Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3138382e302f32322d3234203d3e20313331363037.roa
File:                     3130312e332e3138382e302f32322d3234203d3e20313331363037.roa (raw, json)
Hash identifier:          8hmZHoGRE9qrtw0fFrvqEJ3+cELlZQW6uupQRMNqI/Y=
Subject key identifier:   EC:11:0B:23:C4:BA:66:CE:65:6A:6A:57:40:DF:76:19:F5:89:E2:7C
Certificate issuer:       /CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Certificate serial:       6F27F9F8157542BF6D7167E3822286E834B02E8F
Authority key identifier: E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3138382e302f32322d3234203d3e20313331363037.roa
Signing time:             Mon 11 May 2026 17:31:18 +0000
ROA not before:           Mon 11 May 2026 17:26:18 +0000
ROA not after:            Mon 10 May 2027 17:31:18 +0000
asID:                     131607
IP address blocks:        101.3.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:27:f9:f8:15:75:42:bf:6d:71:67:e3:82:22:86:e8:34:b0:2e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
        Validity
            Not Before: May 11 17:26:18 2026 GMT
            Not After : May 10 17:31:18 2027 GMT
        Subject: CN=EC110B23C4BA66CE656A6A5740DF7619F589E27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:08:f4:ee:79:dc:1d:7b:37:4a:38:26:2e:
                    6e:3a:85:8f:d6:ad:71:12:fb:be:77:c3:f0:7d:19:
                    55:84:af:ed:a6:80:d6:1a:28:26:e8:6b:83:70:05:
                    b2:e9:59:66:d9:91:29:a5:2f:25:d0:b9:f9:b9:39:
                    3b:81:75:0e:41:c8:6b:13:62:01:f8:81:4c:63:86:
                    55:1f:80:c4:f2:4b:99:13:6b:db:ed:22:78:e3:8c:
                    34:d8:08:f3:31:6d:7d:53:c0:5a:1d:a3:c5:33:20:
                    1c:01:73:da:4c:d7:d3:7e:cc:6d:73:83:00:b7:59:
                    ae:36:21:30:07:77:db:9c:e8:4f:2b:ac:0b:f6:59:
                    eb:c4:2a:c4:b6:78:62:19:44:b3:a1:50:7b:2a:9e:
                    42:b3:ad:f8:3d:64:1f:08:c1:0c:4c:e6:b1:56:c2:
                    cc:2b:4a:00:06:06:ff:ea:c1:1d:4b:fe:e6:5f:20:
                    45:41:9c:68:3b:18:a0:ad:9d:16:32:ab:00:ac:b5:
                    5e:c2:4e:03:c1:49:b6:49:69:cf:5c:de:df:b5:84:
                    67:aa:89:1d:6b:50:fe:58:4f:be:9d:19:ed:7e:97:
                    dc:cd:f4:0f:24:23:3e:65:a1:1d:38:8b:9a:52:2c:
                    09:45:64:d9:04:5d:26:50:59:8a:5c:22:8a:b4:6d:
                    a9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:0B:23:C4:BA:66:CE:65:6A:6A:57:40:DF:76:19:F5:89:E2:7C
            X509v3 Authority Key Identifier:
                keyid:E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3138382e302f32322d3234203d3e20313331363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.3.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:9a:e1:52:e4:c2:ea:19:91:8d:ff:e9:d2:b3:e9:15:de:df:
