Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWINS/0/3130332e34332e35312e302f32342d3234203d3e20313338393135.roa
File:                     3130332e34332e35312e302f32342d3234203d3e20313338393135.roa (raw, json)
Hash identifier:          u+A6v4yEBS5cjQ/+f3BzaST8qU+ycUc8ZtzDC1IbS7s=
Subject key identifier:   D3:93:FA:B5:B3:25:96:FC:DE:3E:0D:D2:6B:29:B5:C4:EB:75:B8:29
Certificate issuer:       /CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
Certificate serial:       3F515B2C0E8DB5BECD7B170F8B39686255C7E226
Authority key identifier: C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWINS/0/3130332e34332e35312e302f32342d3234203d3e20313338393135.roa
Signing time:             Mon 11 May 2026 17:57:16 +0000
ROA not before:           Mon 11 May 2026 17:52:16 +0000
ROA not after:            Mon 10 May 2027 17:57:16 +0000
asID:                     138915
IP address blocks:        103.43.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl
                          rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:51:5b:2c:0e:8d:b5:be:cd:7b:17:0f:8b:39:68:62:55:c7:e2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93
        Validity
            Not Before: May 11 17:52:16 2026 GMT
            Not After : May 10 17:57:16 2027 GMT
        Subject: CN=D393FAB5B32596FCDE3E0DD26B29B5C4EB75B829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:f9:ab:f1:fe:57:12:e9:b7:9e:90:00:a4:
                    3e:36:4d:b0:64:75:da:b2:6d:d4:78:9d:1f:0a:5a:
                    a0:3c:60:7b:ce:bf:08:9e:ed:61:ca:ff:51:a6:c9:
                    d0:5c:ec:07:fa:a9:1b:8a:9e:12:a8:bd:8b:b5:1b:
                    7a:58:ff:ff:a5:7a:d2:ce:c8:92:f5:de:38:f4:38:
                    be:de:c9:29:d3:06:e4:07:27:ad:93:ed:c8:56:ee:
                    31:d3:4b:c3:3c:9d:8d:07:b3:58:79:26:c9:49:f1:
                    65:8e:b0:b8:6d:c7:57:b0:44:17:2e:35:53:50:02:
                    e5:14:88:b7:f0:ee:7c:32:94:46:aa:8f:fa:56:70:
                    90:bd:30:0d:6e:2c:98:b0:99:8d:75:6a:3c:8c:71:
                    cd:11:18:ba:fc:60:63:4c:eb:0d:9b:70:42:af:56:
                    f1:5f:52:21:be:99:22:2c:17:67:06:4e:a6:00:8b:
                    e6:85:b0:53:c2:75:36:af:b2:04:ef:a9:5c:06:8e:
                    00:41:dd:6a:91:5a:1c:e0:4d:82:0f:72:5c:25:2c:
                    d1:96:8a:e5:33:25:ae:22:2c:c3:f6:80:dd:8f:22:
                    68:0d:d0:8a:0b:52:4a:53:70:52:91:06:6d:4e:4e:
                    ad:76:7d:83:bc:fd:8e:03:5b:96:38:ab:0d:64:3a:
                    82:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:93:FA:B5:B3:25:96:FC:DE:3E:0D:D2:6B:29:B5:C4:EB:75:B8:29
            X509v3 Authority Key Identifier:
