Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa
File:                     3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa (raw, json)
Hash identifier:          ff5S7OEmM//n6GU4K964/uiKkS6MgGcigh6CQDM5Nu4=
Subject key identifier:   A8:6B:DE:E9:C3:2D:60:91:A5:38:6C:D0:C7:FD:8F:58:2E:55:FE:5D
Certificate issuer:       /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial:       7EE2B12DD80DCA770491CFAD534285F927CE119F
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa
Signing time:             Mon 11 May 2026 17:57:41 +0000
ROA not before:           Mon 11 May 2026 17:52:41 +0000
ROA not after:            Mon 10 May 2027 17:57:41 +0000
asID:                     38042
IP address blocks:        103.227.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
                          rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e2:b1:2d:d8:0d:ca:77:04:91:cf:ad:53:42:85:f9:27:ce:11:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
        Validity
            Not Before: May 11 17:52:41 2026 GMT
            Not After : May 10 17:57:41 2027 GMT
        Subject: CN=A86BDEE9C32D6091A5386CD0C7FD8F582E55FE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b2:8b:b9:77:dd:89:f2:60:a2:c0:96:b4:c6:
                    81:46:66:82:66:1f:e6:5c:70:65:90:06:44:56:d3:
                    72:62:03:04:39:4e:e0:62:a2:b0:33:25:63:7f:ad:
                    23:23:ca:b9:0e:67:e0:76:66:52:26:ca:61:53:91:
                    5e:f1:9e:17:3d:f0:ae:a8:52:3e:12:e6:0a:6b:67:
                    c2:e5:81:6c:9a:7e:01:b5:22:38:86:18:7d:ba:c4:
                    30:42:c4:73:77:f7:d1:5e:72:0c:0b:ca:9d:27:ff:
                    36:b7:d2:4a:29:7b:cb:c7:ae:49:06:ee:17:fe:f1:
                    00:76:ab:c3:73:8d:70:74:6b:f2:b6:b2:56:b8:a7:
                    77:4b:39:97:8f:99:03:a8:55:f6:19:ff:7b:41:c8:
                    0d:31:cd:a8:50:66:9c:04:ce:c6:ea:66:33:d5:f5:
                    e1:a3:5e:6e:a5:c5:ec:74:c6:2f:7f:b5:d6:28:07:
                    4c:e1:a7:a6:94:99:db:c9:a4:60:73:75:27:f3:0d:
                    dd:45:63:31:b2:c5:98:4b:02:80:97:1d:51:78:db:
                    f4:38:21:d0:fd:29:87:42:92:42:6a:f1:29:5f:47:
                    4d:88:b4:17:04:f2:89:c7:8c:8b:a0:bd:0d:bc:40:
                    91:62:46:67:11:c2:02:ef:08:d0:7e:25:be:e9:06:
                    89:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6B:DE:E9:C3:2D:60:91:A5:38:6C:D0:C7:FD:8F:58:2E:55:FE:5D
            X509v3 Authority Key Identifier:
                keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32332d3234203d3e203338303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:00:b4:28:e8:f0:d0:a4:c4:ef:77:51:27:2e:24:af:98:0d:
         c4:11:18:07:97:f5:5a:28:fd:8b:3f:d6:cd:45:07:71:aa:ab:
         c1:ea:3b:38:be:cb:fc:88:67:6a:ab:24:a5:75:e2:9a:7e:d7:
         25:5f:02:f8:fb:0b:d3:df:21:4c:04:26:36:2e:d8:b2:b4:2d:
         61:fc:65:05:2e:2c:bb:08:0b:b1:a0:0a:4d:66:44:b5:54:45:
         ae:4d:aa:82:99:07:96:07:e9:eb:c8:94:f5:fa:b1:da:75:72:
         6c:65:97:b6:b4:ef:19:03:f8:f7:4b:82:aa:47:16:2d:26:b8:
         0c:ed:7b:37:b3:9a:91:c4:b5:08:a3:69:6d:7c:38:d6:67:1d:
         ef:7b:f8:45:a0:18:cc:17:ab:31:d5:80:6c:87:75:07:5b:f4:
         72:87:6f:a9:01:0e:67:ef:eb:91:11:71:1b:23:f3:82:3c:6b:
         4d:66:9d:87:d8:79:cb:5a:62:73:b8:d4:1d:7e:01:b7:62:c7:
         0f:6c:82:e7:12:0f:46:5b:00:de:15:43:ec:55:4c:de:62:23:
         93:37:2e:6e:7e:cd:a0:cd:f2:e7:b4:62:0f:3a:51:6c:bb:b1:
         e6:f4:ef:04:68:d1:74:52:85:75:d3:9f:d2:49:96:ba:ed:e6:
         ea:be:4e:db
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUfuKxLdgNyncEkc+tU0KF+SfOEZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBERjExQUY5OTkxNERFNkJFOUZBOUZDMzU3REE2MjRG
QjA5QTc4MjAeFw0yNjA1MTExNzUyNDFaFw0yNzA1MTAxNzU3NDFaMDMxMTAvBgNV
BAMTKEE4NkJERUU5QzMyRDYwOTFBNTM4NkNEMEM3RkQ4RjU4MkU1NUZFNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4sou5d92J8mCiwJa0xoFGZoJm
H+ZccGWQBkRW03JiAwQ5TuBiorAzJWN/rSMjyrkOZ+B2ZlImymFTkV7xnhc98K6o
Uj4S5gprZ8LlgWyafgG1IjiGGH26xDBCxHN399FecgwLyp0n/za30kope8vHrkkG
7hf+8QB2q8NzjXB0a/K2sla4p3dLOZePmQOoVfYZ/3tByA0xzahQZpwEzsbqZjPV
9eGjXm6lxex0xi9/tdYoB0zhp6aUmdvJpGBzdSfzDd1FYzGyxZhLAoCXHVF42/Q4
IdD9KYdCkkJq8SlfR02ItBcE8onHjIugvQ28QJFiRmcRwgLvCNB+Jb7pBonBAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUqGve6cMtYJGlOGzQx/2PWC5V/l0wHwYDVR0j
BBgwFoAUYN8Rr5mRTea+n6n8NX2mJPsJp4IwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVRJTUUv
MC82MERGMTFBRjk5OTE0REU2QkU5RkE5RkMzNTdEQTYyNEZCMDlBNzgyLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzYwREYxMUFGOTk5MTRERTZCRTlGQTlGQzM1N0RB
NjI0RkIwOUE3ODIuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FVElNRS8wLzMxMzAzMzJlMzIzMjM3
MmUzMjMyMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMzM4MzAzNDMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBZ+PiMA0GCSqGSIb3DQEBCwUAA4IBAQCfALQo6PDQpMTvd1EnLiSvmA3E
ERgHl/VaKP2LP9bNRQdxqqvB6js4vsv8iGdqqySldeKaftclXwL4+wvT3yFMBCY2
LtiytC1h/GUFLiy7CAuxoApNZkS1VEWuTaqCmQeWB+nryJT1+rHadXJsZZe2tO8Z
A/j3S4KqRxYtJrgM7Xs3s5qRxLUIo2ltfDjWZx3ve/hFoBjMF6sx1YBsh3UHW/Ry
h2+pAQ5n7+uREXEbI/OCPGtNZp2H2HnLWmJzuNQdfgG3YscPbILnEg9GWwDeFUPs
VUzeYiOTNy5ufs2gzfLntGIPOlFsu7Hm9O8EaNF0UoV105/SSZa67ebqvk7b
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:31 2026 by rpki-client