         69:81:e6:05:c3:a9:c7:6b:fb:dd:3f:4f:65:b2:d1:bd:cd:b9:
         af:8d:a5:18:e1:eb:f5:85:c2:11:ed:e8:1d:62:8e:ae:9b:ad:
         81:7d:51:fb:ca:d4:4f:90:fc:d1:64:ee:56:71:08:b2:e3:ff:
         23:cb:2b:48:bd:4d:c3:a1:ca:25:ee:42:5b:12:0f:34:57:4b:
         13:7b:73:ee:6e:20:fa:6d:25:c4:e5:a4:bb:a5:07:c0:75:57:
         41:71:df:7e:a2:6d:be:a7:63:1d:4b:07:6f:81:26:c9:71:4d:
         9f:dd:11:f5:02:30:34:d0:2b:a0:ba:2b:30:19:b3:97:47:8e:
         43:a9:1d:08:2b:71:96:2c:0d:1e:44:23:52:75:a2:a7:26:9e:
         07:b1:40:26:1d:9b:8d:7d:71:a0:04:45:d6:d5:b2:1b:fd:5f:
         f7:4f:10:04:07:02:6b:8b:df:63:82:e0:c0:51:48:4d:94:0a:
         d6:97:1a:42:0d:eb:06:45:d4:73:12:a9:07:c6:b7:3f:2b:2d:
         98:8a:a5:b1:80:1d:f4:a4:e4:db:4f:3e:66:d2:f6:ba:c6:61:
         91:18:5e:61:35:7d:64:82:f2:b3:e8:d2:f6:7f:27:55:a0:7b:
         3a:d0:46:90
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUbyf5+BV1Qr9tcWfjgiKG6DSwLo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdFMURBMzlBNkFDQUMxM0E0NDM0QzBCMDdBMTVGREQ2
REMzOTM0QjAeFw0yNjA1MTExNzI2MThaFw0yNzA1MTAxNzMxMThaMDMxMTAvBgNV
BAMTKEVDMTEwQjIzQzRCQTY2Q0U2NTZBNkE1NzQwREY3NjE5RjU4OUUyN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkpwj07nncHXs3SjgmLm46hY/W
rXES+753w/B9GVWEr+2mgNYaKCboa4NwBbLpWWbZkSmlLyXQufm5OTuBdQ5ByGsT
YgH4gUxjhlUfgMTyS5kTa9vtInjjjDTYCPMxbX1TwFodo8UzIBwBc9pM19N+zG1z
gwC3Wa42ITAHd9uc6E8rrAv2WevEKsS2eGIZRLOhUHsqnkKzrfg9ZB8IwQxM5rFW
wswrSgAGBv/qwR1L/uZfIEVBnGg7GKCtnRYyqwCstV7CTgPBSbZJac9c3t+1hGeq
iR1rUP5YT76dGe1+l9zN9A8kIz5loR04i5pSLAlFZNkEXSZQWYpcIoq0bakNAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQU7BELI8S6Zs5lampXQN92GfWJ4nwwHwYDVR0j
BBgwFoAU5+HaOaasrBOkQ0wLB6Ff3W3Dk0swDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRk83
NzE2LzAvRTdFMURBMzlBNkFDQUMxM0E0NDM0QzBCMDdBMTVGREQ2REMzOTM0Qi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FN0UxREEzOUE2QUNBQzEzQTQ0MzRDMEIw
N0ExNUZERDZEQzM5MzRCLmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRk83NzE2LzAvMzEzMDMx
MmUzMzJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzMxMzYzMDM3
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCZQO8MA0GCSqGSIb3DQEBCwUAA4IBAQARmuFS5MLqGZGN/+nS
s+kV3t9pgeYFw6nHa/vdP09lstG9zbmvjaUY4ev1hcIR7egdYo6um62BfVH7ytRP
kPzRZO5WcQiy4/8jyytIvU3Docol7kJbEg80V0sTe3PubiD6bSXE5aS7pQfAdVdB
cd9+om2+p2MdSwdvgSbJcU2f3RH1AjA00CuguiswGbOXR45DqR0IK3GWLA0eRCNS
daKnJp4HsUAmHZuNfXGgBEXW1bIb/V/3TxAEBwJri99jguDAUUhNlArWlxpCDesG
RdRzEqkHxrc/Ky2YiqWxgB30pOTbTz5m0va6xmGRGF5hNX1kgvKz6NL2fydVoHs6
0EaQ
-----END CERTIFICATE-----
Generated at Wed May 13 08:45:12 2026 by rpki-client