Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3130332e3135302e33362e302f32342d3234203d3e2039363738.roa
File:                     3130332e3135302e33362e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          y8lVVRe/wuPGJ7dZ5+tF+pkbL0/La93cTqHjq66lkjQ=
Subject key identifier:   A3:1B:96:E9:6C:00:6F:E4:68:FA:9A:44:85:BB:8C:CD:D7:B4:36:5A
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       60EC6F7C127105AE45CFFF8489007EF986CF959D
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e3135302e33362e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:56:35 +0000
ROA not before:           Mon 11 May 2026 17:51:35 +0000
ROA not after:            Mon 10 May 2027 17:56:35 +0000
asID:                     9678
IP address blocks:        103.150.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ec:6f:7c:12:71:05:ae:45:cf:ff:84:89:00:7e:f9:86:cf:95:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:51:35 2026 GMT
            Not After : May 10 17:56:35 2027 GMT
        Subject: CN=A31B96E96C006FE468FA9A4485BB8CCDD7B4365A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:3c:ef:a2:c2:2f:d2:f2:41:60:31:ca:3f:
                    68:2a:25:d0:23:99:19:30:d9:6d:94:65:a7:9a:93:
                    08:98:ec:bd:96:43:5c:48:2c:80:6a:1e:18:53:6a:
                    83:54:6d:2f:86:14:ec:fc:e7:1b:ac:1b:24:38:2b:
                    88:3d:33:98:c0:15:7b:1d:9c:4e:84:46:1d:9d:a2:
                    70:e1:8b:8e:78:b2:d5:55:f8:4b:30:4c:a4:45:5a:
                    c5:d0:41:2b:70:4f:4d:ef:1c:33:5c:03:79:ae:ac:
                    7b:2c:7c:1d:30:39:c8:fc:1a:34:06:58:6f:e0:88:
                    88:5b:6d:45:e2:b5:ad:df:4c:2f:e5:10:c1:63:60:
                    03:0b:06:63:d0:92:1c:00:75:37:5a:27:55:b4:2f:
                    7d:c1:64:3c:6f:76:f2:c2:f6:5e:a6:87:21:4b:b8:
                    c7:ab:91:ab:ab:24:7a:76:1c:71:6f:d4:96:6a:c5:
                    75:cd:bb:8f:be:9d:28:d1:b4:a1:a8:db:03:6e:63:
                    77:ff:c0:d7:ff:ec:73:9f:25:0b:bf:6a:c1:73:d5:
                    fd:73:e2:30:48:f7:eb:4b:87:59:2a:24:3d:da:9b:
                    e2:6f:88:b4:76:a0:89:e0:79:e5:6b:42:d2:d5:fc:
                    75:31:ac:5a:20:99:91:c1:41:f1:dc:bc:cb:cd:23:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:96:E9:6C:00:6F:E4:68:FA:9A:44:85:BB:8C:CD:D7:B4:36:5A
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e3135302e33362e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:a5:9f:27:02:9e:45:22:db:08:8e:ec:bb:ae:84:fc:d3:
         38:5c:e6:31:38:13:7f:ad:07:c7:16:b1:73:76:23:e4:01:fa:
         68:a4:20:37:93:cb:11:e7:a4:f2:23:b9:ba:00:ea:ff:a6:43:
         f1:25:64:25:18:79:d9:b8:55:4a:37:cd:82:f2:84:12:d3:45:
         24:fe:f0:5b:12:b1:16:5e:4a:36:30:45:de:2c:94:82:5f:b2:
         00:a5:bd:d0:1a:2b:6e:01:b0:e9:a1:f5:4b:13:3f:0f:28:48:
         e4:1b:c9:39:0e:e2:92:ba:d8:e5:38:6a:77:44:b7:09:30:80:
         9e:f9:9c:12:eb:9c:73:5b:66:32:55:1a:b1:0f:73:33:2f:8d:
         96:55:27:c2:42:a2:e9:e7:90:3f:30:a3:1f:fa:be:7b:b7:84:
         01:71:df:7b:74:12:0a:24:ef:fc:11:10:eb:c4:04:df:8c:44:
         aa:30:67:fb:bb:2c:7d:c6:b6:81:f2:d8:e9:2f:42:a7:13:fe:
         30:63:21:31:11:37:b4:05:50:9e:fe:e6:9e:27:dc:89:7c:8e:
         74:69:4d:31:f8:55:0e:d1:a4:da:fd:31:14:9e:0a:ea:72:f3:
         63:1e:14:0c:13:5b:d1:57:7b:d4:3b:47:6d:ad:7e:f2:39:c0:
         99:a3:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:20 2026 by rpki-client