Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa
File:                     3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (raw, json)
Hash identifier:          CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=
Subject key identifier:   27:1B:EA:AB:4C:21:05:E3:B5:03:30:F2:CA:E0:02:93:A3:0D:BC:6B
Certificate issuer:       /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Certificate serial:       64E60440252BD42454690D1588C73AC7B77F1B53
Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TIH/0/3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa
Signing time:             Mon 11 May 2026 17:06:01 +0000
ROA not before:           Mon 11 May 2026 17:01:01 +0000
ROA not after:            Mon 10 May 2027 17:06:01 +0000
asID:                     131639
IP address blocks:        103.129.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
                          rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:04:40:25:2b:d4:24:54:69:0d:15:88:c7:3a:c7:b7:7f:1b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
        Validity
            Not Before: May 11 17:01:01 2026 GMT
            Not After : May 10 17:06:01 2027 GMT
        Subject: CN=271BEAAB4C2105E3B50330F2CAE00293A30DBC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:01:23:88:36:09:79:ec:1d:14:8b:0c:a6:bf:
                    35:f4:9b:21:8f:db:fa:ad:30:85:77:e2:e7:22:d5:
                    cd:01:94:3a:1a:49:4e:9c:08:f3:03:42:b4:9d:4c:
                    0b:bc:2d:c0:00:0f:b7:fb:60:05:d5:93:54:92:22:
                    34:da:90:66:41:7e:3a:27:c9:4d:e1:cd:65:e9:fb:
                    e8:97:d7:4d:bb:51:ed:08:ff:02:e8:ef:05:e6:3c:
                    88:12:38:96:d4:da:e8:33:ee:02:81:22:65:ef:31:
                    0e:f0:52:a9:ce:64:50:dc:c8:d3:40:69:d1:c3:0c:
                    c5:be:df:ef:bb:3f:c1:31:b1:b5:92:a7:f5:4c:72:
                    29:11:2b:0d:06:07:65:48:41:ac:04:2d:c5:93:1f:
                    93:91:8e:39:3f:22:00:90:11:3a:f2:ae:3f:ad:6a:
                    a2:3b:aa:f5:b2:b2:3e:9e:8b:2c:c1:0e:b5:11:5e:
                    ec:b6:f4:a9:24:34:cf:4a:76:ff:b8:80:8b:74:83:
                    02:a8:15:f0:a9:73:9a:06:0f:a4:08:aa:5e:01:a5:
                    c6:5d:a6:bd:64:a3:6b:33:97:4f:43:3d:d5:02:9b:
                    63:ee:f6:82:08:91:23:56:36:b2:80:8d:dd:b0:12:
                    56:02:ba:af:d8:b9:51:06:e6:84:30:ad:e1:5e:59:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1B:EA:AB:4C:21:05:E3:B5:03:30:F2:CA:E0:02:93:A3:0D:BC:6B
            X509v3 Authority Key Identifier:
                keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:54:bf:e5:fc:8a:67:08:eb:74:eb:62:d8:fc:ae:6b:b1:
         7c:3b:3d:90:33:3f:bc:e1:4a:5f:7e:89:59:15:fd:9a:24:d0:
         4a:8e:0a:23:46:e5:95:b6:b1:02:e5:fe:28:e5:0e:14:f4:b4:
         57:1c:c6:b6:38:1b:b3:c0:e3:c9:61:b7:44:d4:ae:55:90:94:
         dc:f0:50:7c:f7:25:a8:42:82:a6:78:53:77:04:07:1f:39:2e:
         bc:5a:a3:c7:02:3e:6e:91:f2:cb:35:d2:25:3b:6b:19:b2:01:
         33:b0:41:cd:a8:d8:6e:88:5f:87:fb:b3:a8:17:2b:a3:0e:5f:
         ab:78:19:32:1d:67:da:e7:6b:a2:07:09:9d:a2:26:e1:ac:f4:
         26:c6:4b:0a:3b:05:51:84:fd:ce:85:f6:9f:37:02:49:de:83:
         d9:20:d4:69:de:4f:f3:bc:8f:7d:3b:63:0b:37:0e:ae:3a:2d:
         7f:c8:a0:60:8a:27:6c:af:39:bc:55:b6:69:13:a3:d0:f3:71:
         72:f1:94:f7:26:64:ba:ed:b6:fd:29:64:31:6b:00:8e:31:11:
         38:ee:b1:a4:ce:44:1d:21:5e:27:1f:43:ad:db:52:99:74:5b:
         84:7a:6a:12:b0:2f:60:2d:35:1c:8a:38:9b:78:3a:75:69:6c:
         7c:be:1e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:10 2026 by rpki-client