Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COMPAL/0/3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa
File:                     3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa (raw, json)
Hash identifier:          0fKiDXGR8En4Q6FWillviZZnizkWot5ASqnc3fP81UM=
Subject key identifier:   9D:D8:95:10:50:63:E1:D3:28:96:16:EC:56:9C:68:71:54:A4:AC:D6
Certificate issuer:       /CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
Certificate serial:       44FE58127D7AE71692E51303F69B283CAA5111F9
Authority key identifier: 8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COMPAL/0/3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa
Signing time:             Mon 11 May 2026 17:06:08 +0000
ROA not before:           Mon 11 May 2026 17:01:08 +0000
ROA not after:            Mon 10 May 2027 17:06:08 +0000
asID:                     131680
IP address blocks:        103.122.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl
                          rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:17:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fe:58:12:7d:7a:e7:16:92:e5:13:03:f6:9b:28:3c:aa:51:11:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6678972CBE31F9E346E4E77FD8792F4B10690A
        Validity
            Not Before: May 11 17:01:08 2026 GMT
            Not After : May 10 17:06:08 2027 GMT
        Subject: CN=9DD895105063E1D3289616EC569C687154A4ACD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:f8:ac:c4:b2:95:64:4f:f2:63:b8:b3:a5:
                    e8:67:9c:ba:30:53:56:63:96:f4:8a:c7:aa:db:0a:
                    0c:cc:95:14:9e:3e:60:a2:53:0a:23:64:b3:ca:82:
                    5e:25:95:29:f3:84:1b:3c:4d:04:74:9f:4b:28:85:
                    57:68:00:c2:f0:cc:3e:6d:a9:dd:80:ec:60:19:24:
                    e4:57:31:da:6c:b2:a8:75:4e:40:cc:f6:68:ce:76:
                    48:02:e1:ea:bf:7a:a3:a1:07:6b:2f:52:f2:6e:95:
                    46:c1:8d:d5:ed:f5:6d:78:3b:e0:cd:26:bd:ea:d2:
                    b5:85:04:91:8e:da:d1:a5:f3:1e:ec:7a:ff:00:87:
                    47:9b:9c:c0:11:1e:ab:98:9a:fb:e7:e0:36:d7:05:
                    67:42:5a:40:45:62:25:8c:2a:71:69:8c:fd:03:e3:
                    cf:4d:50:38:9c:71:a8:74:a7:a5:57:1b:90:a5:b9:
                    e0:cc:30:33:85:56:9e:d4:35:c9:a4:07:ae:c0:ab:
                    3d:e7:df:71:24:60:e0:c8:75:94:4d:ff:99:b0:ad:
                    41:a6:a7:db:64:6c:fb:02:c3:9a:02:b1:ba:2a:8b:
                    d8:a1:d2:08:04:0c:e9:1c:3f:7b:c6:63:a8:47:73:
                    9b:83:8c:9c:dc:ee:17:f5:c0:d5:b3:76:17:6c:fc:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D8:95:10:50:63:E1:D3:28:96:16:EC:56:9C:68:71:54:A4:AC:D6
            X509v3 Authority Key Identifier:
                keyid:8E:66:78:97:2C:BE:31:F9:E3:46:E4:E7:7F:D8:79:2F:4B:10:69:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/8E6678972CBE31F9E346E4E77FD8792F4B10690A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E6678972CBE31F9E346E4E77FD8792F4B10690A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COMPAL/0/3130332e3132322e3231362e302f32322d3234203d3e20313331363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:a0:54:dc:f4:f8:bc:8b:bb:33:fa:22:c0:16:25:39:3d:
         c3:ea:55:1f:01:5a:47:fb:8b:70:1a:4e:ce:3b:6f:a5:bb:15:
         78:cd:c4:71:e8:0a:f0:f3:47:b9:14:3e:cf:df:a1:49:3c:98:
         9b:23:e2:1e:a2:bb:8d:82:eb:8e:80:a6:2f:5b:e9:7e:f4:30:
         d4:1d:e3:05:14:9f:38:21:fe:30:1d:4e:ce:c5:ca:59:0b:23:
         78:52:73:44:49:83:43:4c:7f:da:e7:75:c3:5f:77:f4:d9:dc:
         b5:7c:2d:ca:4a:29:9d:f9:86:45:bc:25:1b:41:f6:80:ce:a4:
         6f:5b:29:0e:10:71:28:f9:b9:44:e8:33:8b:40:22:4b:18:9a:
         24:56:a3:c4:33:09:c7:0c:05:d6:e2:de:78:25:98:11:a6:ab:
         46:4d:e8:1f:a2:41:8b:b9:e6:97:d1:96:ad:2a:b6:2e:49:01:
         bd:eb:11:37:91:57:e1:89:ba:76:dc:10:d4:b1:46:a7:c4:41:
         c0:c4:44:eb:68:fc:2a:d7:9f:b7:04:16:bf:cd:3d:90:3b:47:
         46:a7:ea:62:0c:a4:3e:e2:a2:30:81:ce:41:ea:e2:ba:82:25:
         00:3d:7e:88:84:e6:9d:7c:14:ca:5f:42:98:94:1f:04:00:dc:
         9b:0d:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:49:31 2026 by rpki-client