Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CCP1138470/0/3130332e3138302e31342e302f32332d3234203d3e203633383933.roa
File:                     3130332e3138302e31342e302f32332d3234203d3e203633383933.roa (raw, json)
Hash identifier:          dIUSmyYxKhCOy30LHVb9g7/r4ZV90ZHq3KAUNhUgfNQ=
Subject key identifier:   70:7E:3A:12:A2:B0:17:F7:D9:F3:A1:46:ED:6E:A0:2A:B6:F5:75:2D
Certificate issuer:       /CN=30886A5C2BBD980DCAD17065B483FDADE1588115
Certificate serial:       33609DD2FDFE2996B4462D6AB80780EF47B0AA8E
Authority key identifier: 30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138470/0/3130332e3138302e31342e302f32332d3234203d3e203633383933.roa
Signing time:             Mon 11 May 2026 17:15:42 +0000
ROA not before:           Mon 11 May 2026 17:10:42 +0000
ROA not after:            Mon 10 May 2027 17:15:42 +0000
asID:                     63893
IP address blocks:        103.180.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl
                          rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:60:9d:d2:fd:fe:29:96:b4:46:2d:6a:b8:07:80:ef:47:b0:aa:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30886A5C2BBD980DCAD17065B483FDADE1588115
        Validity
            Not Before: May 11 17:10:42 2026 GMT
            Not After : May 10 17:15:42 2027 GMT
        Subject: CN=707E3A12A2B017F7D9F3A146ED6EA02AB6F5752D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:b6:6a:75:ea:82:c7:17:42:38:d1:46:d4:
                    33:10:b0:37:85:bb:d0:7f:99:69:d0:f6:a9:6e:3c:
                    7f:3b:7c:41:00:3f:ac:18:24:65:9a:73:50:27:4e:
                    c5:4c:0b:6e:c3:37:c7:1b:3f:00:a6:9e:2b:2b:b1:
                    20:9f:5a:1d:37:f1:8f:5f:3c:cc:07:21:98:0f:46:
                    df:f0:e3:d5:1b:f0:49:ab:02:82:b8:4b:a9:1f:f4:
                    f9:77:15:38:e0:16:f6:ab:b3:93:bf:c3:a5:0f:04:
                    d9:a0:4d:1e:f8:1c:21:8b:fd:5a:6b:fd:c3:c2:63:
                    e2:26:9a:da:35:43:ab:a2:c6:a6:a6:44:fd:4c:1e:
                    76:8d:c4:91:b9:86:4f:d1:bb:c3:1d:c3:70:8d:93:
                    01:65:fb:6b:a3:43:9c:13:8e:f0:e5:70:bc:1a:e6:
                    32:19:e1:c2:c2:29:40:e9:10:24:a8:41:eb:5b:f3:
                    3c:9b:65:d9:ee:28:f8:bb:d2:f8:c4:1f:3f:a5:6c:
                    73:d6:ca:7f:18:35:03:ed:85:e9:7b:a3:dd:e9:6c:
                    a2:68:b3:06:e3:2e:9d:4d:32:f0:d3:f1:b2:3a:a4:
                    9d:e3:f4:c2:0f:d2:86:65:d1:a0:7c:c0:70:64:2a:
                    e4:c0:8d:68:40:cb:1c:0c:1b:cd:b9:63:e9:0b:1d:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:3A:12:A2:B0:17:F7:D9:F3:A1:46:ED:6E:A0:2A:B6:F5:75:2D
            X509v3 Authority Key Identifier:
                keyid:30:88:6A:5C:2B:BD:98:0D:CA:D1:70:65:B4:83:FD:AD:E1:58:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/30886A5C2BBD980DCAD17065B483FDADE1588115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/30886A5C2BBD980DCAD17065B483FDADE1588115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138470/0/3130332e3138302e31342e302f32332d3234203d3e203633383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:40:55:6c:b6:84:92:11:f5:c7:bc:7a:e2:99:88:0e:49:18:
         d8:cc:6b:23:2c:df:d5:4d:09:00:37:75:50:15:6d:51:8f:4e:
         fc:93:ec:d3:f7:8a:1c:10:7c:30:b2:99:9b:50:2e:6d:de:17:
         02:e2:79:98:c6:e3:93:8e:4e:43:f0:94:6e:4a:e5:0f:08:85:
         eb:f0:8d:d5:80:79:f5:d9:c4:5f:b5:82:33:dd:18:e7:d7:6b:
         6b:62:11:94:2c:5f:85:c0:1e:97:f5:12:9e:d4:65:79:f8:01:
         2a:bd:c2:0e:ef:24:aa:bd:60:88:3a:a7:8e:7a:af:ef:9a:89:
         7a:25:a1:d3:04:4e:40:6a:67:9c:0e:05:66:5d:96:e2:3f:8e:
         d4:81:25:af:89:09:e0:a7:c2:07:03:85:d8:29:07:87:48:85:
         fa:a9:e7:4e:0a:6e:41:92:6f:b3:07:79:ea:35:79:a0:86:30:
         3a:87:07:98:9c:a8:93:fe:92:84:a5:62:1e:e4:ea:d0:c0:b2:
         a8:74:0d:04:51:35:73:08:b3:3f:b6:32:69:f3:a2:c1:26:96:
         93:16:16:56:0f:6a:66:dc:32:41:2f:93:6a:8b:2c:1e:4d:18:
         0a:a9:96:c0:65:02:e0:08:29:06:03:23:2c:69:7b:32:8b:03:
         21:3d:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:56 2026 by rpki-client