Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa
File:                     3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa (raw, json)
Hash identifier:          jTOUh86WcVTFs/4H0jRDiOylI1e3Cfw5Tggw5E2CXt4=
Subject key identifier:   FF:65:88:BA:44:8E:17:27:C1:CB:3B:58:4E:BB:A5:40:A8:EA:9F:77
Certificate issuer:       /CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
Certificate serial:       7158F54A32EBE80B7F257C91A0A388FFD2ABF97A
Authority key identifier: 60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa
Signing time:             Mon 11 May 2026 17:55:58 +0000
ROA not before:           Mon 11 May 2026 17:50:58 +0000
ROA not after:            Mon 10 May 2027 17:55:58 +0000
asID:                     148996
IP address blocks:        103.227.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl
                          rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:f5:4a:32:eb:e8:0b:7f:25:7c:91:a0:a3:88:ff:d2:ab:f9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60DF11AF99914DE6BE9FA9FC357DA624FB09A782
        Validity
            Not Before: May 11 17:50:58 2026 GMT
            Not After : May 10 17:55:58 2027 GMT
        Subject: CN=FF6588BA448E1727C1CB3B584EBBA540A8EA9F77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:64:67:52:82:cc:d0:76:49:0c:ab:29:43:
                    ac:cd:60:c5:6a:c0:5f:24:be:51:e5:69:9f:aa:e3:
                    5d:18:81:ce:d0:ea:b7:50:29:d2:10:19:2a:15:33:
                    4e:a3:e1:c0:46:46:2a:f5:94:61:ae:be:bb:e2:1f:
                    3f:11:93:46:e9:7d:51:6a:c6:94:26:30:7a:34:b8:
                    51:72:14:17:33:aa:ab:fc:20:5e:57:ef:4f:c3:4a:
                    47:0a:02:bf:81:74:b4:29:fd:fb:d9:8f:cb:c1:c8:
                    69:ed:4e:df:7a:f8:e5:38:6f:ac:69:08:07:ba:0a:
                    16:5f:7b:41:c8:2e:48:d1:79:20:4b:64:ef:72:30:
                    57:2e:80:55:cc:0e:ff:d4:6c:ef:37:bd:c3:15:ad:
                    2d:3e:88:9c:cc:69:18:04:97:a7:c4:28:bc:5c:f5:
                    2f:c2:9c:8e:c5:08:86:b1:0f:11:8a:86:3a:0a:2f:
                    ea:96:57:3a:3e:42:c6:13:e6:4a:89:b5:54:21:44:
                    e0:9d:95:0e:fb:9a:fd:17:48:d6:ac:f2:64:24:e5:
                    ef:a7:5e:cb:0b:da:a6:05:25:ec:49:f6:18:3e:05:
                    f0:00:db:79:7a:78:e9:b3:07:f8:5d:a5:df:76:16:
                    46:cf:e0:65:0a:37:5c:d4:ab:c9:71:d1:7f:18:16:
                    aa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:65:88:BA:44:8E:17:27:C1:CB:3B:58:4E:BB:A5:40:A8:EA:9F:77
            X509v3 Authority Key Identifier:
                keyid:60:DF:11:AF:99:91:4D:E6:BE:9F:A9:FC:35:7D:A6:24:FB:09:A7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60DF11AF99914DE6BE9FA9FC357DA624FB09A782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ETIME/0/3130332e3232372e3232362e302f32342d3234203d3e20313438393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:93:66:62:6b:6c:9d:73:3e:cc:3d:6d:15:69:4f:01:2c:
         e8:38:e0:14:c3:d7:ae:54:5d:3d:fb:a2:01:be:d2:6b:48:3b:
         28:60:4f:13:2f:af:d5:0e:b5:0c:88:d0:b1:29:e1:e7:4a:0f:
         e2:f9:f7:36:5a:ff:0f:87:17:a0:ca:9b:32:de:cd:a7:d6:e7:
         8f:7f:36:4d:79:b3:ee:c6:87:c6:1e:c0:c6:b5:ab:04:ee:82:
         40:51:44:55:b7:4d:30:ad:13:8f:2c:cc:64:f7:93:6e:ba:67:
         84:98:2e:63:3d:1e:73:c8:d1:d5:08:ef:91:df:75:66:3e:8f:
         c5:3e:81:79:90:d0:b1:4d:fd:80:99:e8:c3:52:a5:ee:46:a7:
         f2:ba:1b:93:94:ec:5b:25:ef:f7:8e:9a:9e:a0:2a:49:9e:03:
         72:ac:b3:14:2a:d3:b6:f5:2d:71:6a:e2:ff:df:27:c7:2c:35:
         d3:5e:48:1c:97:d3:f7:23:86:6f:70:70:82:4e:58:a7:41:0e:
         16:d6:af:9d:73:8c:66:64:04:13:c3:98:4a:8a:29:0f:a1:cd:
         ce:4d:80:a2:ac:6a:9b:53:49:68:12:4f:0d:a3:b4:29:a2:21:
         4b:3f:08:9f:7d:1b:8b:70:91:ec:5b:80:b3:5c:47:5d:69:bd:
         0a:b2:f0:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:49 2026 by rpki-client