Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/3131372e3130332e39362e302f32302d3234203d3e2039323634.roa
File:                     3131372e3130332e39362e302f32302d3234203d3e2039323634.roa (raw, json)
Hash identifier:          Vz+iPjPrCRTsSbl4PPjr0Om5Rv5u55bMs7yaivZ6Tqs=
Subject key identifier:   DF:1A:CF:B1:F4:01:38:B2:0E:0D:4C:05:71:1C:0C:AE:DD:8D:68:9A
Certificate issuer:       /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial:       14FC96DAE2CDCD2775D87A70B68EBEFE9C9E7FE0
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASNET/0/3131372e3130332e39362e302f32302d3234203d3e2039323634.roa
Signing time:             Mon 10 Aug 2026 02:04:00 +0000
ROA not before:           Mon 10 Aug 2026 01:59:00 +0000
ROA not after:            Mon 09 Aug 2027 02:04:00 +0000
asID:                     9264
IP address blocks:        117.103.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
                          rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 18:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fc:96:da:e2:cd:cd:27:75:d8:7a:70:b6:8e:be:fe:9c:9e:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
        Validity
            Not Before: Aug 10 01:59:00 2026 GMT
            Not After : Aug  9 02:04:00 2027 GMT
        Subject: CN=DF1ACFB1F40138B20E0D4C05711C0CAEDD8D689A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:f9:d3:b0:d1:cc:05:be:59:71:cd:92:68:
                    59:60:32:66:5f:c4:23:93:33:2e:80:9d:8f:3e:a9:
                    84:51:35:2a:41:ef:27:fe:a0:f6:ea:3f:39:09:c0:
                    23:bd:6c:1b:45:df:39:ef:55:90:4c:19:05:1e:87:
                    30:e1:16:22:c2:3e:67:48:44:9e:dc:ba:39:ed:0b:
                    39:97:68:2e:78:59:11:b8:96:82:01:52:60:8c:3a:
                    d1:ee:3e:f5:bd:70:d0:c5:f9:b0:a9:ee:21:2d:2e:
                    6e:83:a0:1a:7f:a7:77:89:a3:1a:c0:b8:dc:b9:6f:
                    64:5d:75:e0:62:5f:4a:45:62:87:a4:04:f8:1f:4b:
                    15:75:6d:ea:3b:36:9c:c2:2f:36:cb:87:2a:50:9e:
                    6e:2d:e9:85:cd:2d:16:bc:53:bb:43:1d:50:4c:08:
                    d7:17:b9:d1:e1:c5:1e:07:ba:89:21:69:b3:1c:e2:
                    bf:5d:ff:67:38:09:01:2c:fa:66:68:1f:84:8a:f6:
                    57:87:e0:ed:bf:b1:81:3c:ad:93:52:0f:aa:bc:27:
                    93:6b:fc:a0:69:89:e1:ad:85:50:1b:f1:fd:d0:36:
                    20:53:22:89:de:a0:5c:34:25:ae:1e:48:ae:15:ee:
                    1c:3d:02:3c:82:eb:ce:10:9d:bc:dc:aa:ca:40:9b:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1A:CF:B1:F4:01:38:B2:0E:0D:4C:05:71:1C:0C:AE:DD:8D:68:9A
            X509v3 Authority Key Identifier:
                keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/3131372e3130332e39362e302f32302d3234203d3e2039323634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:a4:9f:47:8a:92:c3:a6:e6:e9:4a:d2:7d:e1:22:52:e7:
         6c:5a:a1:e2:b0:bc:7c:55:38:0a:71:e3:d7:05:e2:20:8a:29:
         f3:75:c7:5b:a9:d6:8c:19:d1:b8:0f:12:f4:ca:aa:b3:94:a1:
         35:1d:c5:dc:b3:c6:2e:bf:c4:8a:44:a2:76:43:3f:0a:31:64:
         35:24:90:dd:1a:0e:be:33:aa:2b:62:4f:bc:e4:0e:41:6e:03:
         37:32:93:83:df:95:1e:a8:ec:4a:7d:fb:be:a4:4e:0d:00:f5:
         34:2d:76:6f:1b:ee:b1:fc:4b:98:65:5d:6b:45:3a:33:b6:d7:
         08:a4:be:b1:9e:ee:36:79:b8:51:93:f3:0d:90:0b:76:39:db:
         aa:20:38:21:a2:22:51:ba:d3:5f:2e:f8:59:87:81:af:1a:b6:
         9c:df:1e:64:45:fc:b1:d5:b7:0e:40:d6:32:cf:d0:43:c0:53:
         db:43:57:73:7a:11:16:5a:c3:69:2b:ce:fa:14:71:57:51:d4:
         2f:2e:13:e3:18:3f:35:86:00:26:58:f8:91:54:c4:77:6a:66:
         64:4b:b2:2e:13:66:97:c4:c2:af:fa:41:2a:fa:64:d7:d7:1c:
         12:1b:31:8d:be:6c:ec:90:96:ec:d0:a2:6f:19:62:94:6b:98:
         88:eb:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:51:27 2026 by rpki-client