Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130312e3130312e302f32342d3234203d3e2031363539.roa
File:                     3130312e3130312e3130312e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          k75G3JwtSk0qSJEtNG9gjPlCw1dfIMA4csZ4Vd5pXE8=
Subject key identifier:   A2:EA:27:A8:1A:78:3E:FE:9A:3B:6F:DB:26:AD:49:DA:9C:21:31:CF
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       080C68C7DE12639F2D4BE64108718D812B9C7455
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130312e3130312e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 15:38:30 +0000
ROA not before:           Mon 11 May 2026 15:33:30 +0000
ROA not after:            Mon 10 May 2027 15:38:30 +0000
asID:                     1659
IP address blocks:        101.101.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0c:68:c7:de:12:63:9f:2d:4b:e6:41:08:71:8d:81:2b:9c:74:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 15:33:30 2026 GMT
            Not After : May 10 15:38:30 2027 GMT
        Subject: CN=A2EA27A81A783EFE9A3B6FDB26AD49DA9C2131CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:0e:28:4c:00:4b:03:fc:86:5c:6a:3e:71:
                    de:84:7d:df:13:ca:bc:5a:ac:34:7d:fd:bf:bb:fa:
                    f6:ae:9f:6e:8d:b0:51:1d:d4:fa:8e:57:63:2d:87:
                    3c:df:8b:4b:c4:6f:43:6f:3f:43:ab:fd:ba:b7:e8:
                    69:b0:50:c1:01:86:9c:36:ff:80:f6:d2:d5:03:11:
                    18:7f:c2:a3:f5:d9:a3:a5:ee:26:5f:cd:3a:dc:69:
                    27:11:b2:f4:ce:15:30:b3:7a:40:da:5a:9d:22:e9:
                    11:41:be:40:54:5d:71:b8:db:62:f1:6d:e7:e4:23:
                    ce:21:d5:09:bf:18:5a:65:4a:94:a0:15:d4:eb:4c:
                    b9:90:bc:aa:14:08:3b:20:69:4f:5c:87:b8:32:b6:
                    f8:db:a7:92:a4:98:26:a3:ba:c7:0e:1f:de:5d:5f:
                    29:70:a0:65:12:dc:ef:0d:99:90:50:80:73:b8:94:
                    d8:c6:d0:93:7d:07:d7:83:00:aa:1a:54:b2:5d:e0:
                    c8:4c:0d:33:10:d0:90:4a:b3:23:ed:af:99:80:c4:
                    f1:59:44:0c:ce:a7:2f:7a:5f:da:1d:ab:42:5d:04:
                    3b:cf:1c:37:3e:4d:60:0f:3a:32:27:85:da:f4:19:
                    bf:e5:9c:f9:81:1e:e0:40:7a:c4:a6:17:ff:d4:b2:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EA:27:A8:1A:78:3E:FE:9A:3B:6F:DB:26:AD:49:DA:9C:21:31:CF
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130312e3130312e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.101.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:cb:6d:87:c0:78:d4:e0:d9:e1:b0:bf:70:b3:9b:d9:a8:b2:
         4b:2a:9b:bd:81:98:4a:4f:c3:a7:0a:df:39:d0:a8:6b:12:55:
         67:ec:d8:51:70:17:de:2b:e7:46:e0:f3:ab:30:c7:23:eb:55:
         02:42:f8:45:06:40:6d:d9:fb:47:07:80:15:2d:f0:d8:03:15:
         95:76:01:16:c6:25:3a:d3:8d:8a:61:8b:46:4b:3a:b1:5a:19:
         1d:1b:14:c5:af:8c:4c:e1:90:13:2e:82:60:1b:29:2f:b5:ac:
         9e:41:b8:34:04:43:85:81:f4:9b:40:d8:f3:dc:65:6a:5c:c9:
         c9:d1:3e:07:2d:17:b7:42:4d:f9:03:51:8e:0f:fa:83:fd:22:
         11:8c:c7:5e:82:d6:99:c6:ad:1e:aa:5b:17:c4:89:38:53:56:
         d4:e0:f6:a4:2e:65:d3:c0:90:fb:d0:e3:bd:7e:79:0f:42:96:
         c1:96:60:58:d8:e8:51:1f:a1:c2:19:bc:67:df:db:79:25:3e:
         ae:52:87:e1:a7:57:64:c1:5c:df:39:8f:a4:22:b2:2b:bf:25:
         88:e9:2c:9f:99:58:9a:ec:98:63:5e:6b:19:22:b6:79:4e:db:
         b2:ce:fd:c1:12:70:67:ce:b5:44:23:a2:9e:29:cc:2b:b0:18:
         44:60:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:20 2026 by rpki-client