Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34372e302f32342d3234203d3e203138343234.roa
File:                     3130332e33302e34372e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          qS+tssR0AZJ8mV6nPzXy5gK+REd30zkxdfjkl1PhJkI=
Subject key identifier:   6C:5C:2C:14:BF:E1:F7:F8:4C:75:BC:41:E9:8A:CC:F9:F1:25:AB:CD
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       0F22C14FC6E883D3F0BE412C880EFF97AE74CCD5
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34372e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:07:15 +0000
ROA not before:           Mon 11 May 2026 17:02:15 +0000
ROA not after:            Mon 10 May 2027 17:07:15 +0000
asID:                     18424
IP address blocks:        103.30.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:22:c1:4f:c6:e8:83:d3:f0:be:41:2c:88:0e:ff:97:ae:74:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:02:15 2026 GMT
            Not After : May 10 17:07:15 2027 GMT
        Subject: CN=6C5C2C14BFE1F7F84C75BC41E98ACCF9F125ABCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:8f:10:71:aa:0b:e9:ca:bc:c1:7d:c3:ad:
                    d2:f6:ca:89:f2:2d:65:b2:72:ad:27:2c:18:35:de:
                    e8:a1:f6:82:8a:62:a6:17:b2:65:8d:9c:9d:37:65:
                    b3:6d:99:70:60:d3:09:36:79:9a:57:68:10:86:15:
                    2e:2e:e2:6e:c6:76:ce:aa:f6:46:42:43:96:b6:1d:
                    55:bd:72:6e:11:70:c1:a5:b1:2d:51:fc:5c:d6:ce:
                    cf:e4:da:8b:2f:be:11:ce:a8:96:71:9d:a8:a2:a4:
                    74:d3:fe:fd:9f:14:b4:6e:ad:6d:94:c2:64:29:46:
                    43:90:8c:ee:55:3d:2e:bc:1b:0f:50:fc:9e:08:ec:
                    e4:6f:93:f7:d4:65:1d:ad:8b:ed:f5:c9:85:51:f6:
                    6f:5c:00:e4:73:ed:98:57:41:93:04:30:3f:3c:11:
                    4b:67:7a:03:aa:f8:71:55:8e:c2:c2:b9:c8:af:58:
                    af:a7:e6:cc:10:84:f9:6c:03:91:55:51:f3:c2:7f:
                    bf:99:02:d6:b3:d0:18:12:c5:3f:6f:47:ec:ae:f6:
                    9d:4c:30:37:b7:2c:70:a5:c7:03:19:11:a3:3e:38:
                    74:51:41:56:4b:99:7b:a8:16:a4:5e:b3:fd:89:c9:
                    32:82:ba:9b:78:fa:eb:a8:a3:dd:f4:6d:b2:24:1b:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5C:2C:14:BF:E1:F7:F8:4C:75:BC:41:E9:8A:CC:F9:F1:25:AB:CD
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34372e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:04:64:b3:58:2a:d7:90:ce:09:56:94:9d:ac:e4:03:88:1c:
         be:31:36:8b:aa:62:4b:6a:e3:d9:ab:41:f0:f0:5e:e9:ba:20:
         d7:25:dd:68:86:63:c5:34:1e:ab:4f:8e:a0:c5:ac:ad:2a:dd:
         8c:22:d7:7a:7a:d0:fa:38:d6:ad:bf:ec:3b:92:b7:b2:7d:05:
         33:a4:fc:7f:c8:e1:cb:79:07:1f:59:ba:b5:e6:03:d1:e2:f8:
         38:86:bc:5f:5d:2e:b5:10:71:3b:66:e8:3d:29:66:02:a2:37:
         44:d0:4f:c0:3d:ce:9d:4b:cd:d4:47:88:78:d5:4a:82:4a:5a:
         b7:9a:2b:9e:9d:46:de:e8:44:e0:fd:bb:7d:ef:93:c4:36:de:
         af:3a:06:13:1e:dd:7a:33:59:fc:d6:3c:4e:68:62:3f:06:db:
         ac:94:48:f6:a6:c9:27:75:06:c1:ce:03:89:14:c9:0b:52:bc:
         d4:3a:fa:06:b6:86:8e:5f:ce:63:70:21:b7:74:ec:34:b6:2a:
         b8:53:c0:e9:fd:27:b9:e4:b1:51:fe:e7:fc:28:04:88:72:fa:
         01:ad:02:8a:cf:1d:c6:1c:42:f3:e6:18:f8:3f:73:1a:7d:ff:
         e2:b9:cf:31:68:b0:d3:2a:68:5a:8e:04:9c:83:5d:da:11:ec:
         c5:2a:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:17 2026 by rpki-client