Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FISC/0/3130332e3232392e3133352e302f32342d3234203d3e20313331353838.roa
File:                     3130332e3232392e3133352e302f32342d3234203d3e20313331353838.roa (raw, json)
Hash identifier:          L+UhXooP+QDzxg/7f1iFae2tMtapq6u+1T0q0qdCkq8=
Subject key identifier:   1D:E9:16:27:BE:13:10:02:24:F6:30:58:C6:A4:D6:60:15:C6:92:52
Certificate issuer:       /CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
Certificate serial:       01C79FCD282EBB19F5F87AE6CA8DB64EBA56394A
Authority key identifier: C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FISC/0/3130332e3232392e3133352e302f32342d3234203d3e20313331353838.roa
Signing time:             Mon 11 May 2026 16:48:54 +0000
ROA not before:           Mon 11 May 2026 16:43:54 +0000
ROA not after:            Mon 10 May 2027 16:48:54 +0000
asID:                     131588
IP address blocks:        103.229.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl
                          rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:9f:cd:28:2e:bb:19:f5:f8:7a:e6:ca:8d:b6:4e:ba:56:39:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37A5ED1C020CA592473CC7CB260EE969E0CD03C
        Validity
            Not Before: May 11 16:43:54 2026 GMT
            Not After : May 10 16:48:54 2027 GMT
        Subject: CN=1DE91627BE13100224F63058C6A4D66015C69252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:12:9d:bb:b6:cd:73:28:d9:0e:f1:a9:bb:
                    2d:ab:33:86:c8:40:42:47:6b:8c:62:c6:b3:b2:67:
                    d5:ef:52:7e:13:ef:c0:16:41:24:d6:bd:ce:2a:a0:
                    5f:36:59:96:df:05:fb:30:6a:41:36:8d:5d:fd:e0:
                    8d:64:87:bb:92:46:84:db:d9:82:9a:f1:eb:32:8f:
                    cd:be:eb:dc:5e:5e:73:82:f7:14:61:60:95:41:09:
                    f5:ed:51:c5:72:83:04:e5:95:e9:c4:5e:eb:0c:50:
                    07:a1:4f:24:98:ce:aa:44:76:ec:ba:41:96:46:e2:
                    ed:b3:83:29:a0:c7:83:48:67:d7:ab:3e:64:c7:d9:
                    cb:47:98:02:24:bd:05:e4:fc:3d:72:a2:ab:ab:a8:
                    46:cb:7b:5f:99:22:3f:92:c5:87:50:f7:98:28:f6:
                    d9:10:d0:85:e2:f6:fc:c5:c1:03:80:dc:85:6c:3e:
                    0e:90:3b:19:81:fd:6b:88:5b:d3:42:8a:9a:52:86:
                    26:24:d0:f7:7a:ab:95:a3:0f:ab:1f:45:02:0b:f4:
                    a0:1e:41:10:25:8b:38:19:8a:c3:f0:c3:18:6b:53:
                    30:8a:27:27:68:9e:04:1c:de:28:b5:37:00:c2:b8:
                    1c:d3:08:ff:c3:81:cb:20:7c:b4:9c:b3:26:a1:d1:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:16:27:BE:13:10:02:24:F6:30:58:C6:A4:D6:60:15:C6:92:52
            X509v3 Authority Key Identifier:
                keyid:C3:7A:5E:D1:C0:20:CA:59:24:73:CC:7C:B2:60:EE:96:9E:0C:D0:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FISC/0/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C37A5ED1C020CA592473CC7CB260EE969E0CD03C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FISC/0/3130332e3232392e3133352e302f32342d3234203d3e20313331353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:14:47:2e:e8:09:be:ce:7d:34:a6:82:04:41:d1:12:b9:
         35:1e:af:8e:27:59:3b:c6:c6:d3:e3:ae:d2:5d:f0:83:62:50:
         d6:da:30:43:fb:38:21:a3:34:37:dc:01:10:77:92:79:ab:42:
         7e:ea:b0:f3:5c:b9:0b:1c:bd:7a:0f:48:ae:a4:ef:bd:e4:9f:
         cb:13:18:ba:57:2a:49:b5:ab:f1:65:0a:82:b9:ea:14:36:6e:
         bf:de:40:15:44:82:60:4e:9e:55:d7:06:23:df:c2:61:5b:94:
         31:e6:54:a3:21:00:cc:89:ef:c1:72:10:5f:76:fe:9e:e0:22:
         ad:3c:f0:16:1b:d2:e9:2d:29:bb:e0:36:e2:14:38:7f:bb:3e:
         c4:ae:7e:c8:94:1d:d2:ea:94:74:f0:2d:1e:aa:e5:ba:f3:a9:
         07:33:37:98:13:96:17:6e:fb:de:b5:3d:17:d7:e9:5f:47:68:
         61:bd:b2:fa:f6:84:ed:fb:b1:a9:a7:33:03:35:21:32:3c:da:
         fd:60:d2:f0:a5:5b:8b:9c:a6:0c:c4:b8:a9:93:b9:e1:ac:a6:
         70:fa:cd:c9:51:30:e6:95:6d:d8:17:00:81:c2:79:43:76:0b:
         57:a4:51:36:7c:bd:4b:f2:e6:a9:3b:fc:fb:4d:ab:48:34:07:
         5b:f1:71:30
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUAcefzSguuxn1+Hrmyo22TrpWOUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3QTVFRDFDMDIwQ0E1OTI0NzNDQzdDQjI2MEVFOTY5
RTBDRDAzQzAeFw0yNjA1MTExNjQzNTRaFw0yNzA1MTAxNjQ4NTRaMDMxMTAvBgNV
BAMTKDFERTkxNjI3QkUxMzEwMDIyNEY2MzA1OEM2QTRENjYwMTVDNjkyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjBKdu7bNcyjZDvGpuy2rM4bI
QEJHa4xixrOyZ9XvUn4T78AWQSTWvc4qoF82WZbfBfswakE2jV394I1kh7uSRoTb
2YKa8esyj82+69xeXnOC9xRhYJVBCfXtUcVygwTllenEXusMUAehTySYzqpEduy6
QZZG4u2zgymgx4NIZ9erPmTH2ctHmAIkvQXk/D1yoqurqEbLe1+ZIj+SxYdQ95go
9tkQ0IXi9vzFwQOA3IVsPg6QOxmB/WuIW9NCippShiYk0Pd6q5WjD6sfRQIL9KAe
QRAlizgZisPwwxhrUzCKJydongQc3ii1NwDCuBzTCP/DgcsgfLScsyah0U6FAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUHekWJ74TEAIk9jBYxqTWYBXGklIwHwYDVR0j
BBgwFoAUw3pe0cAgylkkc8x8smDulp4M0DwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRklTQy8w
L0MzN0E1RUQxQzAyMENBNTkyNDczQ0M3Q0IyNjBFRTk2OUUwQ0QwM0MuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQzM3QTVFRDFDMDIwQ0E1OTI0NzNDQzdDQjI2MEVF
OTY5RTBDRDAzQy5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZJU0MvMC8zMTMwMzMyZTMyMzIzOTJl
MzEzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMxMzUzODM4LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ+WHMA0GCSqGSIb3DQEBCwUAA4IBAQAbSBRHLugJvs59NKaCBEHRErk1
Hq+OJ1k7xsbT467SXfCDYlDW2jBD+zghozQ33AEQd5J5q0J+6rDzXLkLHL16D0iu
pO+95J/LExi6VypJtavxZQqCueoUNm6/3kAVRIJgTp5V1wYj38JhW5Qx5lSjIQDM
ie/BchBfdv6e4CKtPPAWG9LpLSm74DbiFDh/uz7Ern7IlB3S6pR08C0equW686kH
MzeYE5YXbvvetT0X1+lfR2hhvbL69oTt+7GppzMDNSEyPNr9YNLwpVuLnKYMxLip
k7nhrKZw+s3JUTDmlW3YFwCBwnlDdgtXpFE2fL1L8uapO/z7TatINAdb8XEw
-----END CERTIFICATE-----
Generated at Wed May 13 21:48:39 2026 by rpki-client