                keyid:C5:DF:31:D9:EE:B5:DA:72:66:8D:58:FB:8D:B0:E7:5E:3A:D7:BF:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C5DF31D9EEB5DA72668D58FB8DB0E75E3AD7BF93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWINS/0/3130332e34332e35312e302f32342d3234203d3e20313338393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:e9:d3:0d:14:52:5c:cc:1a:93:66:3f:0d:f6:ec:77:2a:54:
         2d:32:dc:72:db:59:3e:2c:df:a0:6d:a9:7c:e8:41:34:79:91:
         cf:29:d8:5e:11:d1:8f:66:c3:d1:c9:69:76:39:45:ea:c7:44:
         12:29:a9:0b:7b:ac:7b:b4:4d:7b:59:26:aa:c3:8d:cd:d9:00:
         f0:7c:65:30:af:58:0c:ba:3a:dd:a6:70:c1:53:9f:23:d7:b9:
         f3:2b:3c:46:bb:ac:66:a8:0f:3e:03:4e:28:e5:f1:e9:f3:26:
         64:d5:98:93:bf:b4:74:47:11:ef:aa:6b:53:dd:8a:d3:8e:b9:
         e1:e2:e9:09:d7:e0:5b:3e:5a:f9:19:ad:dd:f9:e0:c5:6e:fd:
         36:ab:a2:ec:b1:fa:8f:4b:97:63:b5:0f:f1:3f:9f:08:8f:11:
         3a:23:a3:9e:e2:c7:18:9b:12:69:1e:5b:ee:70:52:4d:ed:ed:
         48:2d:28:0f:13:1b:ec:00:7b:53:61:49:98:30:33:ae:0d:32:
         a5:a9:d0:72:0d:8e:8b:63:61:90:76:16:ef:c4:cb:ec:a9:00:
         d5:75:b9:36:d2:fd:2e:ff:96:f0:47:95:ca:63:d0:17:3c:bd:
         89:29:0b:a5:9b:ad:5f:65:07:e6:3b:f5:73:0f:87:b0:99:d6:
         0e:97:9d:ba
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIUP1FbLA6Ntb7NexcPizloYlXH4iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVERjMxRDlFRUI1REE3MjY2OEQ1OEZCOERCMEU3NUUz
QUQ3QkY5MzAeFw0yNjA1MTExNzUyMTZaFw0yNzA1MTAxNzU3MTZaMDMxMTAvBgNV
BAMTKEQzOTNGQUI1QjMyNTk2RkNERTNFMEREMjZCMjlCNUM0RUI3NUI4MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtf/mr8f5XEum3npAApD42TbBk
ddqybdR4nR8KWqA8YHvOvwie7WHK/1GmydBc7Af6qRuKnhKovYu1G3pY//+letLO
yJL13jj0OL7eySnTBuQHJ62T7chW7jHTS8M8nY0Hs1h5JslJ8WWOsLhtx1ewRBcu
NVNQAuUUiLfw7nwylEaqj/pWcJC9MA1uLJiwmY11ajyMcc0RGLr8YGNM6w2bcEKv
VvFfUiG+mSIsF2cGTqYAi+aFsFPCdTavsgTvqVwGjgBB3WqRWhzgTYIPclwlLNGW
iuUzJa4iLMP2gN2PImgN0IoLUkpTcFKRBm1OTq12fYO8/Y4DW5Y4qw1kOoIlAgMB
AAGjggHhMIIB3TAdBgNVHQ4EFgQU05P6tbMllvzePg3Saym1xOt1uCkwHwYDVR0j
BBgwFoAUxd8x2e612nJmjVj7jbDnXjrXv5MwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFdJTlMv
MC9DNURGMzFEOUVFQjVEQTcyNjY4RDU4RkI4REIwRTc1RTNBRDdCRjkzLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xL0M1REYzMUQ5RUVCNURBNzI2NjhENThGQjhEQjBF
NzVFM0FEN0JGOTMuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9EV0lOUy8wLzMxMzAzMzJlMzQzMzJl
MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzODM5MzEzNS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGcrMzANBgkqhkiG9w0BAQsFAAOCAQEAo+nTDRRSXMwak2Y/DfbsdypULTLc
cttZPizfoG2pfOhBNHmRzynYXhHRj2bD0clpdjlF6sdEEimpC3use7RNe1kmqsON
zdkA8HxlMK9YDLo63aZwwVOfI9e58ys8RrusZqgPPgNOKOXx6fMmZNWYk7+0dEcR
76prU92K04654eLpCdfgWz5a+Rmt3fngxW79Nqui7LH6j0uXY7UP8T+fCI8ROiOj
nuLHGJsSaR5b7nBSTe3tSC0oDxMb7AB7U2FJmDAzrg0ypanQcg2Oi2NhkHYW78TL
7KkA1XW5NtL9Lv+W8EeVymPQFzy9iSkLpZutX2UH5jv1cw+HsJnWDpedug==
-----END CERTIFICATE-----
Generated at Wed May 13 21:08:51 2026 by rpki-client