Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS131660.roa
File:                     AS131660.roa (raw, json)
Hash identifier:          +iQOu1LxnyZnMK4BKrE0ZScarbu8EuUDlJKfuE/ryiI=
Subject key identifier:   2E:E2:0C:74:72:30:80:29:7A:00:3B:87:96:15:FF:92:51:AB:60:1D
Certificate issuer:       /CN=6276AF5AEFB216534D76803A45D67CADC23447BD
Certificate serial:       2874B860B97CB55D0D15CACA64DD356BA680773E
Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HINET/0/AS131660.roa
Signing time:             Mon 11 May 2026 17:58:50 +0000
ROA not before:           Mon 11 May 2026 17:53:50 +0000
ROA not after:            Mon 10 May 2027 17:58:50 +0000
asID:                     131660
IP address blocks:        203.66.210.0/23 maxlen: 24
                          203.74.220.0/22 maxlen: 24
                          2001:b000:570::/48 maxlen: 48
                          2001:b000:571::/48 maxlen: 48
                          2001:b000:590::/48 maxlen: 48
                          2001:b000:591::/48 maxlen: 48
                          2001:b000:594::/48 maxlen: 48
                          2001:b000:59c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl
                          rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:74:b8:60:b9:7c:b5:5d:0d:15:ca:ca:64:dd:35:6b:a6:80:77:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD
        Validity
            Not Before: May 11 17:53:50 2026 GMT
            Not After : May 10 17:58:50 2027 GMT
        Subject: CN=2EE20C74723080297A003B879615FF9251AB601D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:e3:32:59:d9:3f:3a:51:5f:1e:dd:44:43:
                    2b:6a:d0:b0:6b:70:bf:f4:25:85:8b:4e:3f:6f:68:
                    c2:d9:d6:37:c8:fb:0f:2a:75:40:33:ce:23:98:3a:
                    87:ee:6a:cc:f0:1b:7c:a0:81:2b:2e:71:46:67:52:
                    5b:a3:10:bc:8e:d5:bc:61:05:80:dd:ad:8b:4b:1d:
                    a4:83:84:77:f0:4f:c6:f2:ad:49:0a:47:26:ae:ee:
                    6b:13:94:08:79:85:7f:fb:38:e9:62:3f:a7:30:8d:
                    95:a0:9e:92:46:fe:65:6c:0c:89:12:28:46:0a:38:
                    f8:4d:e1:44:56:3e:2c:62:ca:40:68:a2:4a:34:e9:
                    5d:9c:b9:e4:36:46:43:73:a9:f3:ea:35:81:d7:6c:
                    99:aa:86:c6:8b:8a:f4:ec:75:d9:18:3c:15:62:e0:
                    e2:e9:6f:82:ee:18:78:a2:29:75:03:35:a6:39:b0:
                    98:f9:89:5b:ad:46:54:e6:d9:7a:c6:59:1d:72:19:
                    48:b9:67:22:03:66:69:db:e0:3f:2c:cf:4e:a4:e8:
                    ec:b3:02:04:2b:95:51:be:41:75:12:ce:f0:eb:09:
                    ce:f6:9a:d3:ff:26:63:72:35:0d:40:c0:ba:d6:aa:
                    56:75:3b:83:42:5c:2e:7e:8a:01:79:a8:71:ce:60:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:0C:74:72:30:80:29:7A:00:3B:87:96:15:FF:92:51:AB:60:1D
            X509v3 Authority Key Identifier:
                keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS131660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.66.210.0/23
                  203.74.220.0/22
                IPv6:
                  2001:b000:570::/47
                  2001:b000:590::/47
                  2001:b000:594::/48
                  2001:b000:59c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:ee:e3:10:eb:61:ec:49:27:91:63:14:db:fa:df:ba:60:
         dd:fc:e0:b7:7e:2f:d4:54:aa:0a:1d:df:ce:98:29:da:f4:12:
         88:d8:04:8e:c1:e5:e6:e7:cb:8d:38:fe:41:ce:55:0a:0c:8f:
         ff:6a:7a:0e:b1:0b:1c:75:80:e9:6b:dc:4f:81:1a:68:7e:6e:
         56:65:3c:ce:a4:1a:2b:f0:2b:b2:d2:4f:95:6a:82:99:7a:ad:
         c3:9f:ca:18:ab:66:e6:ce:8d:de:45:03:cf:a0:94:0b:8c:85:
         f7:c1:eb:50:a9:42:f4:63:0f:29:b8:f3:6d:a4:41:27:bf:0f:
         7d:f4:15:04:94:82:8d:b9:f7:88:b2:08:35:b2:66:b1:9b:c5:
         42:ed:a8:65:82:aa:9d:59:63:09:a4:69:9a:c5:2a:eb:9e:fd:
         e7:c6:6d:5b:73:44:7b:a2:7b:0f:75:65:83:4c:41:1c:19:44:
         8c:a3:c8:8f:65:b3:87:d1:86:79:d0:dd:04:c0:b9:ea:2e:3e:
         e1:80:af:61:3d:c0:9a:a0:50:fe:e6:6f:14:0e:f8:f7:8f:22:
         3f:ac:7a:ed:30:53:54:8d:dd:42:9b:d3:85:2e:b6:bc:70:b2:
         0a:6b:5c:65:6b:c7:a2:95:d7:e6:11:cd:8a:a3:c2:f9:13:ff:
         60:60:d9:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:51:30 2026 by rpki-client