Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa
File:                     3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa (raw, json)
Hash identifier:          AK+3PKMDVdG06X9V5wJGENZB5ww85T0dXxYb87LZIBM=
Subject key identifier:   61:E3:0B:2B:2A:1E:79:48:14:C0:2A:C5:CB:7F:35:0C:F0:D7:4D:0E
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       5210298C07F74D6A9A0A091AA8A43AFB97125FFA
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:27:31 +0000
ROA not before:           Mon 11 May 2026 17:22:31 +0000
ROA not after:            Mon 10 May 2027 17:27:31 +0000
asID:                     17408
IP address blocks:        103.123.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:10:29:8c:07:f7:4d:6a:9a:0a:09:1a:a8:a4:3a:fb:97:12:5f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: May 11 17:22:31 2026 GMT
            Not After : May 10 17:27:31 2027 GMT
        Subject: CN=61E30B2B2A1E794814C02AC5CB7F350CF0D74D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d5:99:55:b3:fc:e2:9c:33:db:3a:a7:15:68:
                    2c:74:c9:a2:49:66:30:d1:3c:38:22:d1:3e:98:7a:
                    ac:40:a5:cf:18:04:85:c3:3c:55:88:24:96:a9:13:
                    96:1b:7b:28:c0:15:34:cc:1d:f2:dc:e4:b3:b3:70:
                    5c:bd:00:c9:51:50:b8:37:b3:02:3c:2c:d8:f6:ca:
                    d2:26:be:96:34:3b:67:33:4c:de:e4:e0:a5:b0:64:
                    8f:52:9e:f1:76:b4:08:1e:08:f3:ce:e9:6b:c9:d6:
                    c2:7d:dc:76:02:89:73:a5:8a:6e:21:75:2f:30:2f:
                    07:05:e7:64:60:97:c5:7b:85:ff:ce:e6:62:ae:76:
                    04:82:f6:51:6b:3f:9b:dd:7c:ed:83:f8:a8:37:0f:
                    cb:47:0c:35:fd:38:0d:a6:88:cb:0a:89:a7:7b:ad:
                    e0:18:05:2e:01:e4:52:fc:60:75:64:71:51:a1:35:
                    e5:66:48:4c:a1:cc:54:0d:df:c4:f7:4e:e5:0b:fb:
                    e3:8a:08:d5:98:ed:ec:e6:9b:46:96:c4:60:2d:bf:
                    39:81:ce:e5:31:9e:68:47:4d:8c:77:fd:c8:6c:5a:
                    73:84:71:1a:20:63:97:cd:23:e8:c3:b6:8b:59:9c:
                    f5:53:57:6c:c5:76:0d:10:bf:d2:f6:56:26:b6:59:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E3:0B:2B:2A:1E:79:48:14:C0:2A:C5:CB:7F:35:0C:F0:D7:4D:0E
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3132332e3134302e302f32322d3234203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:8b:3c:65:c1:61:16:71:28:bd:a5:7a:9c:3b:d2:13:0f:45:
         03:6f:a2:cd:2f:38:51:89:47:7d:7d:5d:38:ce:90:48:dd:12:
         91:b2:ab:55:c0:f2:2e:2e:62:94:b9:d4:1c:7e:f8:4b:d0:ed:
         17:74:56:4a:61:a1:6c:7d:d8:5a:50:a8:5c:1f:e5:c2:d8:8f:
         ae:1a:f1:de:2e:3e:ab:a9:a5:67:14:61:1a:d0:a2:ec:d2:b8:
         aa:d2:84:b9:cd:d0:23:82:9b:b8:3c:24:69:fe:78:26:5e:43:
         83:05:bc:09:ef:5e:aa:3c:74:1a:d1:ff:62:d0:1f:8d:62:07:
         1a:c0:4a:89:58:bb:99:9c:61:15:49:1d:f1:77:c1:35:87:e9:
         4e:d6:93:e4:e3:b6:aa:b7:32:4e:c8:4e:02:72:dd:d3:c6:cf:
         48:b7:9a:d3:5c:f6:e5:ff:1f:02:08:9a:35:38:b5:0d:c5:a0:
         28:f7:fb:3e:e2:d8:0d:5f:e4:49:64:f2:6d:f9:da:8a:87:fb:
         c9:24:13:6c:84:f5:a2:17:26:a4:be:ec:35:25:ee:a8:90:95:
         95:c6:1e:9a:6a:c2:e4:47:e0:7c:d1:e8:1b:cc:7e:26:09:e4:
         4c:d1:49:39:1b:a5:0e:77:6d:a7:cf:f2:a1:1d:29:d3:b3:b1:
         d5:96:41:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:35 2026 by rpki-client