Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHANGSHEN/0/3130332e36392e38302e302f32332d3332203d3e20313331363432.roa
File:                     3130332e36392e38302e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          je6aKZ7F7YKo5bumGZZLP/2sKZKFJ/Y4RCYMZ2mFjHQ=
Subject key identifier:   CE:FA:C0:43:90:57:BC:C0:3C:EB:E1:CB:C8:D7:5D:EA:BE:84:A0:46
Certificate issuer:       /CN=B26F3EE794F4D25B2D52D575F99F306F88E60746
Certificate serial:       30F60F73B2B740EDA4F2BAF780BB70739D38B01D
Authority key identifier: B2:6F:3E:E7:94:F4:D2:5B:2D:52:D5:75:F9:9F:30:6F:88:E6:07:46
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B26F3EE794F4D25B2D52D575F99F306F88E60746.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHANGSHEN/0/3130332e36392e38302e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:37:59 +0000
ROA not before:           Mon 11 May 2026 17:32:59 +0000
ROA not after:            Mon 10 May 2027 17:37:59 +0000
asID:                     131642
IP address blocks:        103.69.80.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHANGSHEN/0/B26F3EE794F4D25B2D52D575F99F306F88E60746.crl
                          rsync://rpkica.twnic.tw/rpki/CHANGSHEN/0/B26F3EE794F4D25B2D52D575F99F306F88E60746.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B26F3EE794F4D25B2D52D575F99F306F88E60746.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f6:0f:73:b2:b7:40:ed:a4:f2:ba:f7:80:bb:70:73:9d:38:b0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B26F3EE794F4D25B2D52D575F99F306F88E60746
        Validity
            Not Before: May 11 17:32:59 2026 GMT
            Not After : May 10 17:37:59 2027 GMT
        Subject: CN=CEFAC0439057BCC03CEBE1CBC8D75DEABE84A046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:ec:80:5d:0b:43:08:45:32:82:a4:cd:89:
                    ce:44:20:eb:7a:00:2a:6c:be:b6:26:67:e3:28:08:
                    20:9c:b8:e7:21:4a:af:26:f9:ad:84:1a:42:5c:9f:
                    c6:14:f1:40:07:74:44:17:67:17:6e:ba:b1:82:02:
                    03:ba:3f:2a:eb:c7:46:08:8f:62:dc:4a:26:d0:84:
                    f0:9e:83:f6:fc:65:63:59:72:b8:4a:3b:cb:c7:9c:
                    0b:f9:ac:10:ca:d2:68:b8:76:4e:e0:87:a8:54:ab:
                    22:e9:44:29:22:a2:11:e4:bd:71:29:3e:73:33:db:
                    de:63:85:65:37:f0:78:fd:84:5e:10:89:85:4b:ba:
                    2d:62:89:61:ca:34:34:c9:bc:95:8d:08:eb:ff:97:
                    13:bc:28:94:4d:ea:01:71:e0:63:2f:60:e2:53:48:
                    57:eb:6d:fe:cf:80:b8:48:1d:ff:1e:8f:8b:76:5a:
                    c6:e0:78:17:db:56:24:b0:4f:3e:28:f2:fc:d8:fa:
                    e6:f6:57:c1:e1:5c:b0:e0:cc:3a:e2:d4:1f:30:41:
                    42:25:2a:07:a0:e7:84:5e:21:74:8c:f8:f6:47:ce:
                    46:da:28:8f:6e:3b:90:6d:79:5e:6a:e4:57:bb:0b:
                    4d:8f:10:8d:fc:b8:9b:57:14:fc:16:01:20:b5:73:
                    bb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FA:C0:43:90:57:BC:C0:3C:EB:E1:CB:C8:D7:5D:EA:BE:84:A0:46
            X509v3 Authority Key Identifier:
                keyid:B2:6F:3E:E7:94:F4:D2:5B:2D:52:D5:75:F9:9F:30:6F:88:E6:07:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHANGSHEN/0/B26F3EE794F4D25B2D52D575F99F306F88E60746.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B26F3EE794F4D25B2D52D575F99F306F88E60746.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHANGSHEN/0/3130332e36392e38302e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:d7:bb:9a:b0:c0:72:5c:40:92:17:9e:c6:46:b8:85:ad:01:
         f7:f2:22:70:c7:99:21:ac:c4:f5:a0:a6:70:a9:7d:ad:99:42:
         6a:74:c1:6e:18:8b:42:da:10:54:17:71:56:08:77:28:e3:17:
         a3:73:08:f2:74:99:2a:a5:47:ae:1b:f0:8b:ef:81:57:8c:68:
         12:7b:08:53:a1:8f:fe:d4:64:de:42:75:e5:c8:b2:c3:2d:10:
         da:4d:31:75:03:c8:d8:fe:bb:17:de:d2:e2:0f:ee:f7:19:0b:
         be:30:25:78:7b:44:26:6d:6a:71:a2:63:02:56:3a:15:dc:ae:
         fd:31:06:55:af:a9:6f:74:11:24:4e:c9:3b:b7:6d:74:3d:73:
         fc:34:cf:1f:b7:7a:c4:ff:30:11:3b:73:58:c6:38:5c:de:0a:
         90:80:f2:dd:b1:b3:05:75:e7:50:5c:2d:bf:d3:ad:08:f6:49:
         3f:3e:5e:76:a1:76:89:a1:0f:ef:26:34:8d:b4:c2:ba:13:d5:
         7f:fb:c4:d4:82:60:56:41:dd:a8:96:c7:96:7c:1a:63:24:91:
         5d:f1:37:25:38:90:09:f6:22:78:ee:af:8f:54:e8:b0:60:c3:
         df:55:d8:5d:a2:12:4b:52:89:cf:a3:d1:e0:bf:c1:b8:41:e6:
         91:d4:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:43 2026 by rpki-client