Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa
File:                     3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa (raw, json)
Hash identifier:          nhkWWbEcHMQGryDxoH+6rKNwicNf5iRZvw6pvqc84z4=
Subject key identifier:   58:D9:D2:BF:6A:BF:17:20:F6:54:63:81:73:81:9F:73:6B:B6:33:B1
Certificate issuer:       /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
Certificate serial:       48612E27BB856DC67477A4D0134FCBEC933FD614
Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:04:47 +0000
ROA not before:           Mon 11 May 2026 16:59:47 +0000
ROA not after:            Mon 10 May 2027 17:04:47 +0000
asID:                     17408
IP address blocks:        103.138.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl
                          rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:61:2e:27:bb:85:6d:c6:74:77:a4:d0:13:4f:cb:ec:93:3f:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
        Validity
            Not Before: May 11 16:59:47 2026 GMT
            Not After : May 10 17:04:47 2027 GMT
        Subject: CN=58D9D2BF6ABF1720F654638173819F736BB633B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:b4:53:a6:5a:3e:ac:a8:65:c8:e7:3b:ee:
                    f6:27:36:d6:f9:f5:5b:83:14:94:58:75:50:34:9a:
                    2f:ce:0f:2d:f6:28:8c:b1:a5:11:df:63:18:8f:91:
                    11:45:3e:83:4d:ae:80:e7:1a:33:36:93:35:06:04:
                    7e:83:a3:ae:b8:3d:cc:07:52:df:23:3c:8d:81:5c:
                    32:62:0f:e2:a2:23:29:53:27:6a:1d:5e:d3:21:1a:
                    a2:62:d8:f4:ad:9d:18:d6:b8:8d:6a:be:b4:60:6e:
                    8e:7d:f9:30:d9:61:61:35:cc:9c:f5:8c:3c:11:22:
                    cb:63:8a:d7:07:e0:d3:c1:22:30:f3:2a:96:e1:f2:
                    3d:69:14:27:05:75:17:50:dc:7d:09:2e:df:01:12:
                    a1:dd:03:36:9e:d9:c2:9f:e4:6f:f6:33:db:d6:d3:
                    ac:77:0c:ca:5e:d5:6e:b9:5a:ff:2e:17:e6:e3:e2:
                    b1:75:29:27:ab:68:5e:59:f8:63:55:5b:2a:73:3d:
                    96:82:35:67:ae:63:39:81:f7:8d:44:91:00:58:a7:
                    5b:f0:96:39:d0:df:59:ba:88:26:17:da:18:08:97:
                    8d:18:f3:53:4e:44:98:96:a3:e4:17:31:9e:61:7e:
                    56:3f:32:9f:96:2c:50:6e:53:03:7b:57:c4:a5:64:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D9:D2:BF:6A:BF:17:20:F6:54:63:81:73:81:9F:73:6B:B6:33:B1
            X509v3 Authority Key Identifier:
                keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130362e302f32332d3234203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:d2:61:f1:58:90:7f:cb:c4:bc:13:da:4a:73:0d:9d:0f:bf:
         27:c9:ca:83:91:5c:50:af:62:63:1c:f1:6c:5e:6a:2f:b5:60:
         cb:10:5f:03:99:5e:0c:08:12:a6:0e:b9:c0:df:c4:ad:d6:6e:
         70:3b:5d:d8:ad:3a:fe:75:3a:2c:9b:c2:7a:8f:61:84:ac:83:
         a1:48:e0:f3:c6:8c:59:8f:97:eb:2e:fa:aa:4a:2c:3e:9d:22:
         85:cc:45:71:a7:83:41:53:e8:ff:62:76:d6:e7:31:c3:aa:14:
         2e:b7:7b:59:3d:24:d1:8f:a1:e3:a3:f7:3f:9a:ba:29:ac:dd:
         05:86:d1:a6:f6:70:49:8a:d1:87:87:79:d0:b0:6a:bc:8e:2a:
         4f:ac:37:03:05:d7:b7:4c:bf:6c:b7:23:b3:14:eb:fe:71:f0:
         a0:9d:06:f0:b2:d6:38:cc:2b:ab:cd:0e:f5:31:17:2c:62:97:
         d7:91:44:04:76:c7:a8:91:dc:28:83:ae:e8:a8:4f:74:90:88:
         25:33:c6:5e:46:53:c0:84:be:73:e3:db:8f:4e:7a:96:14:c1:
         f6:f7:c2:2f:76:54:d0:31:ad:30:bc:a9:9e:8b:ed:0a:b7:13:
         fc:3c:0f:61:ac:f1:23:b6:ad:27:15:eb:9a:ff:8e:32:90:61:
         0d:b7:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:00 2026 by rpki-client