Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa
File:                     3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (raw, json)
Hash identifier:          18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=
Subject key identifier:   94:91:AB:F3:5F:02:0E:5D:38:8D:5A:CE:4C:FD:BC:51:F2:56:E8:4E
Certificate issuer:       /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial:       68E0D0B8B4833781A74DC4F35624930CA02C2B84
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa
Signing time:             Mon 11 May 2026 17:26:34 +0000
ROA not before:           Mon 11 May 2026 17:21:34 +0000
ROA not after:            Mon 10 May 2027 17:26:34 +0000
asID:                     18041
IP address blocks:        103.160.180.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl
                          rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:04:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e0:d0:b8:b4:83:37:81:a7:4d:c4:f3:56:24:93:0c:a0:2c:2b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
        Validity
            Not Before: May 11 17:21:34 2026 GMT
            Not After : May 10 17:26:34 2027 GMT
        Subject: CN=9491ABF35F020E5D388D5ACE4CFDBC51F256E84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:9c:06:0d:d9:93:e5:50:78:f7:12:2f:1d:
                    be:1a:70:34:3d:85:75:6e:23:94:ac:f2:ad:da:69:
                    7f:68:55:a3:8e:57:54:b1:13:3b:86:91:27:9d:a9:
                    04:ff:22:3b:91:2d:fd:9f:5f:e7:b9:09:45:5b:49:
                    d2:cc:cb:77:dd:ba:a6:25:5c:79:63:58:cd:2f:db:
                    3a:26:fa:90:b7:ca:bf:c2:96:02:68:c1:28:28:5d:
                    35:45:62:cd:9a:bf:f6:ef:30:a5:a4:e5:72:f2:fc:
                    63:4b:f5:c2:56:84:7a:94:7e:d7:34:5a:e3:5a:78:
                    c8:02:9a:6a:26:30:80:01:ad:b9:a0:66:c7:0e:d3:
                    ed:bc:4d:4a:4b:7d:05:39:68:d7:8c:ba:f2:fa:50:
                    fb:9e:2e:c6:a6:20:87:10:d4:ed:92:27:f1:40:da:
                    4c:f1:b6:d5:90:5b:91:1f:f5:0c:12:3e:15:cc:05:
                    8c:1a:0b:62:d1:7f:16:f8:c9:db:e5:68:a3:81:91:
                    44:95:8b:4e:b9:bb:11:03:66:f2:b1:71:c1:3c:f6:
                    b0:fa:5f:e2:27:05:f6:2b:57:f7:34:0b:69:7c:99:
                    88:e3:1b:e5:d1:d7:c3:59:05:25:f3:5e:20:3b:45:
                    3c:b3:12:2a:9a:2d:6a:1a:27:bf:3a:b3:b0:e0:78:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:91:AB:F3:5F:02:0E:5D:38:8D:5A:CE:4C:FD:BC:51:F2:56:E8:4E
            X509v3 Authority Key Identifier:
                keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:5a:a2:c6:7f:66:58:91:76:28:dc:27:be:71:7c:ae:03:8f:
         da:e2:b5:f9:65:7f:99:fb:da:78:5c:63:c4:3d:f6:3f:1f:49:
         c0:24:96:18:5d:4f:06:24:33:93:d6:7a:01:ee:66:ff:f1:a0:
         99:aa:13:eb:f4:5c:92:8a:5f:d4:1b:67:96:22:31:df:b7:e0:
         06:d1:94:dc:7f:de:20:4b:f4:f5:ff:2a:e3:d5:95:2b:7d:cc:
         85:9b:e6:a1:a2:e4:2e:75:f7:f4:3b:60:6a:90:c4:65:9f:bd:
         70:bb:00:66:3e:9e:df:d8:dc:34:5d:ec:50:3f:c8:34:7d:52:
         21:92:1d:e2:9d:9c:ef:98:15:68:38:33:cc:5a:bf:12:b3:2e:
         89:ab:89:15:1c:a7:3a:60:91:34:20:46:d7:9a:d7:73:59:c2:
         74:de:12:e5:3b:8f:96:5c:b9:8b:9e:dc:6e:63:b5:a6:13:be:
         18:39:fa:1e:48:dc:61:67:41:4c:5c:f6:11:62:e3:cf:f5:5a:
         73:71:c0:6d:b0:e1:d3:0b:a8:6e:3a:d8:3f:ed:6a:db:16:50:
         b8:4f:4c:e6:f0:36:b3:9e:f0:e5:0e:73:52:7b:a9:aa:d3:32:
         ef:bb:e6:cb:15:1f:f9:99:14:56:0c:73:05:a7:79:00:5a:64:
         85:93:66:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:45 2026 by rpki-client