Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHINENET/0/3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa
File:                     3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa (raw, json)
Hash identifier:          sfd0XACvVXb+UD6MWhg3l8P8g9Qo3omITYOEYKEM2cQ=
Subject key identifier:   46:3F:61:62:A7:A7:9B:21:12:8E:BD:0D:8E:0F:9C:13:87:09:91:B9
Certificate issuer:       /CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
Certificate serial:       335D8DE5405A86E76D3A169D9018AB482A51B61F
Authority key identifier: 98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINENET/0/3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa
Signing time:             Mon 11 May 2026 17:36:19 +0000
ROA not before:           Mon 11 May 2026 17:31:19 +0000
ROA not after:            Mon 10 May 2027 17:36:19 +0000
asID:                     150770
IP address blocks:        103.197.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl
                          rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:8d:e5:40:5a:86:e7:6d:3a:16:9d:90:18:ab:48:2a:51:b6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
        Validity
            Not Before: May 11 17:31:19 2026 GMT
            Not After : May 10 17:36:19 2027 GMT
        Subject: CN=463F6162A7A79B21128EBD0D8E0F9C13870991B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:cb:22:e8:16:62:c8:e5:f7:70:0d:0e:99:
                    80:c3:04:9b:0d:d7:4a:d4:88:3f:4e:b0:d7:fe:ea:
                    c0:e3:63:ae:49:6c:06:9d:9b:55:7f:43:84:4b:a8:
                    77:b2:23:cb:8f:75:43:75:23:5f:08:59:6b:fc:b7:
                    fc:b9:81:b1:86:c8:6f:0c:16:eb:ae:2a:b4:2c:fe:
                    69:47:f3:29:0b:dd:ef:19:4a:10:9b:60:4c:6b:18:
                    23:d0:2b:2f:cd:7e:93:40:0f:88:31:5c:a6:72:78:
                    05:5a:f4:1a:59:a7:33:b3:99:3d:5a:bb:f4:61:be:
                    95:41:49:2c:7f:a6:cc:04:93:23:30:c5:94:b1:03:
                    c1:8e:3f:d8:b6:f7:2a:96:c0:9e:0e:a0:06:94:44:
                    8b:2d:c1:f9:c4:9d:dc:a4:a3:1d:8e:9a:f0:7e:57:
                    fe:30:cb:70:4f:01:99:02:f8:89:17:fe:d8:b2:40:
                    17:8a:d6:4f:d8:0e:8e:5c:7f:03:7b:6f:41:9b:ff:
                    5f:6b:0d:6c:57:cd:ee:c4:03:41:9d:fe:92:82:38:
                    a5:73:b2:dc:36:ec:e7:8e:14:8a:29:75:23:a8:e3:
                    e4:f9:fe:5a:85:88:03:43:73:43:2a:07:30:44:1c:
                    fe:d5:2c:e2:8a:91:2e:99:37:fa:e9:ef:13:71:f7:
                    04:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3F:61:62:A7:A7:9B:21:12:8E:BD:0D:8E:0F:9C:13:87:09:91:B9
            X509v3 Authority Key Identifier:
                keyid:98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/3130332e3139372e3135382e302f32332d3234203d3e20313530373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:08:b3:25:8d:7c:06:4f:3d:25:08:cf:38:2e:c5:7f:3d:b7:
         48:db:0f:08:e8:32:3e:8a:34:fa:d9:c4:f4:8f:34:0f:42:32:
         8a:7e:40:76:03:26:82:e0:f9:20:b4:42:6c:4b:68:46:ed:ef:
         4e:76:de:99:e0:59:8f:8b:9e:21:95:cf:0c:ac:52:98:ca:07:
         15:02:3b:30:87:b1:8b:1f:0a:bf:44:da:01:ed:79:fa:3e:8a:
         ee:0a:a6:b1:32:d0:83:b1:b9:16:d3:3e:56:29:9c:e3:7b:e7:
         bf:1c:07:24:44:cf:97:69:36:07:e3:a2:8d:1b:0c:27:78:21:
         0c:b3:b0:82:f2:94:ff:59:00:64:3f:c7:fb:58:10:72:de:29:
         3e:56:2e:92:2d:49:a3:2e:91:78:a9:91:92:e5:be:f2:38:79:
         86:a7:a6:39:ca:63:3f:f9:8c:82:1a:ed:bb:ff:14:57:59:ab:
         dc:58:c4:95:60:f3:29:c0:15:ad:88:f3:06:6f:f5:a5:53:1a:
         44:e1:f2:c6:3f:f0:fc:a3:56:f9:8f:84:05:71:18:42:20:b2:
         2b:98:a9:b4:93:98:ac:24:10:e6:6e:5b:67:14:b5:47:90:39:
         b8:ec:71:c4:6d:bd:c7:8a:11:17:5d:af:7d:e9:c8:35:39:2b:
         c4:7b:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:58 2026 by rpki-client