38:c9:ab:c2:d3:8f:61:08:ce:82:bc:e2:22:
                    d6:9d:29:f3:97:3e:31:15:ad:d3:39:4d:54:1d:9b:
                    33:23:f1:96:ee:31:d1:8f:d2:e7:f2:73:c2:1e:76:
                    df:41:83:f0:0f:8e:32:c3:bd:0c:1c:6c:99:03:65:
                    1f:64:da:4a:19:3d:3c:b0:6f:80:84:4f:ba:19:ac:
                    a1:91:39:99:aa:b8:07:f5:34:9f:c1:89:ce:77:68:
                    2c:1e:5c:e3:76:73:0e:fe:24:b8:aa:74:3b:b1:ec:
                    df:75:2f:1e:1f:b7:15:e7:26:61:c8:ad:e7:96:29:
                    d0:20:a8:85:14:5c:77:94:12:a2:c1:7c:18:56:d7:
                    55:c2:d2:99:ef:b7:f1:30:0c:f3:30:0c:bb:66:99:
                    b6:6d:bf:1f:2c:5f:5f:55:02:52:7c:bd:a4:75:f9:
                    9a:ac:ec:c7:63:06:16:7c:31:f2:30:3a:80:90:ae:
                    93:db:94:95:b7:ad:e7:4d:85:68:1b:97:3f:1f:99:
                    30:00:cb:58:12:89:db:9b:bb:0d:8d:09:dc:a7:5c:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:9A:CD:3D:8E:39:96:EF:08:52:0E:BB:A6:30:4E:32:B8:5B:63
            X509v3 Authority Key Identifier:
                keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:7f:e9:86:ab:ee:f2:0d:85:a8:12:a8:58:fd:3c:87:be:
         3e:d6:e9:ab:69:e8:9f:4b:69:a2:db:64:90:f8:99:ff:c6:19:
         a2:a3:ba:24:12:99:60:8e:4a:d1:33:2b:26:47:c6:18:54:ac:
         bb:ae:72:c9:0a:92:c1:c8:b9:ba:4a:1e:d4:7a:3f:eb:86:d1:
         af:45:62:94:28:02:46:c6:3a:dd:b4:85:ae:e4:50:6e:53:58:
         b5:1e:79:c2:ae:3e:9a:26:ad:fa:53:10:2a:62:a7:98:2e:1f:
         b9:a3:5c:25:dc:36:40:be:17:70:cb:02:55:03:c3:45:3e:95:
         35:00:79:e3:ce:17:b0:13:49:63:ff:68:0f:2d:45:d5:14:f4:
         1c:f6:6c:e8:be:07:c2:1e:48:4d:a3:cc:bb:35:53:43:23:1e:
         8d:86:d8:64:a3:f1:9a:f6:68:4b:f5:40:b0:90:ff:b2:e1:13:
         1f:f5:bb:0b:bc:aa:93:77:fa:10:59:28:23:91:54:a4:18:26:
         32:49:96:7e:b0:2c:c8:ec:1f:fe:b7:34:49:4a:cc:19:98:8b:
         de:37:d0:aa:25:57:93:98:11:21:d0:ac:28:c9:27:eb:ec:49:
         c9:69:db:48:96:66:28:7a:e6:bb:f1:9b:52:79:63:45:e5:5f:
         2f:12:cf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:14 2026 by rpki-client