Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa
File:                     3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (raw, json)
Hash identifier:          LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=
Subject key identifier:   7A:9C:6C:23:9F:93:1B:3A:4A:3C:3A:98:B4:C6:0C:2D:73:00:EE:B3
Certificate issuer:       /CN=28E8C034945DF0971A657E251911BBA0B2819562
Certificate serial:       69BE840D6F66349A0BD48596FA446DAF272C367A
Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FANTASY/0/3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa
Signing time:             Mon 11 May 2026 17:15:43 +0000
ROA not before:           Mon 11 May 2026 17:10:43 +0000
ROA not after:            Mon 10 May 2027 17:15:43 +0000
asID:                     131671
IP address blocks:        103.146.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl
                          rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:84:0d:6f:66:34:9a:0b:d4:85:96:fa:44:6d:af:27:2c:36:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562
        Validity
            Not Before: May 11 17:10:43 2026 GMT
            Not After : May 10 17:15:43 2027 GMT
        Subject: CN=7A9C6C239F931B3A4A3C3A98B4C60C2D7300EEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:87:b8:40:77:9d:0e:4e:d6:f7:4b:0c:c8:
                    4a:52:5b:57:20:04:e9:6e:93:7e:dd:d0:07:5e:cb:
                    46:dc:47:73:45:a3:49:27:fa:92:56:5c:17:d3:6f:
                    16:11:b2:09:1f:c9:69:ae:0a:bc:8c:27:96:74:6e:
                    8b:fc:d3:70:c9:3c:26:1f:4b:2b:44:9c:36:3f:ac:
                    e7:75:5d:54:21:28:01:d8:d2:7c:4a:d3:0c:48:01:
                    40:ff:09:41:6a:e0:68:0a:5e:fc:b1:b9:e0:6d:2b:
                    e7:4e:34:9e:c0:24:25:1c:dc:ec:9d:a4:c9:e5:8c:
                    95:5a:aa:95:0d:9a:74:61:0a:48:7e:bd:4f:96:0e:
                    e3:e9:81:fc:aa:0a:4a:82:ec:96:84:41:b5:b1:47:
                    0c:43:9c:62:04:19:e3:35:f3:52:23:2c:2f:fb:14:
                    46:8f:2a:d8:42:9d:ad:6f:85:9a:37:79:2f:45:35:
                    a0:6d:41:12:47:6e:81:2e:d6:3e:50:ec:a1:35:c7:
                    f5:69:21:48:0d:ef:8c:93:eb:07:80:16:ed:98:82:
                    2f:a8:6d:06:73:7f:fd:db:bd:ca:ec:2f:d7:d4:7b:
                    03:69:24:1f:77:fa:de:d3:3e:a2:cb:d4:9f:a3:b7:
                    b9:b3:dc:69:32:10:0e:f1:7b:9b:5d:72:1d:b9:66:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9C:6C:23:9F:93:1B:3A:4A:3C:3A:98:B4:C6:0C:2D:73:00:EE:B3
            X509v3 Authority Key Identifier:
                keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:1c:40:6a:f6:ac:af:58:0a:c6:b7:d9:43:be:cb:d5:1b:
         73:55:00:5f:62:81:78:1b:92:43:e9:57:a8:73:87:ee:a4:11:
         5d:7f:75:30:92:e5:49:25:b5:cd:fe:a2:d1:a0:fd:6a:73:32:
         e9:3b:67:9b:a1:75:a0:2e:f3:96:e7:22:70:64:f2:6f:b9:ed:
         37:12:76:1e:05:c2:4b:90:24:b0:dc:b7:55:2e:54:a0:79:38:
         28:ce:82:56:a8:0d:e6:07:85:6e:d7:9b:cf:28:49:5e:d4:a5:
         6d:81:12:9a:b9:0e:18:04:00:7f:3c:b8:04:09:42:77:ab:28:
         66:ef:6b:e2:15:04:9d:a7:a3:4c:cd:aa:b5:07:c1:fe:0f:b0:
         91:83:98:9f:1d:34:c6:b7:6c:c6:66:02:fc:29:f0:75:7d:42:
         dd:97:9e:29:3b:d4:a2:dd:e4:62:37:f8:34:81:2d:a2:f4:96:
         3a:25:8b:d7:5d:58:3a:f3:cb:47:a8:1c:db:79:0c:57:ab:04:
         78:0b:7b:66:ef:6c:5f:c8:99:a7:05:70:44:bb:69:46:b6:0e:
         43:c6:c5:8c:02:01:33:b0:74:07:61:5f:29:7c:e3:af:6f:47:
         41:40:56:a3:82:d5:cd:ea:f1:9d:7b:b9:32:82:bd:dc:e7:f0:
         1f:61:45:87
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUab6EDW9mNJoL1IWW+kRtrycsNnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC
MjgxOTU2MjAeFw0yNjA1MTExNzEwNDNaFw0yNzA1MTAxNzE1NDNaMDMxMTAvBgNV
BAMTKDdBOUM2QzIzOUY5MzFCM0E0QTNDM0E5OEI0QzYwQzJENzMwMEVFQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8Ie4QHedDk7W90sMyEpSW1cg
BOluk37d0Adey0bcR3NFo0kn+pJWXBfTbxYRsgkfyWmuCryMJ5Z0bov803DJPCYf
SytEnDY/rOd1XVQhKAHY0nxK0wxIAUD/CUFq4GgKXvyxueBtK+dONJ7AJCUc3Oyd
pMnljJVaqpUNmnRhCkh+vU+WDuPpgfyqCkqC7JaEQbWxRwxDnGIEGeM181IjLC/7
FEaPKthCna1vhZo3eS9FNaBtQRJHboEu1j5Q7KE1x/VpIUgN74yT6weAFu2Ygi+o
bQZzf/3bvcrsL9fUewNpJB93+t7TPqLL1J+jt7mz3GkyEA7xe5tdch25ZuILAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUepxsI5+TGzpKPDqYtMYMLXMA7rMwHwYDVR0j
BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT
WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx
MUJCQTBCMjgxOTU2Mi5jZXIwgYEGCCsGAQUFBwELBHUwczBxBggrBgEFBQcwC4Zl
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9GQU5UQVNZLzAvMzEzMDMzMmUz
MTM0MzYyZTMyMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM2Mzcz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeS1TANBgkqhkiG9w0BAQsFAAOCAQEAYckcQGr2rK9YCsa3
2UO+y9Ubc1UAX2KBeBuSQ+lXqHOH7qQRXX91MJLlSSW1zf6i0aD9anMy6Ttnm6F1
oC7zlucicGTyb7ntNxJ2HgXCS5AksNy3VS5UoHk4KM6CVqgN5geFbtebzyhJXtSl
bYESmrkOGAQAfzy4BAlCd6soZu9r4hUEnaejTM2qtQfB/g+wkYOYnx00xrdsxmYC
/CnwdX1C3ZeeKTvUot3kYjf4NIEtovSWOiWL111YOvPLR6gc23kMV6sEeAt7Zu9s
X8iZpwVwRLtpRrYOQ8bFjAIBM7B0B2FfKXzjr29HQUBWo4LVzerxnXu5MoK93Ofw
H2FFhw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:37 2026 by rpki-client