Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WISTRON/0/3130332e3230302e302e302f32322d3233203d3e20313331353939.roa
File:                     3130332e3230302e302e302f32322d3233203d3e20313331353939.roa (raw, json)
Hash identifier:          T4HmD89ZVvjMSwDCHyjR54GQTJGgE6FUKRi0sBDnNck=
Subject key identifier:   EA:74:32:0C:E0:12:90:E7:BE:C2:39:78:44:90:8A:08:12:10:F1:07
Certificate issuer:       /CN=C701A9F0608CB5B57D7C2422A64BBEBE06D789B9
Certificate serial:       7E751194A7E7647EF7F195C718713B9352CDCDAE
Authority key identifier: C7:01:A9:F0:60:8C:B5:B5:7D:7C:24:22:A6:4B:BE:BE:06:D7:89:B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WISTRON/0/3130332e3230302e302e302f32322d3233203d3e20313331353939.roa
Signing time:             Mon 11 May 2026 17:36:13 +0000
ROA not before:           Mon 11 May 2026 17:31:13 +0000
ROA not after:            Mon 10 May 2027 17:36:13 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.crl
                          rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:75:11:94:a7:e7:64:7e:f7:f1:95:c7:18:71:3b:93:52:cd:cd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C701A9F0608CB5B57D7C2422A64BBEBE06D789B9
        Validity
            Not Before: May 11 17:31:13 2026 GMT
            Not After : May 10 17:36:13 2027 GMT
        Subject: CN=EA74320CE01290E7BEC2397844908A081210F107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:c9:96:5f:b7:25:44:79:2c:08:86:86:2f:
                    27:9a:66:79:08:cc:86:c4:67:91:2a:82:19:35:cf:
                    e1:4e:0e:0e:c6:91:b0:54:0b:e5:5d:06:f6:73:3d:
                    9c:a9:33:8b:d1:5c:cf:3d:c5:c8:34:b6:8f:86:5c:
                    0b:4b:78:c8:3c:0a:a0:fb:0a:0c:71:6a:81:7d:dd:
                    74:fc:19:07:ae:65:03:61:ee:fd:eb:db:13:03:67:
                    4d:7a:e9:d6:4c:59:81:82:7b:f1:9a:91:d0:0b:bc:
                    96:9c:97:9a:61:bb:48:86:82:86:2b:0b:70:70:96:
                    4d:96:b8:14:92:71:13:06:e7:d0:ea:52:ac:ff:1e:
                    88:0d:cf:06:07:45:c7:29:1e:6b:01:e9:28:12:5f:
                    7f:b0:54:07:9f:c3:eb:ab:02:a5:b4:f3:9a:24:b6:
                    df:c6:18:e2:96:1d:05:2b:33:2a:5e:a0:db:f5:26:
                    ec:34:d5:24:02:8f:25:3c:a4:7a:98:48:39:19:9f:
                    66:04:b3:e4:85:41:fb:b6:66:fe:c8:e5:3c:2e:16:
                    f2:49:f6:e4:58:b9:5b:46:c4:5c:0a:0d:da:aa:b0:
                    9f:ef:b7:1a:b5:64:81:47:8a:76:dc:71:66:bd:d2:
                    ff:ba:3b:75:20:7c:fc:ef:9b:46:87:41:50:fb:df:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:74:32:0C:E0:12:90:E7:BE:C2:39:78:44:90:8A:08:12:10:F1:07
            X509v3 Authority Key Identifier:
                keyid:C7:01:A9:F0:60:8C:B5:B5:7D:7C:24:22:A6:4B:BE:BE:06:D7:89:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WISTRON/0/3130332e3230302e302e302f32322d3233203d3e20313331353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:fb:70:cf:ed:79:dc:96:47:73:68:bd:96:39:82:62:9b:16:
         93:eb:ec:a0:c7:5b:24:a5:76:2c:14:8a:ba:59:68:0b:86:ed:
         89:b7:fa:2e:71:46:fa:11:86:10:60:cc:fb:b1:6d:48:18:2f:
         51:f8:dd:d3:fa:1c:e0:b8:e3:90:7f:e4:8b:f7:41:d8:db:90:
         f9:7e:a1:7f:7d:fe:56:9c:d7:9a:38:51:08:0d:c2:bd:4b:2a:
         69:aa:7f:fc:f0:8f:e5:3f:3b:60:6f:fd:2b:29:09:c4:82:9c:
         30:11:c2:11:5d:9c:81:4c:e5:5e:83:af:9a:9d:31:f5:5d:b6:
         2f:5f:bc:19:0a:16:c3:cd:94:94:f9:99:50:d7:ce:56:8e:a9:
         ee:5b:87:81:24:c8:1d:37:ea:1a:22:fd:53:ec:49:8a:cd:20:
         5a:08:e0:d5:c0:c4:22:1a:cc:af:fc:42:2d:42:44:cd:69:72:
         23:a4:02:f6:62:79:91:0c:56:54:af:c8:a6:47:d4:25:d1:6d:
         73:63:89:e8:44:64:a5:e8:dd:b8:0f:f3:08:cc:2d:14:65:bc:
         5c:b9:8a:22:ef:26:82:02:8e:7e:31:31:66:f5:80:f8:c2:62:
         fc:c8:35:f6:b0:95:f5:46:6d:cd:c7:bd:40:dc:07:15:90:76:
         ff:a6:eb:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:17:22 2026 by rpki-client