Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/XINAN/0/3130332e36342e32302e302f32332d3332203d3e20313331363432.roa
File:                     3130332e36342e32302e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          1DALKgFnmnBkBbfqL+5wd8bNhZxE7Yp0F19KIaQK+90=
Subject key identifier:   F1:40:C1:1B:00:0D:57:6C:C2:C9:B9:D3:56:18:36:E2:24:19:34:0F
Certificate issuer:       /CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
Certificate serial:       3210C53FF6EB7E607CE198695C4EB8DECDB96427
Authority key identifier: AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/XINAN/0/3130332e36342e32302e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:37:55 +0000
ROA not before:           Mon 11 May 2026 17:32:55 +0000
ROA not after:            Mon 10 May 2027 17:37:55 +0000
asID:                     131642
IP address blocks:        103.64.20.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl
                          rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:10:c5:3f:f6:eb:7e:60:7c:e1:98:69:5c:4e:b8:de:cd:b9:64:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F
        Validity
            Not Before: May 11 17:32:55 2026 GMT
            Not After : May 10 17:37:55 2027 GMT
        Subject: CN=F140C11B000D576CC2C9B9D3561836E22419340F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ab:c9:08:82:bd:f7:f9:1e:83:11:88:f0:ae:
                    0c:5d:f9:70:a2:e0:d5:6e:e5:f9:6e:b4:02:df:54:
                    e0:08:50:f4:02:2e:75:da:64:bf:e0:1f:dc:37:0d:
                    cb:3b:71:14:3d:da:d0:5b:cc:d0:55:96:02:ce:c8:
                    90:46:e1:c6:75:94:c8:70:7c:84:71:7c:da:f2:dc:
                    b5:4b:3d:7f:c8:3a:c7:5a:8a:8b:24:e7:36:b6:4a:
                    38:ba:b3:4f:6b:22:73:34:0c:45:2d:88:ae:e8:16:
                    1f:37:4f:f8:0e:96:e8:fb:e5:c9:6c:4b:41:ba:c8:
                    60:5e:6a:a3:e0:92:b8:e1:fc:5e:e9:b2:f0:c8:fa:
                    d7:5f:7d:ce:fd:17:95:3e:e8:fd:1d:62:9d:12:d4:
                    c5:ef:51:27:3e:7e:05:1f:0b:9d:98:fc:53:b1:c3:
                    b6:a3:fd:da:d2:11:15:a8:1b:b2:84:61:c0:52:72:
                    70:08:a7:55:e7:ed:0c:02:da:67:44:9a:39:ee:2d:
                    bd:7d:01:0b:f2:01:d5:cc:39:c2:4f:62:7b:cc:80:
                    bf:37:55:14:dc:92:56:9b:49:f0:40:af:f2:d2:5c:
                    be:03:45:85:61:f6:4d:b8:f9:9a:49:02:fd:a7:e9:
                    aa:9d:02:a1:b3:9b:8d:18:0c:46:9e:85:de:33:e3:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:C1:1B:00:0D:57:6C:C2:C9:B9:D3:56:18:36:E2:24:19:34:0F
            X509v3 Authority Key Identifier:
                keyid:AE:E6:3A:A8:B7:A1:09:2E:18:58:CE:28:DF:C7:FB:07:EC:D0:D0:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AEE63AA8B7A1092E1858CE28DFC7FB07ECD0D02F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/XINAN/0/3130332e36342e32302e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:10:c3:d0:bf:b4:2b:94:c3:60:f7:51:d9:6b:cc:4d:1c:fc:
         02:65:e8:56:43:8f:7e:8a:d3:4a:2d:a4:50:be:8b:d6:c3:e8:
         fa:be:b7:4e:a6:c3:e4:4f:52:3f:4f:2f:79:03:05:a9:5a:e8:
         b9:a1:02:98:32:94:03:4e:ad:77:d2:7d:59:4a:f1:77:15:bd:
         f3:42:31:1b:66:f3:6f:5b:b6:57:2b:e7:8b:02:a8:bb:e0:21:
         e5:06:64:f7:72:d6:d7:5f:db:30:3b:d7:0c:ba:0b:a7:f0:2a:
         8f:1e:46:cb:7a:64:f6:73:bf:7f:7a:55:19:63:53:ae:14:45:
         d6:80:d4:7f:e3:0c:f6:dd:fb:f5:2d:0b:68:6a:f0:08:3c:3d:
         f2:e2:1f:de:0e:52:7c:1b:af:93:6f:be:f8:a1:c7:60:a3:9d:
         8d:a6:16:52:00:07:ce:3d:af:bf:81:4d:77:e8:e8:e0:a4:5a:
         9d:e3:4b:58:88:fe:37:9e:3a:1c:c3:54:4f:9a:78:bb:e6:27:
         3c:40:aa:64:1b:f9:07:80:5a:0f:de:a7:9f:dc:22:bd:4f:66:
         2a:5e:fb:21:68:cf:0e:1c:25:fc:83:a3:66:bb:a6:1c:05:2a:
         b5:8f:35:40:13:e9:42:3a:be:de:99:ae:df:0b:bb:24:e4:a0:
         a9:e1:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:07 2026 by rpki-client