Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3230332e3131392e332e302f32342d3234203d3e203137343038.roa
File:                     3230332e3131392e332e302f32342d3234203d3e203137343038.roa (raw, json)
Hash identifier:          2q0kKAGoU8dEn4SK6b6IYfb8U1QD+nFP46w6BGL91ug=
Subject key identifier:   97:97:8D:D2:09:C7:2C:BD:F7:A6:64:22:F2:EF:CB:6B:AC:B3:DB:81
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       6D7CBB5BAB4A22ED8147FD0330D79DD1E792A28B
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3230332e3131392e332e302f32342d3234203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:20:10 +0000
ROA not before:           Mon 11 May 2026 17:15:10 +0000
ROA not after:            Mon 10 May 2027 17:20:10 +0000
asID:                     17408
IP address blocks:        203.119.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7c:bb:5b:ab:4a:22:ed:81:47:fd:03:30:d7:9d:d1:e7:92:a2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:15:10 2026 GMT
            Not After : May 10 17:20:10 2027 GMT
        Subject: CN=97978DD209C72CBDF7A66422F2EFCB6BACB3DB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fa:b2:f0:97:8a:88:a5:75:f2:14:fb:9d:be:
                    49:38:a4:d1:0c:cf:16:c1:18:13:41:c8:c2:73:4e:
                    81:04:64:61:d4:3b:30:8b:68:05:62:ba:6d:20:d3:
                    c7:9a:35:78:0c:9c:dd:ca:0e:6d:69:e9:28:4a:69:
                    fd:36:69:16:90:b1:70:16:20:ba:ee:02:5e:d2:2d:
                    ce:6d:23:5a:fd:b6:7f:e9:c1:19:e3:f7:5a:e7:c7:
                    dc:b3:dc:25:1a:95:ca:60:92:79:3e:02:db:10:11:
                    28:40:25:bd:23:21:cf:53:35:f2:e4:7a:7a:52:03:
                    0d:ed:a7:07:d6:82:1d:ba:96:ae:36:4e:11:db:8b:
                    39:01:fe:74:a6:06:0b:3c:b8:62:97:33:cc:a9:f4:
                    c7:46:61:3f:db:29:6e:95:69:2d:fc:72:d7:6b:a8:
                    50:ac:de:54:7b:ac:d5:a6:7b:e6:33:7d:48:27:4e:
                    75:07:c5:41:ef:65:7a:be:b0:6d:f4:10:9d:8f:fe:
                    bd:2a:86:83:31:1e:ed:48:91:c3:52:b8:fa:8b:62:
                    4a:28:4a:1a:33:f1:9e:a5:fd:2d:ae:68:69:bf:2b:
                    5b:8c:94:61:24:25:2d:a0:ab:05:16:45:e6:df:59:
                    dc:1b:bf:1c:1e:ab:38:29:43:dc:a4:45:53:fc:ff:
                    68:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:97:8D:D2:09:C7:2C:BD:F7:A6:64:22:F2:EF:CB:6B:AC:B3:DB:81
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3230332e3131392e332e302f32342d3234203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.119.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6a:0a:2b:b5:75:33:d5:09:57:d5:b1:dc:b3:f6:47:2e:2e:
         55:f7:b9:89:17:5f:f1:eb:f7:67:09:40:89:0d:04:9c:c4:d1:
         1b:dc:3c:74:6d:7b:b9:09:c3:b1:a9:ed:15:94:4b:bb:e3:e9:
         6c:97:c9:9d:cb:5c:1b:88:21:54:fd:94:86:06:e7:31:f1:e3:
         89:48:52:ff:60:84:05:e3:eb:0d:dc:84:c7:ef:b5:24:93:55:
         4f:1f:b0:bf:30:d4:3a:10:b3:70:42:c0:48:14:fb:97:fd:0c:
         18:a5:95:94:c3:b8:6f:9f:50:39:d7:80:46:53:f3:20:68:1a:
         b2:c5:14:10:c2:a2:7a:5e:10:cb:b2:ca:b6:ff:3a:14:0c:57:
         89:e1:12:9d:1b:b2:34:00:b8:45:7f:2e:ad:dd:47:ac:3e:e7:
         05:6a:72:40:fb:a6:6c:68:96:17:86:01:03:b0:a3:da:a6:bd:
         2a:da:43:3a:05:34:a4:4b:c1:1a:cc:42:1e:d7:f1:01:ed:7b:
         dc:1b:fb:cc:22:88:f2:37:c1:55:0c:7c:90:56:16:b5:3e:ff:
         2a:39:d5:49:54:79:d8:31:cb:d4:01:4c:b2:23:c9:a5:fa:c2:
         60:bf:5f:b4:44:03:ff:6c:cf:0c:46:8c:c0:92:75:86:41:ad:
         59:c3:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:21 2026 by rpki-client