Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3233203d3e203234313638.roa
File:                     3130332e3133362e36302e302f32332d3233203d3e203234313638.roa (raw, json)
Hash identifier:          9Akwlu3YI82aKp9S0AwuGoVG6iftGvpu9+EFv6FDBv0=
Subject key identifier:   A6:CA:C0:BA:D9:18:29:6D:FD:44:80:82:EF:6E:3B:39:A7:94:9B:13
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       6EAF470D4072AB3AF3B6FD165442F2D7192BF8AC
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3233203d3e203234313638.roa
Signing time:             Mon 11 May 2026 16:45:49 +0000
ROA not before:           Mon 11 May 2026 16:40:49 +0000
ROA not after:            Mon 10 May 2027 16:45:49 +0000
asID:                     24168
IP address blocks:        103.136.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:af:47:0d:40:72:ab:3a:f3:b6:fd:16:54:42:f2:d7:19:2b:f8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: May 11 16:40:49 2026 GMT
            Not After : May 10 16:45:49 2027 GMT
        Subject: CN=A6CAC0BAD918296DFD448082EF6E3B39A7949B13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:b9:74:88:89:c4:ad:d3:4d:e3:b2:7e:17:
                    65:a6:ec:01:bd:1a:bd:bb:ee:79:3c:da:4f:c5:2d:
                    3f:48:38:4b:0e:77:75:72:b0:ed:b9:46:8d:0e:79:
                    1a:da:b2:32:33:df:e1:c9:00:dd:cc:30:7a:4a:3c:
                    d3:45:bf:97:bb:2d:2f:f9:9b:5a:02:25:25:bd:5a:
                    57:09:f2:b1:a0:51:d1:a3:ec:27:d6:e9:3d:d8:ab:
                    2a:66:ef:17:f5:a4:fc:a1:ad:75:8c:ed:ed:39:35:
                    af:8b:11:b2:c2:d4:65:2a:fa:a2:30:b4:e0:ef:6c:
                    ef:79:32:e2:be:52:d5:7a:7d:a0:8e:43:11:f7:26:
                    02:f7:d5:f2:4b:ca:f5:b0:df:a4:dd:b1:f8:97:b1:
                    9a:a0:02:52:e6:d8:9b:8d:00:c2:81:1f:fd:4f:8e:
                    89:5d:b7:98:cb:70:50:df:49:3a:5e:e5:a0:4b:9d:
                    7a:2d:14:e7:ec:73:11:d7:d2:23:40:95:ae:80:66:
                    7e:5d:43:01:7d:05:c5:97:24:2e:96:e2:98:dd:77:
                    d8:ea:0c:27:34:28:4b:9c:e7:3f:d2:fa:e8:8d:78:
                    64:db:98:91:9d:03:33:2a:dd:f2:3b:c0:fa:b0:34:
                    08:b2:97:f7:29:36:17:ea:5d:75:6b:df:dd:a3:d4:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CA:C0:BA:D9:18:29:6D:FD:44:80:82:EF:6E:3B:39:A7:94:9B:13
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32332d3233203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:18:b6:37:53:c7:1b:fa:df:76:8a:80:04:9b:d9:7f:ca:
         52:d8:c5:c9:7d:33:19:2f:a6:25:4f:67:cd:b2:fd:13:51:5e:
         f8:b5:48:47:bb:30:07:3a:fc:da:41:e7:e1:c9:d8:fc:a2:04:
         d0:70:8a:5c:f5:19:fd:b3:c2:5d:4e:c3:4f:a6:5b:de:2f:83:
         7d:1e:c2:b0:27:21:78:78:c3:77:b5:48:9b:ce:a9:20:5d:a8:
         94:e0:ea:8e:d9:80:e5:ce:c4:28:5d:8a:e6:13:eb:0c:87:cc:
         4b:66:3b:17:19:7f:e2:f5:3c:65:c5:f6:28:fb:36:c8:02:6c:
         5a:30:81:74:02:56:7f:57:ea:ba:8a:b6:28:a8:3d:73:15:04:
         fc:a6:9e:d0:94:65:69:1a:2b:47:14:46:32:30:41:be:41:6a:
         7d:5a:09:e1:9a:6e:77:5e:6d:b5:da:ad:12:d3:96:ad:6d:53:
         a8:13:1d:3f:60:da:56:96:f9:f5:bd:80:12:67:b6:e3:82:ff:
         3b:b7:c9:c6:da:0b:27:f4:a6:66:2f:9e:04:8c:81:a4:87:70:
         aa:8b:e8:1b:aa:b4:4f:07:33:8a:21:65:73:76:bd:82:4c:89:
         84:da:85:f8:07:18:5f:aa:62:c0:75:73:41:52:19:43:96:aa:
         f4:15:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:14 2026 by rpki-client