Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3133302e39322e302f32322d3234203d3e203138343139.roa
File:                     3130332e3133302e39322e302f32322d3234203d3e203138343139.roa (raw, json)
Hash identifier:          mqMrdcKlCIt7VJ32GwiC+l4+/ZkUaeX/w0lvhAkww/M=
Subject key identifier:   DC:D5:7B:34:36:B8:A1:22:EC:B7:C8:B8:60:46:60:AB:EB:6C:C4:23
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       316500AEBDA66A08AE37C4BF55404A99712B414A
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3133302e39322e302f32322d3234203d3e203138343139.roa
Signing time:             Mon 11 May 2026 17:32:49 +0000
ROA not before:           Mon 11 May 2026 17:27:49 +0000
ROA not after:            Mon 10 May 2027 17:32:49 +0000
asID:                     18419
IP address blocks:        103.130.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:65:00:ae:bd:a6:6a:08:ae:37:c4:bf:55:40:4a:99:71:2b:41:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: May 11 17:27:49 2026 GMT
            Not After : May 10 17:32:49 2027 GMT
        Subject: CN=DCD57B3436B8A122ECB7C8B8604660ABEB6CC423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:12:47:ee:df:71:cf:3d:68:4f:92:e9:ca:
                    8c:8e:09:45:85:77:36:f7:62:99:c4:37:7b:8c:8a:
                    d5:ec:22:c9:6a:df:63:ad:7f:16:c1:4b:7a:61:0e:
                    fa:f1:ec:fe:46:9b:9c:ac:60:e8:41:e3:6e:15:53:
                    48:76:6a:e8:12:c4:8f:10:2c:fe:c5:93:86:d5:5a:
                    81:14:3b:97:45:a0:ff:7f:ad:79:e7:dd:b1:58:c5:
                    0d:bc:5c:3a:df:66:ee:c0:8c:0c:e0:2e:87:0d:88:
                    13:e7:cd:88:4a:eb:80:ec:75:03:5b:25:1f:7d:32:
                    b4:80:27:80:7e:6f:30:22:9b:bf:cb:31:bd:2e:75:
                    20:22:fd:64:51:c4:b0:34:e9:f6:4e:50:a2:08:9e:
                    ff:68:cc:4b:2d:7d:1a:66:b3:19:08:ee:98:84:d4:
                    cf:53:3f:1f:0c:4b:dd:1a:6d:c9:35:5f:15:5a:9a:
                    9a:0d:35:9e:0d:27:9d:61:4a:ab:1d:4e:ed:b2:36:
                    48:e4:37:99:c9:64:ef:5c:ce:a2:7c:f4:db:8c:f9:
                    6c:6d:5d:04:79:f0:3e:b1:31:52:b4:04:8c:09:65:
                    bc:67:3b:7d:80:89:f4:3a:80:53:48:6a:ef:d1:53:
                    07:ff:1f:2c:ae:1b:51:34:d0:39:d9:0b:df:7b:2c:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D5:7B:34:36:B8:A1:22:EC:B7:C8:B8:60:46:60:AB:EB:6C:C4:23
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3133302e39322e302f32322d3234203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ef:11:e1:6e:37:7b:a8:1e:fe:a6:1a:f9:9d:96:bd:89:92:b4:
         88:69:4b:92:c3:a7:a5:53:dd:ce:89:e0:e9:d1:e9:20:6e:b3:
         b1:5d:a1:a8:c7:08:d6:1f:cf:bf:d1:2b:79:fb:4d:3d:6c:e3:
         b8:9e:b6:22:21:83:fa:ab:70:fa:6b:fd:f1:c2:ea:0e:a9:7f:
         55:29:a4:ad:97:79:d8:7c:e4:78:4c:f5:46:fc:72:e0:d1:d8:
         7a:58:0a:74:05:ca:1d:ad:f6:2e:1b:2d:e8:c2:6f:b1:65:02:
         b9:6b:b9:2b:47:44:8f:fe:3d:d8:f7:14:6c:bd:04:96:b6:2f:
         21:92:dc:9b:73:0b:61:06:7c:d6:6b:93:27:a5:9e:8d:28:5f:
         2b:97:fa:eb:08:7f:4d:66:2c:15:7a:d2:10:64:64:6d:1d:25:
         9a:e6:e4:2f:46:5f:4c:92:9f:55:1b:a4:bb:25:7b:e3:7f:49:
         b3:1a:cc:3f:96:58:d8:eb:d5:1e:37:81:dc:c7:4e:62:9d:be:
         fa:46:7c:90:04:3d:be:1a:34:a7:a6:78:5d:8b:02:87:53:3d:
         cb:4d:f6:37:9f:e5:19:a0:62:ab:84:ac:97:98:e3:6b:7b:46:
         0e:e0:94:c2:d1:ed:b2:65:d7:56:b2:36:2d:48:3d:2d:01:ca:
         e8:d6:ca:c1
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUMWUArr2magiuN8S/VUBKmXErQUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE
MUY0QTlCRTAeFw0yNjA1MTExNzI3NDlaFw0yNzA1MTAxNzMyNDlaMDMxMTAvBgNV
BAMTKERDRDU3QjM0MzZCOEExMjJFQ0I3QzhCODYwNDY2MEFCRUI2Q0M0MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnxJH7t9xzz1oT5LpyoyOCUWF
dzb3YpnEN3uMitXsIslq32OtfxbBS3phDvrx7P5Gm5ysYOhB424VU0h2augSxI8Q
LP7Fk4bVWoEUO5dFoP9/rXnn3bFYxQ28XDrfZu7AjAzgLocNiBPnzYhK64DsdQNb
JR99MrSAJ4B+bzAim7/LMb0udSAi/WRRxLA06fZOUKIInv9ozEstfRpmsxkI7piE
1M9TPx8MS90abck1XxVampoNNZ4NJ51hSqsdTu2yNkjkN5nJZO9czqJ89NuM+Wxt
XQR58D6xMVK0BIwJZbxnO32AifQ6gFNIau/RUwf/HyyuG1E00DnZC997LNZhAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU3NV7NDa4oSLst8i4YEZgq+tsxCMwHwYDVR0j
BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU
RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC
QUZDOUVEMUY0QTlCRS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zMTMwMzMyZTMx
MzMzMDJlMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzgzNDMxMzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnglwwDQYJKoZIhvcNAQELBQADggEBAO8R4W43e6ge/qYa+Z2WvYmS
tIhpS5LDp6VT3c6J4OnR6SBus7FdoajHCNYfz7/RK3n7TT1s47ietiIhg/qrcPpr
/fHC6g6pf1UppK2Xedh85HhM9Ub8cuDR2HpYCnQFyh2t9i4bLejCb7FlArlruStH
RI/+Pdj3FGy9BJa2LyGS3JtzC2EGfNZrkyelno0oXyuX+usIf01mLBV60hBkZG0d
JZrm5C9GX0ySn1UbpLsle+N/SbMazD+WWNjr1R43gdzHTmKdvvpGfJAEPb4aNKem
eF2LAodTPctN9jef5RmgYquErJeY42t7Rg7glMLR7bJl11ayNi1IPS0ByujWysE=
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:28 2026 by rpki-client