Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa
File:                     3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=
Subject key identifier:   C9:0E:B4:FA:55:B4:96:D6:F9:42:AA:FC:49:7D:EC:31:63:37:D1:2A
Certificate issuer:       /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial:       12FBCC4643976A87852A3E384D6FFDA0B24A0F9D
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:37:52 +0000
ROA not before:           Mon 11 May 2026 17:32:52 +0000
ROA not after:            Mon 10 May 2027 17:37:52 +0000
asID:                     131642
IP address blocks:        103.148.72.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
                          rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fb:cc:46:43:97:6a:87:85:2a:3e:38:4d:6f:fd:a0:b2:4a:0f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
        Validity
            Not Before: May 11 17:32:52 2026 GMT
            Not After : May 10 17:37:52 2027 GMT
        Subject: CN=C90EB4FA55B496D6F942AAFC497DEC316337D12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:24:24:80:02:1c:4a:57:81:de:7b:0f:77:
                    8c:30:51:7c:ee:1b:fe:e2:0c:99:d5:76:92:14:54:
                    fd:0a:e7:7f:3f:33:f8:dc:ad:dc:c1:ce:b5:1a:c1:
                    e2:ea:cb:de:18:6a:84:bf:11:ac:6f:f5:6d:00:73:
                    f5:6c:8e:15:c9:ae:24:d8:9c:db:9e:c8:a7:5f:04:
                    8a:c1:47:ec:ad:7f:d5:e7:7a:60:3c:26:66:ce:e3:
                    7a:0d:d2:e7:cb:bd:c1:82:8b:ff:bd:08:8b:9b:53:
                    f7:46:2a:e5:5d:48:fb:d6:1c:75:01:7e:e8:27:94:
                    98:af:7b:df:18:2d:37:99:2d:bf:7c:f8:c6:a0:0b:
                    a2:5e:57:fa:4e:4c:94:aa:0e:ff:6e:b8:4e:95:d6:
                    f7:18:0d:54:2f:1c:7a:4d:e9:3a:9d:54:e6:a8:9c:
                    97:12:b7:c3:cb:ee:b4:39:fe:dd:0e:0c:d7:75:c1:
                    45:79:1b:5f:54:ad:44:d9:b7:05:2c:a5:49:bd:ec:
                    02:84:38:04:f3:13:31:11:c7:ea:6b:59:1b:8b:fe:
                    5f:22:0c:24:8b:89:e3:6b:31:4c:62:9f:1f:d5:7a:
                    96:cc:9a:7e:95:20:d0:f1:7e:cb:39:70:d2:dd:c2:
                    4b:99:41:9e:51:2b:db:9c:b6:60:e8:d9:1b:66:f3:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0E:B4:FA:55:B4:96:D6:F9:42:AA:FC:49:7D:EC:31:63:37:D1:2A
            X509v3 Authority Key Identifier:
                keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:10:e6:a5:42:da:c2:d5:4f:97:69:fc:c7:d2:15:64:b3:02:
         70:98:9f:28:84:4b:db:9a:59:28:20:50:72:97:5d:11:82:64:
         db:a2:f9:c4:5a:31:4e:b9:f8:43:24:0d:80:82:97:ec:99:a7:
         f1:5e:2f:e3:78:8f:46:c6:72:64:97:e5:1b:3f:27:d6:42:99:
         44:18:f6:1e:9b:6c:62:38:c4:de:59:10:5d:07:a6:9b:19:f9:
         1a:55:43:e6:ca:6c:2f:1b:41:a5:bb:61:9d:79:83:d4:d0:b9:
         2e:21:1a:53:bd:83:64:9e:11:fd:c9:db:28:62:c1:31:d7:c4:
         46:70:03:0f:49:79:8f:b9:81:47:66:24:68:6a:0d:d3:cb:a3:
         16:d1:c3:11:b0:e8:4e:a5:8d:66:ed:2d:9a:0a:47:19:04:e2:
         bc:fa:b5:d6:02:c6:80:8c:90:cc:33:67:3a:fd:fb:58:eb:41:
         f8:86:7f:10:b7:a6:6d:9c:dc:fc:a7:d6:6e:38:bb:0f:ae:a8:
         9f:0a:c7:45:39:30:78:af:8a:08:c4:17:32:b1:db:71:3c:b7:
         3d:e6:e8:d7:7e:32:14:87:24:0b:1a:d7:bb:7a:57:c0:a0:68:
         9c:3d:8f:03:b8:53:e6:73:ef:45:77:71:f7:5a:85:df:50:78:
         67:87:c8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:44 2026 by rpki-client