Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa
File:                     3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa (raw, json)
Hash identifier:          F3FkYFiImAK1mdqw1urYor1uavBiRp16+RSqdJSNVyI=
Subject key identifier:   BE:D1:54:E3:26:0F:36:E4:2E:5E:B4:C7:BF:41:97:B3:E5:37:28:2D
Certificate issuer:       /CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
Certificate serial:       67DF7C2E9E370693E0134ABC27CF97B489B1F2D8
Authority key identifier: 68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa
Signing time:             Mon 11 May 2026 17:59:05 +0000
ROA not before:           Mon 11 May 2026 17:54:05 +0000
ROA not after:            Mon 10 May 2027 17:59:05 +0000
asID:                     201217
IP address blocks:        103.220.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl
                          rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:df:7c:2e:9e:37:06:93:e0:13:4a:bc:27:cf:97:b4:89:b1:f2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68584CD1C7EB0808E1AE2DE4C195CCE1325705F0
        Validity
            Not Before: May 11 17:54:05 2026 GMT
            Not After : May 10 17:59:05 2027 GMT
        Subject: CN=BED154E3260F36E42E5EB4C7BF4197B3E537282D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:74:8f:d3:c7:6e:46:dc:40:fc:ef:56:fa:
                    c2:a8:d1:3b:4b:3c:97:a6:57:2c:2a:c2:51:0e:da:
                    49:5d:10:e5:d7:94:cd:21:7b:a7:4c:ab:e3:62:73:
                    05:c5:07:b6:7d:d0:64:2d:24:22:70:54:7e:e8:ec:
                    be:49:a9:d1:af:6c:fa:79:2a:44:5d:5d:ad:ba:0c:
                    9c:09:29:f9:59:a1:69:3c:2e:49:e6:25:27:11:66:
                    70:88:67:df:ed:3e:7a:13:92:1e:f3:6d:ac:19:88:
                    f3:e8:50:d3:01:bb:82:d8:a9:f9:08:73:6c:c0:b8:
                    28:60:9d:2b:eb:0a:ac:fd:e4:ec:29:e0:56:48:31:
                    f8:b7:e0:2a:d9:6a:83:86:74:52:7f:c3:b8:33:6f:
                    a1:42:6e:7c:03:f9:ae:12:fc:fc:d5:90:b9:31:a2:
                    ad:52:cb:84:6b:c7:ea:ec:7e:b1:5d:80:6b:3b:c5:
                    fd:d5:8a:b0:54:b5:92:a0:d5:c8:6b:41:22:6a:66:
                    ba:27:fb:c9:91:27:ee:56:ab:2c:e3:cc:16:d4:17:
                    cf:92:9f:05:04:2b:ea:3d:b0:3f:d3:46:b8:00:12:
                    88:af:02:bf:eb:1e:13:27:08:8e:d4:6c:df:fe:cd:
                    19:7c:a9:75:bd:8c:54:54:88:b6:4f:bf:c5:9a:72:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D1:54:E3:26:0F:36:E4:2E:5E:B4:C7:BF:41:97:B3:E5:37:28:2D
            X509v3 Authority Key Identifier:
                keyid:68:58:4C:D1:C7:EB:08:08:E1:AE:2D:E4:C1:95:CC:E1:32:57:05:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TDC/0/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68584CD1C7EB0808E1AE2DE4C195CCE1325705F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TDC/0/3130332e3232302e3231382e302f32342d3234203d3e20323031323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:fd:b5:26:37:8e:1a:9b:c9:96:18:84:f2:42:d1:70:e8:fb:
         06:d3:55:e7:95:d7:ed:c3:00:69:b3:49:41:36:1c:5f:e3:59:
         91:26:73:ee:66:90:fc:02:d1:25:65:a1:5c:8b:a7:98:6b:66:
         00:4e:3e:f0:d8:c6:26:1e:5f:aa:4c:de:b7:c8:c8:3b:0e:5e:
         e4:59:8e:79:ec:f9:10:3b:53:5e:81:f2:f4:ce:19:1a:e4:69:
         31:5b:5d:9b:09:d6:82:3e:69:6c:57:dd:98:bc:e0:6c:ac:31:
         ad:63:29:ec:74:7e:30:1c:73:2a:2e:ed:75:ba:44:5f:83:83:
         1a:7e:88:7d:8f:eb:66:a0:48:94:df:c6:55:f0:28:87:dc:72:
         bf:d6:97:1d:f9:db:65:ed:23:5f:6f:31:7b:ff:3f:f2:bb:d2:
         cf:94:62:8e:3d:54:4a:d1:09:a3:d3:d6:64:e7:f3:2f:38:ef:
         d3:38:61:a7:c0:db:aa:d6:0f:c2:3f:e2:e2:b1:7b:9a:a1:55:
         bb:35:2b:c0:ac:91:d9:ce:49:73:3a:d6:d8:74:ee:86:c9:59:
         72:e1:0b:b3:b2:55:39:d4:3f:58:63:d5:c1:88:13:fc:c3:27:
         89:0b:42:fa:59:1c:dc:ac:96:17:6a:56:dd:12:99:44:88:86:
         a9:47:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:45 2026 by rpki-client