Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FISC/0/3130332e3232392e3133322e302f32342d3234203d3e20313331353838.roa
File:                     3130332e3232392e3133322e302f32342d3234203d3e20313331353838.roa (raw, json)
Hash identifier:          bNbeesUI9NGScwyfWf3u19UFeOX2O9GH5Y/KbW8f6PQ=
Subject key identifier:   AD:EC:D2:70:7F:5C:88:53:8E:30:4A:C5:04:4F:87:D4:1D:EF:CD:E3
Certificate issuer:       /CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
Certificate serial:       6A09132B543A8A1CCE044690A061830C108571A9
Authority key identifier: C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FISC/0/3130332e3232392e3133322e302f32342d3234203d3e20313331353838.roa
Signing time:             Mon 11 May 2026 16:48:47 +0000
ROA not before:           Mon 11 May 2026 16:43:47 +0000
ROA not after:            Mon 10 May 2027 16:48:47 +0000
asID:                     131588
IP address blocks:        103.229.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl
                          rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:09:13:2b:54:3a:8a:1c:ce:04:46:90:a0:61:83:0c:10:85:71:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
        Validity
            Not Before: May 11 16:43:47 2026 GMT
            Not After : May 10 16:48:47 2027 GMT
        Subject: CN=ADECD2707F5C88538E304AC5044F87D41DEFCDE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:0a:7f:ce:2f:2d:27:1a:39:a0:2b:ce:2c:
                    14:b5:dd:b6:9d:79:3a:29:d7:d9:53:be:dd:8f:f4:
                    8b:d6:b4:a4:98:ff:ed:30:67:ae:60:5e:28:fd:c6:
                    08:19:e5:57:90:d1:e6:33:a8:78:ce:08:c7:a4:cd:
                    01:44:99:99:ad:83:29:a8:0c:7a:f7:db:df:e5:00:
                    6c:a3:73:a7:41:45:f1:11:89:22:61:79:3a:9b:5b:
                    6c:ff:cb:14:e9:3e:74:98:c6:d7:27:5f:a9:79:5c:
                    23:56:3d:cb:50:0b:37:6f:2f:3d:37:97:78:5b:53:
                    38:10:80:2f:19:f5:6e:31:66:b6:d2:fe:3f:69:c4:
                    65:c0:79:b4:bb:01:e9:80:ba:73:fe:88:d5:5e:31:
                    37:cb:b3:99:07:f1:93:ab:ab:12:21:95:c0:93:a6:
                    6c:fd:f8:22:2b:4f:45:43:7a:3c:69:26:4e:0e:47:
                    80:04:e3:87:e1:a8:fa:3b:39:03:36:64:08:ed:47:
                    53:c6:5f:e0:a9:47:a5:6c:a3:80:f2:97:6a:2b:2d:
                    e3:2d:ff:ac:ae:d8:28:c3:56:41:4c:cc:b7:35:4e:
                    ca:f7:77:9e:ac:f7:4d:dc:5d:37:2e:93:b7:13:7f:
                    d1:3e:fb:b5:31:b0:d0:c3:00:03:46:a7:ec:dd:6e:
                    19:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EC:D2:70:7F:5C:88:53:8E:30:4A:C5:04:4F:87:D4:1D:EF:CD:E3
            X509v3 Authority Key Identifier:
                keyid:C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FISC/0/3130332e3232392e3133322e302f32342d3234203d3e20313331353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:43:e6:4c:9b:ae:d4:de:c3:11:32:a1:c9:7e:aa:85:ce:45:
         ef:73:ff:82:b8:fb:cb:66:6e:c6:9a:90:cf:d9:0e:13:08:63:
         24:da:c5:b1:c5:90:90:5f:6a:f5:fb:65:ef:39:8d:f9:14:e7:
         77:e2:ef:b0:7b:c4:47:8a:48:f6:8b:d9:f3:d9:06:83:c6:1a:
         41:96:fc:9a:41:00:d4:ad:48:72:af:7d:54:13:3f:1c:f9:1c:
         50:f8:39:de:7e:a9:e6:ca:1b:ee:45:e3:8a:5e:85:f9:ba:95:
         38:d5:41:54:5b:90:1b:52:91:98:6b:89:4f:b3:5d:bc:58:aa:
         6f:9f:b4:27:43:7e:b8:c3:b4:a9:04:76:c5:28:64:9f:59:62:
         05:d1:e8:93:a7:ba:35:f9:4c:f4:a0:89:01:ed:e8:21:ab:01:
         d0:5f:d5:c5:42:f6:dd:93:20:20:de:63:ef:06:36:7c:2b:c3:
         67:2e:69:51:86:8e:cb:a3:0e:64:89:ba:b5:24:cf:5a:32:f7:
         f4:41:c9:8f:7f:20:60:19:ac:e5:14:0b:dc:50:01:29:95:0d:
         85:e8:bc:83:bc:b7:ff:fb:70:c5:ff:27:8c:e5:63:ea:f9:a1:
         69:94:0b:5a:55:7a:ee:bf:56:bf:78:25:ed:b5:5c:32:8a:ec:
         47:48:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:48:39 2026 by rpki-client