Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/RENREN/0/3130332e36392e34382e302f32332d3332203d3e20313331363432.roa
File:                     3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=
Subject key identifier:   BE:81:4F:8C:6E:85:61:90:4A:FF:FA:6C:2B:6B:C3:E1:C7:33:49:1D
Certificate issuer:       /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial:       6B1613680BF38687A43B794AB9C4E6B59698BFEB
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RENREN/0/3130332e36392e34382e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:37:58 +0000
ROA not before:           Mon 11 May 2026 17:32:58 +0000
ROA not after:            Mon 10 May 2027 17:37:58 +0000
asID:                     131642
IP address blocks:        103.69.48.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
                          rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:16:13:68:0b:f3:86:87:a4:3b:79:4a:b9:c4:e6:b5:96:98:bf:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
        Validity
            Not Before: May 11 17:32:58 2026 GMT
            Not After : May 10 17:37:58 2027 GMT
        Subject: CN=BE814F8C6E8561904AFFFA6C2B6BC3E1C733491D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:f0:19:6c:aa:bd:05:f3:fb:c4:07:cd:4a:
                    f6:b7:48:74:4f:92:f7:ff:d5:81:cd:82:1e:42:17:
                    43:c9:12:dd:d7:7d:b2:fa:ce:c6:b8:b1:eb:a9:ba:
                    c6:cf:8b:d9:d5:30:26:a3:87:ed:6b:bd:8e:1e:c2:
                    d7:43:54:91:53:ce:a3:be:cd:55:84:df:49:10:2f:
                    cb:55:b3:6e:42:4c:b8:0d:27:6e:63:79:a1:ee:78:
                    23:ff:45:ca:c1:28:c2:46:f8:c1:e9:8b:d1:c4:dc:
                    d9:7d:e0:21:19:e6:d4:53:86:9a:80:1a:12:01:7d:
                    c7:80:55:d5:ce:dc:0b:aa:35:5e:b7:72:d5:bb:92:
                    71:68:8e:af:69:88:56:0b:a0:f7:d6:a5:7c:7a:10:
                    eb:ad:24:5b:03:6f:e6:24:5e:24:2a:81:8f:02:38:
                    db:c3:bb:98:d5:2d:0c:b3:0e:42:70:a8:d8:33:af:
                    4b:36:a8:48:99:ea:8d:62:fe:4b:16:a8:cc:b4:6c:
                    08:fe:ae:92:f3:11:39:7e:35:2c:ed:16:65:9d:d1:
                    95:21:62:98:5b:9a:5f:68:09:98:0b:ae:88:12:54:
                    f2:19:5e:60:e3:67:cb:f5:78:10:6c:96:8a:99:f6:
                    b6:9a:0c:00:ea:96:61:20:dc:8a:c7:ca:5a:54:d3:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:4F:8C:6E:85:61:90:4A:FF:FA:6C:2B:6B:C3:E1:C7:33:49:1D
            X509v3 Authority Key Identifier:
                keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/3130332e36392e34382e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:b9:b4:41:18:7d:d6:14:9b:d6:f0:06:9f:8d:e8:93:62:60:
         e0:59:f0:da:3a:58:9f:0b:1c:00:a7:e8:d3:02:fa:d5:95:8b:
         7e:85:ff:bd:dc:b3:3e:70:d1:80:a8:06:2d:9a:56:72:1e:f8:
         b8:2a:db:c8:f8:80:98:3e:0d:71:1a:34:3d:f9:70:46:06:26:
         33:52:7d:20:41:4d:4d:66:60:3c:43:a0:62:33:a8:28:8f:15:
         30:fb:e3:6b:11:55:14:eb:af:6c:e3:00:ca:87:5e:c8:81:f3:
         e9:25:9d:3e:c0:7b:f6:17:bf:6f:cd:fd:4a:f6:ba:47:88:80:
         60:74:d3:ce:b8:b2:21:8b:46:0d:42:91:34:a3:91:35:d6:40:
         ef:de:99:d2:d9:80:5e:2b:00:d3:7f:fd:28:9e:5b:c5:32:12:
         62:48:9c:dc:a9:08:a7:fd:ce:a9:96:7e:52:e7:54:a9:5d:8b:
         df:13:b0:12:f6:cc:c0:fc:10:d6:55:2e:0d:56:e3:75:9c:c2:
         3d:bf:a7:11:6e:82:5a:d7:0c:da:3d:ef:60:19:0a:9a:52:b4:
         50:e4:da:a7:2f:73:aa:bc:27:38:73:fb:c4:64:f6:eb:76:0e:
         51:1c:3b:15:5e:61:37:37:dc:a0:0d:e9:65:d1:9d:63:a4:3a:
         68:f9:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:04 2026 by rpki-client