Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SGU/0/3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa
File:                     3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          sU0nxf0k+bvMj58mzvcqIhIM4sCuxjf2EUmRobYvVAQ=
Subject key identifier:   DE:FF:02:7B:BA:AE:F1:7A:E5:6E:6B:01:D1:53:B1:C3:39:4C:82:64
Certificate issuer:       /CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
Certificate serial:       5CD3902354575E5A8B6E6413B7A23AED1CD684F9
Authority key identifier: 86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SGU/0/3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:18:10 +0000
ROA not before:           Mon 11 May 2026 17:13:10 +0000
ROA not after:            Mon 10 May 2027 17:18:10 +0000
asID:                     134823
IP address blocks:        103.186.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl
                          rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d3:90:23:54:57:5e:5a:8b:6e:64:13:b7:a2:3a:ed:1c:d6:84:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86971504F42B7B0AF1883E8DFA5BAA555A8BE849
        Validity
            Not Before: May 11 17:13:10 2026 GMT
            Not After : May 10 17:18:10 2027 GMT
        Subject: CN=DEFF027BBAAEF17AE56E6B01D153B1C3394C8264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:60:68:ce:ba:08:ab:bf:41:c3:e5:80:a9:
                    ef:16:85:5c:bd:dc:33:8b:f2:39:06:7e:f7:c7:48:
                    74:d1:d6:9c:f3:b4:4f:4c:79:9f:36:33:11:b3:15:
                    1a:c6:df:bc:2d:f3:c1:fd:fe:17:96:3f:df:81:7a:
                    cc:ec:7d:ce:40:6a:df:64:4c:02:14:87:5c:2a:0b:
                    fe:b5:4e:72:d1:58:a6:18:c1:92:7b:9a:6e:bd:3f:
                    d4:07:f8:0e:7c:72:c8:0b:ca:ff:e3:07:b7:61:66:
                    22:0b:83:65:2d:43:4b:4c:b7:f9:47:07:90:0d:a2:
                    66:2d:11:c5:0a:1d:b6:90:ea:8c:0e:7b:8a:92:e7:
                    53:6a:b0:01:81:37:39:24:b3:80:7b:02:9b:4e:b3:
                    86:ea:a3:3c:33:01:e5:17:4a:96:f4:60:4c:e9:c8:
                    1c:99:84:28:04:b4:4a:1d:dd:ab:94:6e:fd:bc:8c:
                    c3:74:fc:1e:2d:96:eb:2c:f9:28:fc:d0:15:98:1e:
                    45:8a:3c:43:b8:4d:99:ec:41:94:8b:3c:88:0c:3e:
                    8c:ed:26:e2:0c:b4:97:f4:09:55:42:b1:d6:a9:ca:
                    08:69:bc:16:0f:3f:b6:5a:20:c1:c6:d9:03:79:5b:
                    3f:75:36:16:d2:66:d4:fc:e9:0f:56:56:f1:40:89:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:02:7B:BA:AE:F1:7A:E5:6E:6B:01:D1:53:B1:C3:39:4C:82:64
            X509v3 Authority Key Identifier:
                keyid:86:97:15:04:F4:2B:7B:0A:F1:88:3E:8D:FA:5B:AA:55:5A:8B:E8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SGU/0/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86971504F42B7B0AF1883E8DFA5BAA555A8BE849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SGU/0/3130332e3138362e3138362e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:8a:89:f5:d0:2d:4a:9a:1c:05:a2:c4:8f:32:03:e5:5e:85:
         04:7e:e8:c2:b4:20:5f:f3:c7:f8:41:de:c8:5f:72:e5:b7:b3:
         da:80:07:28:56:db:4b:cd:ba:e4:5e:20:c2:da:bc:ff:f1:8b:
         04:1d:19:14:6f:5d:5f:72:f3:c5:fd:55:0f:72:ed:05:6e:d9:
         10:b6:2c:a1:57:ac:da:98:a9:05:74:bc:de:c7:1c:f9:fd:80:
         39:80:13:26:88:92:bf:5f:84:ef:32:cc:c6:0b:3c:2b:13:72:
         e1:ab:3f:45:0f:ca:e9:73:f6:00:ca:8f:e4:1a:90:c9:2e:02:
         46:67:d4:44:b6:79:82:d1:13:55:5d:27:a3:39:9a:47:61:fc:
         f3:80:33:f0:2e:6a:69:37:de:a5:72:c3:fc:de:96:11:35:ed:
         cb:a9:9f:de:82:fd:de:db:76:57:cc:98:e1:e7:b4:17:8b:2c:
         ed:53:f5:57:98:2c:ee:69:91:17:af:ed:62:fb:24:77:ba:99:
         dd:4f:62:ff:06:62:57:aa:1b:08:ac:a8:73:e0:40:df:54:23:
         29:b7:ef:c8:58:a7:a4:93:df:e4:7a:37:cf:b9:a1:19:3f:bd:
         08:ea:f6:7a:46:9b:10:58:a9:c8:b9:ec:a9:a9:e5:e2:b9:cd:
         9b:ec:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:44 2026 by rpki-client