Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CWTW/0/3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa
File:                     3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa (raw, json)
Hash identifier:          C7eNmWkgWq7ZRC4sPl4B5Q7nePEgx3UhGfhX2eQZEcc=
Subject key identifier:   F9:D2:55:DD:5A:AA:DB:A1:1C:A7:CF:08:78:75:D3:91:C3:CB:48:73
Certificate issuer:       /CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
Certificate serial:       4847AD6F5DF6314F9886B2E7D9E9DB6916F788D3
Authority key identifier: 0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CWTW/0/3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa
Signing time:             Mon 11 May 2026 17:57:30 +0000
ROA not before:           Mon 11 May 2026 17:52:30 +0000
ROA not after:            Mon 10 May 2027 17:57:30 +0000
asID:                     142061
IP address blocks:        103.161.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl
                          rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:47:ad:6f:5d:f6:31:4f:98:86:b2:e7:d9:e9:db:69:16:f7:88:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FDD566F6EA3D676064C1A79114B46749D7D15B7
        Validity
            Not Before: May 11 17:52:30 2026 GMT
            Not After : May 10 17:57:30 2027 GMT
        Subject: CN=F9D255DD5AAADBA11CA7CF087875D391C3CB4873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:9f:e3:55:48:d3:00:8f:2d:82:48:06:dd:
                    e3:84:f7:3c:b5:87:37:00:b1:25:53:5a:da:2e:c9:
                    17:2e:77:07:92:65:31:22:c6:07:2c:52:d7:e2:aa:
                    12:19:3e:aa:c8:82:e1:72:4a:b9:fc:bc:83:24:79:
                    b6:e3:b9:c2:6a:38:c8:f1:6f:46:7b:67:97:1b:47:
                    19:71:7f:71:c9:6f:94:e8:bd:f7:86:3d:27:8f:17:
                    91:54:d0:20:22:fc:75:70:d6:66:83:ce:0f:e0:26:
                    c8:75:27:b6:13:8f:d5:57:5e:ad:6f:70:c7:13:38:
                    95:8a:af:ff:37:57:de:eb:f1:1b:55:8a:47:ee:52:
                    01:c3:26:64:56:69:77:fe:ad:e5:5e:72:b7:cb:2c:
                    68:a1:88:37:30:9e:18:1c:35:bc:63:2b:f6:24:53:
                    e3:64:f0:43:cd:cf:a5:8f:6d:50:1f:11:06:00:7a:
                    4e:0d:79:74:51:a5:fb:71:6a:3b:3a:91:fa:d6:b2:
                    42:8c:2e:69:1e:52:60:18:34:f1:d4:a6:c9:8d:3c:
                    94:db:b6:f4:c7:b7:03:57:be:84:48:6f:8e:8d:2a:
                    cb:7b:1d:48:60:b9:4d:8d:cb:4c:66:32:5c:ea:e5:
                    9c:38:ff:93:fe:5f:52:80:d0:68:17:7d:01:60:2e:
                    a2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D2:55:DD:5A:AA:DB:A1:1C:A7:CF:08:78:75:D3:91:C3:CB:48:73
            X509v3 Authority Key Identifier:
                keyid:0F:DD:56:6F:6E:A3:D6:76:06:4C:1A:79:11:4B:46:74:9D:7D:15:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/0FDD566F6EA3D676064C1A79114B46749D7D15B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0FDD566F6EA3D676064C1A79114B46749D7D15B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CWTW/0/3130332e3136312e37382e302f32342d3234203d3e20313432303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c6:d8:a6:0d:00:88:16:b8:3d:db:20:f7:e2:e1:99:2d:5f:
         32:5a:e2:3d:34:d3:e3:a4:1c:7d:09:3a:28:91:46:66:05:02:
         55:70:68:81:18:cd:59:71:bd:7d:12:25:d8:05:24:e8:ae:03:
         44:e6:82:14:82:fc:78:61:11:f2:f7:c5:fb:4a:46:96:e0:c8:
         3b:94:18:fa:c5:4d:71:21:a0:8f:29:6f:6f:1a:e2:f3:8a:0d:
         4b:87:58:39:b1:17:cd:1a:92:6b:a4:0c:6c:bd:7e:d7:3a:42:
         71:ac:ab:d6:5e:48:83:55:54:e5:66:96:d0:ca:8d:f9:33:1a:
         c2:a6:e6:24:be:0a:27:28:08:4f:b7:2b:a0:bb:a7:04:3f:46:
         80:87:6b:e4:58:10:b6:ac:f7:c4:3f:59:a8:66:f2:82:ce:a4:
         ff:81:52:00:88:61:df:18:d5:52:58:74:e1:24:59:79:fc:77:
         96:f5:f5:ec:8d:9a:8e:72:cc:ee:3b:58:0b:bd:58:2d:5e:a8:
         87:06:89:54:22:38:d3:01:ff:e9:2a:d2:47:5d:c8:c6:5a:6c:
         ea:68:ce:f6:87:34:26:c5:97:e5:be:af:47:77:b5:75:86:90:
         21:26:b7:20:8e:eb:15:ef:bf:e1:94:34:6e:55:f5:45:2c:81:
         97:86:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:24 2026 by rpki-client