Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32342d3234203d3e203234313638.roa
File:                     3130332e3133362e36302e302f32342d3234203d3e203234313638.roa (raw, json)
Hash identifier:          fQNhxMDWLDnn8SUDvgc9/vo2VAhhq+XCGKU2dHcNA3A=
Subject key identifier:   5E:02:F0:1A:63:BD:7A:E5:20:41:2F:EB:8C:5C:55:65:E0:89:E9:50
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       2C83C2BE322C5B2CE93E12EEEC6E38F4F5F78315
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32342d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 16:45:50 +0000
ROA not before:           Mon 11 May 2026 16:40:50 +0000
ROA not after:            Mon 10 May 2027 16:45:50 +0000
asID:                     24168
IP address blocks:        103.136.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:c2:be:32:2c:5b:2c:e9:3e:12:ee:ec:6e:38:f4:f5:f7:83:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: May 11 16:40:50 2026 GMT
            Not After : May 10 16:45:50 2027 GMT
        Subject: CN=5E02F01A63BD7AE520412FEB8C5C5565E089E950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:d5:dc:ac:5d:fc:6d:12:f4:d0:9a:d3:c3:
                    87:57:48:9e:78:d4:e7:a8:b6:ae:0e:8c:52:9e:8b:
                    5f:6b:a4:0b:6a:f6:7e:67:a6:f5:86:f3:d0:3b:1b:
                    06:bc:fe:a6:7c:98:f7:4e:9d:02:93:69:6b:6f:91:
                    c9:14:4f:89:a7:4b:bc:04:b7:eb:6a:50:c7:fd:b7:
                    68:55:e7:49:73:1c:e7:27:da:a3:ba:95:11:87:d6:
                    7d:15:9f:ab:1a:b2:53:43:c9:8f:35:16:45:e3:f8:
                    8d:3c:49:ad:ce:11:af:71:46:6a:ac:6a:b4:c5:c6:
                    d5:8a:a6:c5:33:56:9f:ec:f7:ab:0c:38:92:af:d8:
                    64:0d:f5:79:70:b9:28:4a:ec:75:05:55:19:34:45:
                    5b:c0:b7:12:4e:17:1c:b0:07:7b:11:6c:8f:f4:ef:
                    76:5f:75:de:5f:4e:6c:84:ef:ce:b2:fe:39:a6:c1:
                    28:25:f2:f2:e9:9a:52:ae:29:ba:d3:f1:d6:1e:d0:
                    b7:47:33:a4:2d:b0:23:30:88:28:1e:a8:80:70:cb:
                    a4:e7:85:25:24:95:ef:3e:d5:7d:08:3d:de:b2:54:
                    bd:40:21:9d:c7:12:55:ea:fc:30:d8:8b:c7:07:e5:
                    4d:92:df:32:19:8d:2c:0f:51:df:cc:c6:0e:13:36:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:F0:1A:63:BD:7A:E5:20:41:2F:EB:8C:5C:55:65:E0:89:E9:50
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/3130332e3133362e36302e302f32342d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:85:1d:a4:6a:96:c6:5c:2d:fa:eb:ee:66:96:95:fb:25:0c:
         07:ca:0d:7a:bc:26:73:3a:0a:a6:0b:10:6a:c7:eb:e1:19:b1:
         70:f4:8e:97:f2:03:f2:26:17:20:d9:49:47:da:39:6a:65:30:
         f2:38:cf:77:17:63:f1:56:6d:fc:0d:be:3c:ee:ad:a9:67:90:
         4b:e6:42:b7:68:8e:c5:e5:f1:13:a9:bd:a8:d1:db:b6:91:8e:
         1a:8c:5b:5c:dc:ba:66:54:b2:79:14:dc:a2:ff:ae:36:4f:60:
         d2:03:a4:1e:d4:37:40:bf:de:2d:4f:94:27:2f:40:10:bd:f4:
         0d:3d:97:a2:74:3a:91:05:09:62:89:b6:5a:3d:b7:0a:c0:23:
         88:06:3b:e5:48:9e:72:ac:fb:3c:b2:68:30:64:0e:57:7f:f4:
         0a:da:cc:90:32:4e:1e:ea:fc:26:4f:99:31:7e:a7:f6:f4:17:
         69:b0:e1:b1:82:f1:38:43:2e:9f:24:8a:db:b3:93:27:04:a7:
         a8:bf:bc:3f:0a:89:54:c8:5b:23:2c:3d:0b:42:ff:01:bb:c9:
         2f:0f:7f:e2:eb:27:98:01:5a:4f:91:69:e5:9a:ea:e1:f8:f7:
         a8:f9:34:db:37:28:d4:a4:bb:13:fc:7b:aa:13:a0:d5:80:3e:
         64:6f:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:49 2026 by rpki-client