Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYBERLINK/0/3130332e3136382e3135362e302f32332d3234203d3e203134363138.roa
File:                     3130332e3136382e3135362e302f32332d3234203d3e203134363138.roa (raw, json)
Hash identifier:          i29cdk1jETedrW69ENbENtcCmm0jEC5pk6zg8WfaGCA=
Subject key identifier:   FC:29:B7:B5:5A:0E:76:06:8B:FB:B8:FC:B2:37:FE:7A:F5:00:3D:66
Certificate issuer:       /CN=2068A6EC9C8167CEB78C7259B1B579C3067A8180
Certificate serial:       6CD98ADAA141491508E458C9DFDEC82B0DD335E4
Authority key identifier: 20:68:A6:EC:9C:81:67:CE:B7:8C:72:59:B1:B5:79:C3:06:7A:81:80
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2068A6EC9C8167CEB78C7259B1B579C3067A8180.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/3130332e3136382e3135362e302f32332d3234203d3e203134363138.roa
Signing time:             Mon 11 May 2026 17:10:20 +0000
ROA not before:           Mon 11 May 2026 17:05:20 +0000
ROA not after:            Mon 10 May 2027 17:10:20 +0000
asID:                     14618
IP address blocks:        103.168.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/2068A6EC9C8167CEB78C7259B1B579C3067A8180.crl
                          rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/2068A6EC9C8167CEB78C7259B1B579C3067A8180.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2068A6EC9C8167CEB78C7259B1B579C3067A8180.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d9:8a:da:a1:41:49:15:08:e4:58:c9:df:de:c8:2b:0d:d3:35:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2068A6EC9C8167CEB78C7259B1B579C3067A8180
        Validity
            Not Before: May 11 17:05:20 2026 GMT
            Not After : May 10 17:10:20 2027 GMT
        Subject: CN=FC29B7B55A0E76068BFBB8FCB237FE7AF5003D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:c7:68:24:4b:a5:94:82:5c:97:fa:9c:c0:
                    a8:c7:f4:f3:c2:c4:86:36:2f:0f:95:be:e8:6c:45:
                    e9:eb:c2:23:24:5a:38:6b:d1:a8:c9:b3:26:47:ff:
                    63:00:42:87:50:c0:58:c3:ba:e1:57:36:1f:7d:92:
                    25:1f:91:79:6f:70:43:55:84:80:9e:c7:7f:8f:d0:
                    d8:ef:59:bd:f2:8e:c0:eb:48:86:25:c9:51:f1:34:
                    32:79:0e:fc:78:7a:6f:43:a8:37:f9:5a:98:e6:a8:
                    78:db:50:57:b5:53:0a:62:d4:7f:da:51:e0:b3:1c:
                    71:59:c1:00:e8:dd:d6:11:61:9e:a5:ea:90:8e:67:
                    34:23:5b:9e:dc:b9:7e:83:30:cb:ab:db:0c:87:14:
                    bd:dd:09:f4:cc:5f:c6:99:79:91:10:df:00:09:6e:
                    d7:d6:82:1e:0b:38:58:e0:2a:d5:ac:82:60:be:9a:
                    57:67:a8:5e:af:8b:d0:2f:84:5d:b4:8b:5a:ff:7b:
                    2f:21:d9:85:c0:8c:26:8f:ce:e0:ae:2b:e5:52:3f:
                    47:09:e0:88:98:82:5e:ae:65:3e:e4:7b:3a:4b:19:
                    67:f3:de:be:95:be:04:5f:39:6a:78:42:89:e2:5c:
                    3c:a0:ef:06:fb:c2:30:de:18:09:25:71:92:18:5c:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:29:B7:B5:5A:0E:76:06:8B:FB:B8:FC:B2:37:FE:7A:F5:00:3D:66
            X509v3 Authority Key Identifier:
                keyid:20:68:A6:EC:9C:81:67:CE:B7:8C:72:59:B1:B5:79:C3:06:7A:81:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/2068A6EC9C8167CEB78C7259B1B579C3067A8180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2068A6EC9C8167CEB78C7259B1B579C3067A8180.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYBERLINK/0/3130332e3136382e3135362e302f32332d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:e8:6c:ff:57:4d:b1:11:52:3d:4b:4d:8b:8f:48:39:d8:f9:
         57:f5:1f:4d:05:2e:ab:27:45:27:24:8c:8e:72:56:60:b2:5d:
         94:77:05:39:6c:09:0c:6a:a8:db:0b:62:28:a8:d8:94:f1:67:
         b3:b4:3c:cb:86:97:f1:ab:f5:7b:fc:80:65:7a:28:2e:a3:f6:
         54:5c:d7:c0:f1:f7:79:ce:e5:fc:de:f5:f5:ef:23:6e:be:f3:
         4c:54:48:0b:5c:a9:c4:0b:d2:eb:13:5e:27:29:cf:52:12:a3:
         3b:66:6d:95:19:9a:16:2d:d3:38:51:e6:d7:e9:35:c9:af:07:
         0b:b3:11:90:e2:29:9c:37:ea:02:24:90:cd:2b:2d:0e:a7:b8:
         25:02:e4:0b:cd:6a:38:29:23:7e:13:35:a2:b8:f2:c8:ad:69:
         e6:32:dd:6f:16:a2:fe:37:55:47:ce:65:df:49:54:ba:4c:03:
         33:e0:85:67:ab:9f:0a:ed:06:fa:80:d5:a1:90:57:11:f5:ac:
         aa:1d:33:f6:46:e5:70:a7:67:6b:0e:b3:77:6b:83:d9:32:5e:
         e1:68:40:f9:3e:b8:be:77:da:5b:b0:2c:54:93:cd:3d:25:88:
         7b:fe:a5:46:5e:c5:0a:d6:28:5d:56:7c:8c:20:9e:53:d9:ab:
         3f:d3:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:29 2026 by rpki-client