Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CLOUDWALK/0/3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa
File:                     3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          wQPbhs8yb6ZMLslmBkU07zfcO19/UJCWoWgUHvgY6JI=
Subject key identifier:   42:9D:46:85:74:FE:04:C7:39:D8:32:E2:0A:DE:C9:C6:CC:95:66:4C
Certificate issuer:       /CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D
Certificate serial:       7734453278688E1870190E54CB19B7610B943E3B
Authority key identifier: FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:38:02 +0000
ROA not before:           Mon 11 May 2026 17:33:02 +0000
ROA not after:            Mon 10 May 2027 17:38:02 +0000
asID:                     131642
IP address blocks:        103.127.218.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl
                          rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:34:45:32:78:68:8e:18:70:19:0e:54:cb:19:b7:61:0b:94:3e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBCCD93F0A92E49F05EC18890A69081E5EDA632D
        Validity
            Not Before: May 11 17:33:02 2026 GMT
            Not After : May 10 17:38:02 2027 GMT
        Subject: CN=429D468574FE04C739D832E20ADEC9C6CC95664C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4f:1b:a0:43:c7:bf:0c:29:d9:ee:de:75:72:
                    33:72:ff:16:d4:43:c8:0a:5f:1d:17:37:0a:ad:a7:
                    24:d3:77:d0:3b:c2:6b:0e:db:dc:bf:be:28:cb:5b:
                    72:88:9f:aa:76:c2:a5:de:eb:1d:2a:26:cf:c0:c1:
                    7e:3c:a9:4b:19:20:67:b8:7c:fd:34:95:68:54:3e:
                    c6:4f:f5:55:44:1a:91:64:fc:27:97:d3:16:13:7c:
                    95:47:21:1b:3e:1e:84:13:2d:36:c1:d6:cd:92:d9:
                    7e:e5:ce:83:67:58:4b:0d:ad:a2:f3:02:4e:f3:7b:
                    ad:50:d3:7c:00:a3:80:e8:ef:40:36:41:72:f3:a1:
                    1a:a4:83:35:13:b3:7a:31:2d:d7:9a:06:f6:8f:5c:
                    c7:8e:08:0a:c5:cd:5e:b1:7d:aa:7d:d3:31:1b:04:
                    3c:57:d4:a2:1b:6d:03:57:ec:81:f3:ee:c7:4a:7b:
                    48:ec:cb:0e:6b:14:70:72:4b:0b:9f:cc:28:d1:e6:
                    91:22:aa:19:b6:d2:d2:1a:5a:d4:5a:fe:b2:9b:58:
                    8e:82:9c:0b:27:db:e8:23:93:1d:b9:a8:1d:75:e9:
                    3e:36:a1:7b:0c:3c:28:98:af:34:73:8c:ec:41:6a:
                    cb:1b:99:07:90:fe:f0:5a:cf:a9:33:d8:05:d0:36:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:46:85:74:FE:04:C7:39:D8:32:E2:0A:DE:C9:C6:CC:95:66:4C
            X509v3 Authority Key Identifier:
                keyid:FB:CC:D9:3F:0A:92:E4:9F:05:EC:18:89:0A:69:08:1E:5E:DA:63:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FBCCD93F0A92E49F05EC18890A69081E5EDA632D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLOUDWALK/0/3130332e3132372e3231382e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:69:bf:29:e9:ee:00:8c:e3:ce:78:d7:ed:32:d0:c0:0e:4f:
         66:02:c6:0b:ba:63:21:58:8a:b3:42:98:a5:40:96:f5:65:0b:
         47:58:62:e0:43:3c:04:75:c5:ab:97:71:d5:55:60:a9:dc:15:
         8f:7a:68:84:02:05:2b:d9:46:66:92:9c:47:b5:f0:82:5b:15:
         ea:21:62:5c:d3:58:2b:d1:d5:5b:11:8e:d6:23:ca:c8:bd:90:
         60:fc:0c:01:dd:af:22:85:5a:e4:11:ae:a3:02:53:34:87:34:
         53:70:e8:de:17:be:ac:c0:ec:1d:a3:8b:20:75:7d:1e:f9:32:
         cf:13:fe:ec:2f:c6:d6:fd:89:be:8c:1e:ed:c6:1f:ad:80:d5:
         2c:a5:56:b8:e3:df:e2:5f:2b:4a:7d:9f:93:11:2d:52:00:46:
         cd:98:e7:49:3b:e5:62:4c:54:0f:42:fe:28:6f:01:ed:6a:b1:
         ba:0c:9a:b5:5c:90:64:5e:84:f0:37:ce:8e:e6:7d:29:b2:7f:
         ff:10:d2:5d:dd:f8:b7:e0:a4:25:28:84:56:ae:b5:95:f4:e3:
         fd:12:b8:ab:45:f0:45:e8:d8:8d:e9:4d:60:4f:c8:27:96:f7:
         b6:68:9f:bb:c0:cb:b4:06:17:48:56:fd:1e:bb:5a:ae:02:37:
         d6:c4:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:14 2026 by rpki-client