Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37332e302f32342d3234203d3e2039363738.roa
File:                     3130332e39382e37332e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          iTc2gRx4ebXsP1eOWz4bPAEExZXDn5MuL/PjqBhmxRc=
Subject key identifier:   62:A5:D1:AF:E8:E6:DB:37:16:E5:F8:CC:34:A9:37:1B:EF:D3:D6:74
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       1EDD62A81BBA2DF78B8C1865C1E5A8A45FF33934
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37332e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:06:54 +0000
ROA not before:           Mon 11 May 2026 17:01:54 +0000
ROA not after:            Mon 10 May 2027 17:06:54 +0000
asID:                     9678
IP address blocks:        103.98.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:dd:62:a8:1b:ba:2d:f7:8b:8c:18:65:c1:e5:a8:a4:5f:f3:39:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:01:54 2026 GMT
            Not After : May 10 17:06:54 2027 GMT
        Subject: CN=62A5D1AFE8E6DB3716E5F8CC34A9371BEFD3D674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:88:c8:57:f6:15:d1:ca:e5:b9:7c:38:84:
                    27:2d:c9:a5:f4:64:dd:6a:23:57:28:c2:fb:a4:37:
                    3b:57:3d:84:ce:c7:e0:fe:b5:41:9c:53:da:45:65:
                    0e:d9:66:50:33:77:ce:84:cd:f6:e3:36:70:90:18:
                    0d:df:f3:6d:a8:46:c7:4d:e1:5e:09:87:86:98:9b:
                    08:f3:fe:e2:15:3c:a5:53:f5:ce:33:18:2c:d9:55:
                    b4:61:fd:4c:95:90:dd:a2:f4:1f:f0:69:a1:bc:27:
                    40:6a:07:1a:d3:54:b0:cb:c3:6c:c3:b6:26:de:8e:
                    f5:8b:e3:b0:b2:2b:e2:8a:6a:10:36:18:d4:21:b3:
                    0c:77:e5:24:1f:e5:7e:ea:bc:f1:9c:3d:ca:86:39:
                    17:43:28:e8:a3:aa:ff:6a:1d:66:88:3f:4d:d0:32:
                    32:8e:36:29:90:45:26:de:23:7a:ba:d3:51:67:0f:
                    1b:af:3e:46:4e:2e:f1:91:2e:7b:29:98:cc:a5:f6:
                    c6:d8:43:1b:79:68:6f:f5:41:45:c6:a9:35:4a:c6:
                    14:a8:15:ba:28:b1:7d:f7:a9:52:c0:9d:4e:a4:f1:
                    e5:e9:15:0a:de:13:99:d7:5e:76:fa:fa:5e:ca:fe:
                    2b:9b:05:6d:49:dc:1c:a6:90:5e:47:68:c1:8d:1a:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A5:D1:AF:E8:E6:DB:37:16:E5:F8:CC:34:A9:37:1B:EF:D3:D6:74
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37332e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:45:7d:1c:5f:70:6a:50:27:61:68:f5:f6:bf:5f:c4:23:
         6d:c5:24:77:17:22:5d:b0:47:ef:c0:8d:2b:e1:bd:f9:bf:01:
         38:a4:26:c7:53:c5:e9:76:7f:4f:34:7e:4b:79:a4:0c:12:0f:
         0a:61:6c:33:2b:85:38:f8:27:ba:6e:e0:12:49:54:00:82:e2:
         3e:56:c9:f5:80:60:a6:72:4e:30:38:5b:34:eb:86:4b:61:e6:
         de:fd:83:ef:76:55:ab:bb:72:ed:f3:64:55:c2:89:1e:ae:4e:
         f2:87:a0:06:41:26:78:15:64:f3:40:61:7b:ff:de:7e:41:43:
         17:a5:ba:77:38:4e:dc:4c:72:a7:eb:62:fa:b7:87:42:c2:7a:
         b4:12:8b:cf:38:1a:42:a5:db:f7:48:b8:51:e4:62:2d:2a:a5:
         c1:c3:7c:c2:58:eb:e0:0d:a9:60:a6:b5:5c:45:d5:ac:c3:fe:
         9c:11:50:e7:e9:07:0b:e9:89:90:56:74:87:77:c2:01:93:28:
         64:ac:82:1b:25:e8:2f:52:7e:d5:b3:d5:50:2e:5a:a0:24:be:
         5f:aa:90:6d:92:9c:aa:39:f9:39:cc:63:30:ca:f7:18:b3:72:
         bb:ff:e6:23:70:79:f1:a7:08:16:33:1d:4d:fa:45:f6:a4:e0:
         1c:d8:03:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:29 2026 by rpki-client