Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa
File:                     3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          VgELE2Z0+fZSqQX80y/ZKahTNsQCGSrMSvntHyntpVk=
Subject key identifier:   E3:8C:FF:A3:1D:98:6D:82:DC:59:97:98:66:19:F8:7F:6A:A4:43:3D
Certificate issuer:       /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial:       39732F92F274557701492378C52A232F53DCAFBE
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:55:49 +0000
ROA not before:           Mon 11 May 2026 17:50:49 +0000
ROA not after:            Mon 10 May 2027 17:55:49 +0000
asID:                     134823
IP address blocks:        103.227.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
                          rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:73:2f:92:f2:74:55:77:01:49:23:78:c5:2a:23:2f:53:dc:af:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
        Validity
            Not Before: May 11 17:50:49 2026 GMT
            Not After : May 10 17:55:49 2027 GMT
        Subject: CN=E38CFFA31D986D82DC5997986619F87F6AA4433D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:2e:e6:0b:13:83:68:2d:a5:db:40:2a:d0:
                    c4:df:0e:4e:d1:3c:5e:9c:dc:88:af:48:bf:79:cf:
                    17:ed:93:3e:15:3e:6a:0d:74:ab:77:db:17:49:1a:
                    07:5a:ae:d0:94:24:4c:64:98:63:6d:2a:b1:45:ef:
                    95:a8:f0:77:b9:6f:48:2a:ad:ea:89:e8:0f:d3:84:
                    97:ca:22:1c:c3:79:31:99:db:40:07:3f:6f:b8:a8:
                    c7:ef:9c:b7:8f:6b:0b:39:58:a0:49:13:43:b6:50:
                    c8:21:45:07:9e:0b:c6:f3:5f:f6:98:41:b7:97:5d:
                    82:80:c3:a0:b1:e5:5a:ce:70:45:35:65:4e:1c:77:
                    cc:5d:8f:20:05:77:d7:e6:1c:d6:af:d7:1d:39:32:
                    48:8c:fc:e0:e2:6a:66:7b:48:7f:a1:e5:c9:2f:f7:
                    52:a3:7c:65:78:19:65:e5:7e:72:10:e2:1c:4f:bd:
                    8a:31:ce:d9:0f:74:8f:b4:2a:1c:f4:e1:82:0c:cb:
                    e3:48:0c:88:c7:b5:c4:8c:33:2a:c0:7a:5e:2c:82:
                    6f:fd:a0:9c:19:34:d2:76:f4:c3:d4:b3:7c:b0:70:
                    ff:ee:89:3f:7f:9f:15:86:e6:87:13:f0:8c:4d:4c:
                    7a:b1:0b:60:bb:93:63:5a:e8:50:62:6e:d4:e5:4a:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:FF:A3:1D:98:6D:82:DC:59:97:98:66:19:F8:7F:6A:A4:43:3D
            X509v3 Authority Key Identifier:
                keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:7c:57:8d:4d:0f:8f:f8:af:44:5b:6f:2d:39:2a:a7:0c:
         d0:88:2a:23:d3:c4:68:22:2a:c6:f2:fc:dc:f4:2f:fb:92:bb:
         4e:c0:89:d4:aa:1f:61:a0:31:2b:1a:3d:d3:35:f5:de:9e:64:
         37:f6:b5:be:93:4b:77:00:e5:25:d4:ae:ca:d6:04:fc:5b:6f:
         27:39:a1:1d:04:75:1a:84:eb:f6:32:82:16:22:fd:8c:57:cc:
         10:7d:f0:3d:50:c7:e8:2a:ec:35:df:02:05:af:28:0a:7d:86:
         19:d7:9d:a2:6f:91:78:5a:84:8d:4b:6b:7d:6f:b8:18:b2:51:
         ef:f1:e6:47:34:c8:93:c1:06:eb:72:eb:2d:a9:34:e9:c8:cb:
         fb:33:11:1c:ae:b1:37:41:f8:1f:1b:43:f5:7e:e5:9c:38:96:
         8f:ab:29:44:f9:00:ff:a6:6f:32:80:ae:75:94:38:66:98:ae:
         31:e2:a5:ce:f4:8d:f2:45:9d:57:11:92:ef:10:1f:8f:5d:d1:
         7b:4b:66:0f:0e:c1:4d:16:37:e1:5d:ca:26:6c:f5:ce:19:0b:
         ac:77:87:dd:a1:0b:d3:75:5a:51:ba:ae:42:11:04:92:00:5d:
         b5:3e:17:50:55:b1:27:7a:d3:a6:c9:ea:de:bb:4a:97:06:24:
         aa:19:50:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:58 2026 by rpki-client