Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132332e3139362e302f32322d3332203d3e20313331313439.roa
File:                     3130332e3132332e3139362e302f32322d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          TKYc7P8/LAkMHNgfW1aqA8h0faddx7IdhI2cquOgiQs=
Subject key identifier:   38:7E:18:4E:54:DA:87:88:C2:94:04:6B:FD:57:4B:75:B8:EC:AE:ED
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       65D3D47E5D1454B6946BBEE70F614240BE4056B6
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132332e3139362e302f32322d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:32:17 +0000
ROA not before:           Mon 11 May 2026 17:27:17 +0000
ROA not after:            Mon 10 May 2027 17:32:17 +0000
asID:                     131149
IP address blocks:        103.123.196.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d3:d4:7e:5d:14:54:b6:94:6b:be:e7:0f:61:42:40:be:40:56:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:27:17 2026 GMT
            Not After : May 10 17:32:17 2027 GMT
        Subject: CN=387E184E54DA8788C294046BFD574B75B8ECAEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:12:9b:57:6a:19:81:b2:1a:7d:b7:4f:18:33:
                    47:f8:99:0a:b9:4b:7c:e4:50:ec:f4:29:e4:6b:39:
                    7e:24:50:65:50:c6:c1:b9:6b:f9:58:5a:32:ed:66:
                    51:f2:0c:16:53:da:45:c1:6f:b5:7b:10:71:13:46:
                    4b:7e:cb:5e:2e:1d:c5:6c:02:bb:b7:64:df:10:07:
                    34:df:ae:3b:f8:ff:fa:66:04:8a:c9:e7:cb:dc:60:
                    ad:3c:6c:5f:04:03:f7:56:a9:97:9b:50:7a:77:e5:
                    fc:25:ac:bb:41:b5:a9:fc:e2:2f:96:1c:b2:b7:ce:
                    d2:18:72:ef:6a:15:a2:4b:15:c3:6d:fa:39:b7:a5:
                    cc:39:78:8f:b3:d5:c1:ea:56:d7:81:c8:4c:6a:db:
                    2d:8c:5f:a3:6b:02:9e:fa:54:a5:1b:9f:8a:ba:97:
                    1e:a5:69:a8:76:02:d1:7d:97:93:fd:0d:71:e2:58:
                    c2:50:18:3f:0a:c1:d6:70:41:00:de:09:d3:05:e7:
                    ef:67:be:79:54:0b:30:c3:2f:25:b0:31:8f:a8:b7:
                    c1:38:3c:b3:71:f8:6a:c5:34:95:38:19:1e:67:48:
                    3d:52:84:0e:0e:00:f9:19:65:a2:f0:e5:e4:29:7a:
                    81:c4:cf:34:f7:b9:a1:93:a1:99:eb:1f:a2:93:de:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:18:4E:54:DA:87:88:C2:94:04:6B:FD:57:4B:75:B8:EC:AE:ED
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132332e3139362e302f32322d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:c6:67:73:c0:ae:21:e1:97:ae:85:c9:8a:67:8a:36:1c:21:
         5a:9d:21:b4:12:2d:15:1e:f9:ba:53:49:1c:e0:21:03:4a:4c:
         c6:1f:be:5b:d1:0a:25:ed:19:e5:0d:7c:98:d0:55:23:83:65:
         0a:4f:a4:35:a7:8a:46:99:04:5e:7f:55:fc:f5:91:e2:23:22:
         ac:28:71:32:52:f6:7c:b8:2e:18:7c:23:df:aa:bf:e7:fd:93:
         a7:8d:47:85:42:c3:36:41:a5:b9:fe:77:3e:c5:54:28:2b:01:
         2f:24:e4:df:31:f4:ec:bf:ba:6a:97:6e:1a:73:55:95:32:e4:
         97:97:5c:20:7f:35:56:0e:96:77:d7:fa:bf:79:9b:3c:93:06:
         ea:44:0a:26:09:09:86:ab:54:3e:64:c6:7e:83:7b:44:e4:8e:
         e6:46:e1:60:31:17:8d:10:f7:c6:74:05:53:08:ca:41:88:37:
         df:4e:34:b2:ee:2e:a9:81:1d:d9:9f:3d:8d:a9:13:00:1c:d4:
         cd:8d:ec:4c:01:45:b8:7a:4e:0c:ce:a1:0c:37:81:85:5c:97:
         40:9f:63:ed:34:4a:27:08:e4:b8:49:a1:99:49:9e:e4:91:7a:
         e4:f4:ae:39:7e:f4:c4:55:1c:17:3a:cd:92:fc:2f:67:09:86:
         93:e6:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:15 2026 by rpki-client