Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CARL-NET/0/3130332e3130332e38302e302f32322d3234203d3e2037353336.roa
File:                     3130332e3130332e38302e302f32322d3234203d3e2037353336.roa (raw, json)
Hash identifier:          dGPLq2lyYCFxtDkCnYUjXrZAi+ZIN3xKzHo/rdmq9Wo=
Subject key identifier:   AB:73:18:AD:9D:67:57:41:43:A0:6C:2D:24:BC:9B:C6:AC:C3:80:A7
Certificate issuer:       /CN=73E6AC8F948D0C97D941F26531617C19223508E6
Certificate serial:       7A0B2B1B5AF527F36DF48155C5060078097BCBA3
Authority key identifier: 73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3130332e3130332e38302e302f32322d3234203d3e2037353336.roa
Signing time:             Mon 11 May 2026 17:56:04 +0000
ROA not before:           Mon 11 May 2026 17:51:04 +0000
ROA not after:            Mon 10 May 2027 17:56:04 +0000
asID:                     7536
IP address blocks:        103.103.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl
                          rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0b:2b:1b:5a:f5:27:f3:6d:f4:81:55:c5:06:00:78:09:7b:cb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73E6AC8F948D0C97D941F26531617C19223508E6
        Validity
            Not Before: May 11 17:51:04 2026 GMT
            Not After : May 10 17:56:04 2027 GMT
        Subject: CN=AB7318AD9D67574143A06C2D24BC9BC6ACC380A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:1c:3a:72:ad:30:b9:9b:85:49:8f:8a:63:
                    a9:6d:4c:56:76:7a:8d:11:43:92:11:ee:74:27:41:
                    af:ae:c4:ae:97:ef:73:cd:c4:b1:c1:f4:bf:a9:09:
                    60:2b:22:7e:39:de:e4:7b:36:0b:ab:3d:e0:0e:00:
                    0a:b1:56:69:e1:a8:1c:c4:f7:4e:f8:7d:fa:6b:5d:
                    b0:96:3b:78:c5:42:3d:56:5d:d2:1a:6b:17:48:6e:
                    2e:03:4e:4a:47:2a:f8:56:23:2e:b6:bd:03:5c:8f:
                    56:8b:3f:6c:1b:59:59:71:a5:3e:91:46:65:fe:4f:
                    44:96:eb:78:45:24:04:b0:84:c9:55:4d:b3:03:e1:
                    f9:fe:4e:d2:0c:6d:6f:14:22:37:98:21:3b:8e:81:
                    36:c4:87:41:6c:5a:41:0b:e9:36:95:5d:56:5e:bf:
                    e5:6f:67:80:01:e3:ab:b6:36:0f:c5:bf:11:9f:0c:
                    41:55:4c:9b:b9:ce:68:03:18:54:4e:6b:f8:d3:ac:
                    bb:7a:f0:61:9b:d4:ac:ff:74:76:e2:92:5c:a8:b4:
                    b4:b1:9d:62:83:f8:7e:69:40:3b:33:6a:c5:23:f9:
                    8f:6b:b4:f5:a8:da:95:ec:86:62:a5:8b:91:b1:08:
                    33:b4:7f:42:8e:1d:cf:14:31:4f:77:a2:42:1a:5e:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:18:AD:9D:67:57:41:43:A0:6C:2D:24:BC:9B:C6:AC:C3:80:A7
            X509v3 Authority Key Identifier:
                keyid:73:E6:AC:8F:94:8D:0C:97:D9:41:F2:65:31:61:7C:19:22:35:08:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/73E6AC8F948D0C97D941F26531617C19223508E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/73E6AC8F948D0C97D941F26531617C19223508E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CARL-NET/0/3130332e3130332e38302e302f32322d3234203d3e2037353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:70:c5:e6:65:55:56:d9:e6:de:41:f4:93:c9:03:bf:8f:30:
         9d:c2:bd:22:02:eb:de:d9:1c:2d:f4:63:e9:58:8b:3a:c7:70:
         2b:a9:3e:f7:57:21:ca:47:d2:08:cc:4f:93:47:41:f9:96:1d:
         13:bd:d3:dc:15:2f:52:5e:67:a6:c9:cd:28:94:68:29:c2:df:
         b9:06:86:e2:96:1a:28:3e:e5:67:e4:72:d5:61:38:15:73:8f:
         14:8f:15:8c:2f:87:58:fe:28:cc:a6:cc:2a:e1:7c:ad:50:91:
         30:2e:43:77:ac:01:58:f7:2e:78:bb:4e:fa:7a:fc:91:f6:b4:
         c6:cc:04:10:a7:c1:05:01:15:dd:a3:19:35:73:af:9f:0c:37:
         f2:a7:57:00:c9:86:66:dd:80:3d:e3:76:63:61:90:4a:25:24:
         61:b9:5e:e0:0b:79:ee:7d:db:14:2c:08:43:68:56:a2:c5:20:
         19:3e:be:b6:ce:77:2c:eb:00:54:ad:61:cc:8c:71:ad:68:fe:
         df:62:70:af:9d:b7:7f:28:4e:93:88:58:ba:d6:91:bc:c0:8b:
         e7:84:d9:a0:48:63:10:7f:a6:66:7a:ef:ac:e0:b3:3b:83:49:
         76:52:61:60:ea:b9:ef:7e:25:9f:56:f0:57:74:d0:b8:db:25:
         9d:af:97:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:10:47 2026 by rpki-client