Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASIA/0/3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa
File:                     3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          yiII0RXcH0Wd/44KCbcakGluviCl0yIDFTB2H9T2dQ4=
Subject key identifier:   D4:84:38:75:EF:FC:EE:67:FA:D7:44:03:59:BC:67:CD:00:25:71:C9
Certificate issuer:       /CN=64F178C727C3786F0888FDE2673E44F99B04C71D
Certificate serial:       AF236FA6CA9AC68DA02217A054CEC7243ACD0C
Authority key identifier: 64:F1:78:C7:27:C3:78:6F:08:88:FD:E2:67:3E:44:F9:9B:04:C7:1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/64F178C727C3786F0888FDE2673E44F99B04C71D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FANTASIA/0/3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:37:56 +0000
ROA not before:           Mon 11 May 2026 17:32:56 +0000
ROA not after:            Mon 10 May 2027 17:37:56 +0000
asID:                     131642
IP address blocks:        103.255.40.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FANTASIA/0/64F178C727C3786F0888FDE2673E44F99B04C71D.crl
                          rsync://rpkica.twnic.tw/rpki/FANTASIA/0/64F178C727C3786F0888FDE2673E44F99B04C71D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/64F178C727C3786F0888FDE2673E44F99B04C71D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            af:23:6f:a6:ca:9a:c6:8d:a0:22:17:a0:54:ce:c7:24:3a:cd:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64F178C727C3786F0888FDE2673E44F99B04C71D
        Validity
            Not Before: May 11 17:32:56 2026 GMT
            Not After : May 10 17:37:56 2027 GMT
        Subject: CN=D4843875EFFCEE67FAD7440359BC67CD002571C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:80:18:40:b2:3b:dd:93:e3:5f:b1:75:fc:
                    7a:cf:52:73:d7:aa:08:7b:15:fb:c9:35:b2:bb:b9:
                    8b:b8:ac:9e:e8:2a:9a:f7:92:54:3a:1c:13:bc:17:
                    e2:2a:14:0b:67:3f:cc:90:b3:e4:81:ad:40:85:ee:
                    5f:30:2a:c5:01:61:20:bd:c6:d5:25:12:e1:c4:75:
                    7e:55:a2:fb:21:88:60:7c:ac:f7:b7:17:50:19:ea:
                    02:bb:f5:df:41:69:9c:45:ff:7a:fc:3f:ab:6c:6b:
                    bf:62:ad:63:5c:ec:40:d0:12:30:0c:a2:63:d5:f0:
                    1d:69:2f:d1:6f:81:ca:f9:a5:9a:76:ab:26:1d:45:
                    69:77:f1:0a:bc:02:2a:a1:d1:0f:5f:78:10:8f:73:
                    e2:21:07:d7:2a:d0:bf:0e:0f:b0:30:3c:a9:b1:bb:
                    89:26:ea:a9:23:bc:7a:34:d2:a2:a4:93:7a:af:82:
                    24:fd:21:7c:3c:97:81:1f:3d:c1:d4:fd:a8:d0:ad:
                    29:72:c4:e5:40:d2:1f:82:e3:73:ff:19:49:f8:69:
                    05:f1:00:f7:b5:6b:19:85:8b:f6:dc:c1:3f:96:70:
                    0a:fa:54:b9:c2:32:aa:73:97:b0:f3:f4:04:f1:d4:
                    a7:83:d9:77:c8:a1:50:bc:05:08:81:82:b7:c9:b9:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:84:38:75:EF:FC:EE:67:FA:D7:44:03:59:BC:67:CD:00:25:71:C9
            X509v3 Authority Key Identifier:
