Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKIPTECH/0/3130332e3139362e3137352e302f32342d3234203d3e203134363138.roa
File:                     3130332e3139362e3137352e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          QwUrML5S6jNxsB3io4kL1Ytp6STUV1YCdv/C5aoN7kE=
Subject key identifier:   A4:36:39:98:88:06:90:57:A3:5A:BB:E1:1B:91:9A:C7:D8:F6:93:27
Certificate issuer:       /CN=B67E34D8538AB361BC35DAA6BB862938B7074CF5
Certificate serial:       137EABE845247BAA38454EABA274E0B7F6B08B95
Authority key identifier: B6:7E:34:D8:53:8A:B3:61:BC:35:DA:A6:BB:86:29:38:B7:07:4C:F5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/3130332e3139362e3137352e302f32342d3234203d3e203134363138.roa
Signing time:             Mon 11 May 2026 17:56:24 +0000
ROA not before:           Mon 11 May 2026 17:51:24 +0000
ROA not after:            Mon 10 May 2027 17:56:24 +0000
asID:                     14618
IP address blocks:        103.196.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl
                          rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7e:ab:e8:45:24:7b:aa:38:45:4e:ab:a2:74:e0:b7:f6:b0:8b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67E34D8538AB361BC35DAA6BB862938B7074CF5
        Validity
            Not Before: May 11 17:51:24 2026 GMT
            Not After : May 10 17:56:24 2027 GMT
        Subject: CN=A436399888069057A35ABBE11B919AC7D8F69327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:dc:5c:7a:e1:80:8b:61:0d:80:90:38:42:
                    7a:a9:4e:67:91:ef:2a:42:d1:6b:b5:9a:25:9f:d7:
                    df:e2:f5:50:40:b3:21:6e:f2:ed:30:90:51:33:a9:
                    f8:c8:aa:70:0d:e2:c2:34:1d:10:97:2c:2f:19:86:
                    f5:ea:0e:67:e5:ee:f8:4e:78:d2:86:b8:55:01:1f:
                    c8:08:90:e4:b0:6c:a2:2f:7d:da:73:c3:0c:21:8c:
                    b2:38:21:1b:99:ed:30:e2:6b:80:7e:f2:66:02:55:
                    2b:3d:ff:7d:7a:3a:26:b8:c0:aa:cc:31:54:05:61:
                    68:47:56:a6:6a:fd:d9:29:65:40:7c:1d:0d:25:7c:
                    f3:09:09:fb:1e:12:d4:93:f8:a4:ce:4b:6c:df:f2:
                    72:32:be:ce:53:3e:0f:da:52:2d:ab:76:68:2c:4e:
                    0f:3c:6c:5b:bb:79:2a:f0:2c:77:05:06:25:2f:db:
                    59:91:a8:9c:ca:06:f2:eb:4a:a9:1c:c8:f2:cb:08:
                    f5:75:6f:1b:20:7e:0d:23:34:d4:d1:6d:7c:da:1e:
                    92:49:bc:db:6a:07:32:08:6d:6a:48:61:8b:84:f9:
                    92:5b:48:5f:f4:38:c2:a7:39:73:22:20:ea:da:b9:
                    e1:09:ed:a8:5e:dd:e1:c5:40:f1:86:cb:e1:80:9c:
                    47:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:36:39:98:88:06:90:57:A3:5A:BB:E1:1B:91:9A:C7:D8:F6:93:27
            X509v3 Authority Key Identifier:
                keyid:B6:7E:34:D8:53:8A:B3:61:BC:35:DA:A6:BB:86:29:38:B7:07:4C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/3130332e3139362e3137352e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:41:d4:22:8f:cb:12:f0:a1:76:48:f8:05:3e:1e:73:22:
         a4:67:eb:62:e1:f0:ea:25:4c:b0:98:3b:b3:11:5f:3e:0c:47:
         4c:77:8d:40:fb:f3:b1:4d:ae:8d:e6:9e:ec:f5:3e:e4:67:ef:
         eb:d9:67:1a:2d:a9:30:c4:0b:7d:48:c9:fb:aa:b6:58:0c:eb:
         fd:39:f8:70:81:35:ce:30:44:51:17:a8:e0:7d:dc:a8:5e:c9:
         7b:39:c3:4f:cc:58:03:c6:08:e8:b3:d1:1d:9b:27:f2:aa:f0:
         8f:35:43:43:6d:25:0a:03:3d:04:22:8a:5f:96:db:dc:4d:17:
         d4:78:1f:57:60:d7:93:8b:ad:ab:83:0d:3f:e3:8b:92:0c:8f:
         bc:36:2c:94:b0:02:29:44:fa:6b:6d:07:0e:fe:7f:30:c2:3c:
         47:67:bd:50:b5:29:08:52:93:e3:bc:15:d2:db:03:3e:19:9c:
         41:aa:e1:2a:3e:31:b8:ee:ef:61:a5:35:eb:f9:70:11:49:bd:
         e8:7b:ec:ef:22:8c:3a:83:3e:72:13:1a:3e:63:c8:60:8d:d9:
         1d:4f:f5:96:6d:0c:7f:39:7d:f8:61:ac:64:a8:e0:32:1b:8f:
         77:4b:70:36:ab:9c:09:f8:ac:50:47:9b:60:b1:70:55:88:f3:
         0f:10:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:13 2026 by rpki-client