Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa
File:                     3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa (raw, json)
Hash identifier:          OVmj6wqpCDoCVGv/wnIQ7J+KG2IP7XidmU+Gbdn+nyQ=
Subject key identifier:   27:3B:B9:7E:C8:F1:9D:18:B5:E8:7E:9B:71:29:9D:BE:9B:C1:5D:9B
Certificate issuer:       /CN=8B6578CFFA2564370C947633B4222B38FBE04787
Certificate serial:       4B6D795A25E5045BA81ECC66D3B2D4ECBA3752EF
Authority key identifier: 8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa
Signing time:             Mon 11 May 2026 17:58:01 +0000
ROA not before:           Mon 11 May 2026 17:53:01 +0000
ROA not after:            Mon 10 May 2027 17:58:01 +0000
asID:                     150288
IP address blocks:        103.104.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl
                          rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6d:79:5a:25:e5:04:5b:a8:1e:cc:66:d3:b2:d4:ec:ba:37:52:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6578CFFA2564370C947633B4222B38FBE04787
        Validity
            Not Before: May 11 17:53:01 2026 GMT
            Not After : May 10 17:58:01 2027 GMT
        Subject: CN=273BB97EC8F19D18B5E87E9B71299DBE9BC15D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:e4:e7:ca:40:27:ee:0a:a9:89:e4:02:76:
                    7c:b1:af:bd:34:11:5a:fd:60:08:a3:47:45:b0:36:
                    ab:d4:69:c5:99:5c:63:e4:93:e0:0e:2b:df:3c:65:
                    a0:38:7b:4e:73:ed:cd:9c:f8:c8:f3:32:f0:7a:69:
                    fd:95:4a:a0:d3:7b:0b:77:03:00:3a:b2:5b:8d:77:
                    1e:86:86:01:b5:07:5b:cd:3b:46:d2:3a:7b:85:84:
                    a9:85:e9:60:0e:93:78:e7:74:af:d8:79:32:67:94:
                    33:59:36:6f:2f:3b:41:58:0a:44:60:f7:57:0e:7f:
                    8d:aa:4c:d8:d6:a9:d0:03:bf:7c:68:02:d2:2c:77:
                    c1:6a:87:c9:a2:31:d0:38:1d:a3:65:5d:9d:7f:8b:
                    cf:87:74:e0:23:ac:66:a9:8e:b6:a6:6c:ec:e8:0e:
                    e5:a0:ec:d2:1b:2e:42:37:c4:cc:18:e0:ee:58:8b:
                    94:5a:e5:2d:a9:64:37:22:8d:d2:13:12:19:dc:dd:
                    9a:f9:3f:1e:a0:04:ab:ac:aa:ff:96:8c:5e:71:f1:
                    aa:b2:53:fc:08:19:1a:bc:bb:01:f4:e2:2a:fa:e5:
                    6a:14:08:e7:3e:74:c5:07:f6:e1:20:d7:90:32:44:
                    a2:01:55:23:c4:bf:5c:3d:7f:c4:ab:45:62:62:78:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:B9:7E:C8:F1:9D:18:B5:E8:7E:9B:71:29:9D:BE:9B:C1:5D:9B
            X509v3 Authority Key Identifier:
                keyid:8B:65:78:CF:FA:25:64:37:0C:94:76:33:B4:22:2B:38:FB:E0:47:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/8B6578CFFA2564370C947633B4222B38FBE04787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8B6578CFFA2564370C947633B4222B38FBE04787.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CENTROID/0/3130332e3130342e3135312e302f32342d3234203d3e20313530323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:e9:7b:2a:84:64:15:1a:06:e8:25:0c:42:4c:06:8d:7e:0e:
         fc:b2:99:cd:cd:a4:0f:ee:3f:79:1f:5e:14:36:f1:8c:57:ad:
         3f:45:ec:4f:98:2e:61:c7:4a:21:3b:90:18:dc:73:6d:cc:f0:
         51:e5:7e:53:fb:b4:14:30:ba:af:23:2b:f7:bb:64:ec:51:de:
         a7:65:d5:7b:1c:6e:66:3b:e3:a8:87:ad:7b:4a:e5:4b:f1:b0:
         f4:93:f6:31:59:30:d0:86:44:fd:66:9f:83:ff:10:ca:97:71:
         3a:2f:eb:78:ce:be:c4:78:36:76:ea:19:1f:80:80:51:97:c1:
         5c:86:41:ab:b1:27:29:79:bf:86:1c:37:5e:3d:a3:e1:98:f8:
         7d:1b:48:95:7f:b7:17:84:75:7d:b9:5a:e8:2e:a1:88:69:6c:
         8c:94:e5:67:90:52:ac:f3:0f:42:a8:be:30:ce:12:db:47:09:
         98:b5:91:b0:cd:e3:74:07:27:62:0b:69:e5:28:17:28:9f:c0:
         e3:26:4e:d5:4d:5d:89:60:ce:86:f6:4b:f6:33:d4:02:49:17:
         8c:11:26:9e:02:eb:5b:c9:ab:6f:32:36:08:8d:57:3c:5f:dc:
         ac:4c:5b:46:47:3b:ea:78:0c:22:7c:6d:2b:46:61:51:b2:71:
         58:d1:9e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:23 2026 by rpki-client