                keyid:64:F1:78:C7:27:C3:78:6F:08:88:FD:E2:67:3E:44:F9:9B:04:C7:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FANTASIA/0/64F178C727C3786F0888FDE2673E44F99B04C71D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/64F178C727C3786F0888FDE2673E44F99B04C71D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASIA/0/3130332e3235352e34302e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:88:59:7e:d4:6e:b5:ff:60:cc:2e:2b:90:41:b2:49:2e:3f:
         08:de:8c:a0:90:36:2d:24:64:fe:1d:49:13:52:04:9c:4e:70:
         e1:ae:aa:94:00:f4:5b:62:b7:4c:51:62:f0:02:c9:19:cd:7e:
         80:ec:bf:cf:4e:e2:6b:a2:17:5f:a7:b9:da:33:79:86:3d:81:
         76:64:22:7a:43:0c:fc:e6:a3:dd:b6:26:a6:fb:0e:b4:b6:a6:
         4a:48:57:ae:e8:94:32:16:2e:08:0e:cc:68:61:b7:c0:d2:0a:
         02:be:2c:ed:0d:10:49:e4:3b:8e:fb:a9:f0:9f:76:b9:e3:0b:
         5c:6f:8d:5e:76:c6:8d:ee:2f:81:74:df:40:13:89:0c:22:08:
         04:be:0a:9f:17:3e:dd:4e:f9:c3:d0:a0:ce:97:99:66:bb:5a:
         b3:09:82:74:00:a7:5a:29:19:1e:17:f4:a6:34:78:52:26:5c:
         57:5b:4e:15:7a:c2:6c:a4:fe:f1:a8:d5:3b:04:c7:a3:85:32:
         b3:e1:26:5b:17:6b:f8:ea:3c:96:70:79:bb:2f:de:d0:f3:12:
         94:2d:aa:ce:51:96:90:dd:f7:72:9a:81:0b:ce:6f:d7:b9:9e:
         7e:72:09:ce:a9:f0:7f:03:fe:0b:fe:b3:a4:cc:1e:bc:2e:d3:
         41:0b:2a:f4
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUAK8jb6bKmsaNoCIXoFTOxyQ6zQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRGMTc4QzcyN0MzNzg2RjA4ODhGREUyNjczRTQ0Rjk5
QjA0QzcxRDAeFw0yNjA1MTExNzMyNTZaFw0yNzA1MTAxNzM3NTZaMDMxMTAvBgNV
BAMTKEQ0ODQzODc1RUZGQ0VFNjdGQUQ3NDQwMzU5QkM2N0NEMDAyNTcxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W4AYQLI73ZPjX7F1/HrPUnPX
qgh7FfvJNbK7uYu4rJ7oKpr3klQ6HBO8F+IqFAtnP8yQs+SBrUCF7l8wKsUBYSC9
xtUlEuHEdX5VovshiGB8rPe3F1AZ6gK79d9BaZxF/3r8P6tsa79irWNc7EDQEjAM
omPV8B1pL9Fvgcr5pZp2qyYdRWl38Qq8Aiqh0Q9feBCPc+IhB9cq0L8OD7AwPKmx
u4km6qkjvHo00qKkk3qvgiT9IXw8l4EfPcHU/ajQrSlyxOVA0h+C43P/GUn4aQXx
APe1axmFi/bcwT+WcAr6VLnCMqpzl7Dz9ATx1KeD2XfIoVC8BQiBgrfJuX+HAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU1IQ4de/87mf610QDWbxnzQAlcckwHwYDVR0j
BBgwFoAUZPF4xyfDeG8IiP3iZz5E+ZsExx0wDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT
SUEvMC82NEYxNzhDNzI3QzM3ODZGMDg4OEZERTI2NzNFNDRGOTlCMDRDNzFELmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzY0RjE3OEM3MjdDMzc4NkYwODg4RkRFMjY3
M0U0NEY5OUIwNEM3MUQuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuG
ZHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFTSUEvMC8zMTMwMzMy
ZTMyMzUzNTJlMzQzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzMzMTM2MzQz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWf/KDANBgkqhkiG9w0BAQsFAAOCAQEAWIhZftRutf9gzC4r
kEGySS4/CN6MoJA2LSRk/h1JE1IEnE5w4a6qlAD0W2K3TFFi8ALJGc1+gOy/z07i
a6IXX6e52jN5hj2BdmQiekMM/Oaj3bYmpvsOtLamSkhXruiUMhYuCA7MaGG3wNIK
Ar4s7Q0QSeQ7jvup8J92ueMLXG+NXnbGje4vgXTfQBOJDCIIBL4Knxc+3U75w9Cg
zpeZZrtaswmCdACnWikZHhf0pjR4UiZcV1tOFXrCbKT+8ajVOwTHo4Uys+EmWxdr
+Oo8lnB5uy/e0PMSlC2qzlGWkN33cpqBC85v17mefnIJzqnwfwP+C/6zpMwevC7T
QQsq9A==
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:42 2026 by rpki-client