Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa
File:                     3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa (raw, json)
Hash identifier:          1subxVblRJYfLj7+ETzdhL0Jbf7v/OU0kXnuwp5/gAE=
Subject key identifier:   A2:C9:C3:10:0D:0C:95:68:61:2E:B2:2A:D0:AA:A1:39:16:D6:EF:28
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       4648663B211362F3DEE9DEE172182DCB0D266873
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa
Signing time:             Mon 11 May 2026 17:55:21 +0000
ROA not before:           Mon 11 May 2026 17:50:21 +0000
ROA not after:            Mon 10 May 2027 17:55:21 +0000
asID:                     1659
IP address blocks:        101.102.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:48:66:3b:21:13:62:f3:de:e9:de:e1:72:18:2d:cb:0d:26:68:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:50:21 2026 GMT
            Not After : May 10 17:55:21 2027 GMT
        Subject: CN=A2C9C3100D0C9568612EB22AD0AAA13916D6EF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c3:37:ec:ab:91:f2:71:94:e4:ec:b1:64:f1:
                    20:04:aa:c7:ff:1c:27:76:14:4e:d1:ee:81:56:f9:
                    f3:3b:20:7d:38:52:32:69:f9:66:d7:99:0f:bd:2d:
                    6b:e1:09:80:3a:d6:ce:36:1c:6a:45:8b:43:a1:aa:
                    74:34:e9:91:04:df:16:51:0a:ee:31:9a:30:52:58:
                    97:d4:3b:7d:24:9e:76:bd:d0:32:1d:a0:11:aa:7f:
                    1c:c6:ec:ad:59:5f:a2:ba:89:ec:af:74:7a:25:1d:
                    08:01:26:c3:da:49:8f:d6:d2:7c:21:da:6d:e9:28:
                    b3:56:4e:db:3f:db:7a:25:a7:b6:d1:26:4c:9a:37:
                    6a:b8:ea:24:f8:89:7f:ef:36:98:26:24:bb:21:c5:
                    c7:98:a8:21:6f:97:b9:cb:c9:e0:c9:3e:17:73:37:
                    1c:02:83:fe:05:ac:64:0f:09:d5:bc:e7:d4:58:17:
                    b8:8a:e1:7e:b4:59:15:5c:cb:a1:ed:f5:55:c5:43:
                    b7:26:51:e8:8d:ed:32:3c:01:1f:d4:81:68:82:76:
                    41:69:47:e4:0a:9f:be:f3:bc:e4:a6:40:90:f7:ae:
                    b0:73:6d:c3:d1:4e:ed:f6:3a:a1:84:f8:fd:68:0b:
                    57:a7:c4:b2:c5:ca:8e:8f:d1:b0:0a:b5:69:ce:eb:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C9:C3:10:0D:0C:95:68:61:2E:B2:2A:D0:AA:A1:39:16:D6:EF:28
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.102.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:2b:58:bc:03:27:fb:4c:0f:9e:be:66:d4:78:e0:d9:01:
         13:d9:1c:ce:14:c3:7d:47:c3:0d:9d:e0:f2:4f:a6:8f:d3:f4:
         99:be:b4:27:0f:62:f2:c9:6e:75:64:d4:a5:a9:55:f6:d2:83:
         24:47:01:e2:ed:49:5a:59:29:77:77:10:17:8d:9f:d3:b8:8b:
         e5:e8:ee:85:d4:16:0c:5a:35:d0:3d:38:f5:c9:4b:be:22:d6:
         18:29:7a:0b:c0:9c:f0:5f:a9:9b:9c:8e:64:5e:f3:19:b4:8c:
         6f:5c:df:ec:17:57:ee:2b:13:e5:ad:f7:e0:47:d4:5f:bf:12:
         0a:30:37:58:e8:fe:e7:7e:db:c6:82:5e:c8:5c:40:8a:5d:88:
         2d:72:a0:31:dd:18:23:77:0c:e2:54:ee:cf:cc:2a:7a:3e:91:
         14:f6:28:8a:27:da:17:dc:94:1b:7c:3d:28:84:55:44:47:a4:
         a2:d9:9e:95:90:85:2b:50:8b:47:3a:a5:a3:f9:be:d4:2a:e7:
         43:65:1f:7b:ea:b0:2a:df:93:82:85:fe:67:79:7c:d6:9f:a8:
         e6:b6:e4:ca:0f:b3:ce:78:20:c7:52:52:86:fa:ab:f1:ba:8a:
         ad:f2:6e:81:8e:c8:a6:b7:e4:78:89:6f:a8:58:13:8b:6c:30:
         3a:17:1e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:19 2026 by rpki-client