Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130332e3233352e38382e302f32342d3234203d3e203136353039.roa
File:                     3130332e3233352e38382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          N1YbUTUbagCrxMo9YbhE+Taa4szws31HFNJMOUtE9UE=
Subject key identifier:   91:9F:A4:D5:1C:D4:C0:8E:92:6F:77:2C:0E:DB:BC:B9:D5:13:50:B6
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       0BE30E6A093E17AF0961EBF7B22CE6FE061D0884
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130332e3233352e38382e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 11 May 2026 17:20:04 +0000
ROA not before:           Mon 11 May 2026 17:15:04 +0000
ROA not after:            Mon 10 May 2027 17:20:04 +0000
asID:                     16509
IP address blocks:        103.235.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e3:0e:6a:09:3e:17:af:09:61:eb:f7:b2:2c:e6:fe:06:1d:08:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:15:04 2026 GMT
            Not After : May 10 17:20:04 2027 GMT
        Subject: CN=919FA4D51CD4C08E926F772C0EDBBCB9D51350B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:0e:50:f9:6e:20:e4:df:af:92:0f:f4:ad:
                    a9:0b:09:5a:0e:8b:99:81:d8:5f:15:67:b1:99:49:
                    32:8e:90:63:84:c7:c6:f7:b5:6f:71:b7:79:9f:02:
                    f1:f9:b0:4d:5f:7a:91:1c:32:91:c5:b4:a9:f0:cc:
                    ff:be:8b:47:ac:b4:bd:41:e9:18:20:5e:0c:ca:26:
                    1f:93:c5:1f:11:4b:61:c9:c1:f7:b9:4e:be:75:7a:
                    ce:71:43:b4:c9:de:f4:d1:52:35:2e:a6:59:bb:67:
                    2c:e2:d4:38:1a:31:37:9e:8e:62:ba:68:75:44:ec:
                    28:b3:8d:85:87:02:6e:80:d2:09:de:a0:5d:52:66:
                    97:63:6e:30:f2:8e:e9:31:c8:5a:c2:a9:07:f7:49:
                    c1:dd:f4:f8:43:5b:61:58:55:85:07:4e:bd:b9:27:
                    b5:a1:a0:b3:d7:28:f2:06:1f:24:ee:a8:ec:6a:7f:
                    d4:5c:e1:8e:67:f0:4a:66:57:8a:b6:93:88:f5:89:
                    19:99:8b:d7:f0:10:48:52:5e:68:f7:90:02:b7:95:
                    aa:53:34:8a:8c:31:36:73:9b:08:9c:ee:5c:90:1c:
                    e9:16:81:e8:a3:c0:2c:5e:f9:3e:22:ce:2c:a0:71:
                    e1:92:ad:3e:0c:b1:de:a5:ae:5c:aa:96:ea:da:df:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9F:A4:D5:1C:D4:C0:8E:92:6F:77:2C:0E:DB:BC:B9:D5:13:50:B6
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130332e3233352e38382e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:ad:f9:84:f0:e7:87:cb:75:52:d0:33:54:1b:22:f2:27:
         d4:0f:95:5c:e2:ba:75:79:c6:55:98:39:f2:95:0d:64:0f:94:
         6f:35:a8:ed:34:cb:ce:c7:98:f5:76:8b:a3:47:37:2a:97:c1:
         6f:3c:38:39:4f:ee:2a:4d:6b:5e:49:1b:36:78:9a:ea:3e:3f:
         4d:f1:47:3c:79:be:06:4c:97:02:d0:83:52:64:a8:b4:a9:a8:
         1d:f6:da:da:5b:f7:78:b7:27:6a:57:9f:c2:ac:5b:db:56:c4:
         e3:04:a1:be:f2:74:92:b7:6d:7f:0f:87:eb:d6:3f:cc:fb:4c:
         68:c3:1f:48:e5:f7:0c:b6:00:1f:15:86:8c:fc:73:d4:ef:ab:
         37:78:e8:38:10:aa:b5:12:cf:dd:c4:e1:ec:49:a2:0d:1e:cf:
         1c:38:97:1d:b4:e8:4f:ed:45:83:ad:2c:2d:03:40:a4:84:59:
         ae:d8:9a:37:20:71:31:21:28:30:15:48:44:dd:07:5c:2a:4b:
         56:ab:90:76:e3:b1:be:06:77:9e:00:3b:9a:f7:84:44:f7:82:
         5b:24:77:28:b2:f8:3e:73:8a:3d:46:39:d3:83:46:69:34:43:
         99:77:98:4f:b4:3c:f6:41:df:ba:bd:2a:59:bd:24:12:8e:7e:
         27:06:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:21 2026 by rpki-client