Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37352e302f32342d3234203d3e2039363738.roa
File:                     3130332e39382e37352e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          lYN8XARBJdI1m3pygxieIjhCsA/S1lX7e1q8e4qctns=
Subject key identifier:   FE:7D:CB:33:54:8C:D1:13:23:C5:4E:A8:B5:69:43:AD:D1:93:87:36
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       126ED22F732B554CB36B6CB85C0A5846B00B45B4
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37352e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:08:56 +0000
ROA not before:           Mon 11 May 2026 17:03:56 +0000
ROA not after:            Mon 10 May 2027 17:08:56 +0000
asID:                     9678
IP address blocks:        103.98.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6e:d2:2f:73:2b:55:4c:b3:6b:6c:b8:5c:0a:58:46:b0:0b:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:03:56 2026 GMT
            Not After : May 10 17:08:56 2027 GMT
        Subject: CN=FE7DCB33548CD11323C54EA8B56943ADD1938736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:08:1b:de:46:62:08:86:81:ec:46:74:c9:
                    59:53:e7:61:28:64:fc:6d:3d:ea:c6:35:91:93:4a:
                    50:2e:32:9b:81:3f:4d:90:17:85:d1:71:7d:25:8a:
                    15:2e:54:1c:91:e9:36:cd:6e:4c:21:26:b8:6c:5e:
                    50:67:2b:34:8e:e0:3a:e2:ae:22:21:4e:eb:bd:19:
                    03:e1:4b:43:b6:a3:d7:0d:96:09:d7:ed:47:0f:bd:
                    c4:cc:7a:0b:da:03:ca:5c:40:db:40:25:ed:d7:fc:
                    ea:c5:c2:5b:6d:6c:87:d4:c8:bb:fa:3f:d7:9c:43:
                    65:74:10:75:ee:2a:0f:ac:b7:3a:ee:6e:f6:e8:ac:
                    7c:1f:56:bd:35:f6:26:e5:76:e1:ea:9c:0d:38:f4:
                    50:d3:52:2c:a5:ea:13:f2:91:79:ab:63:71:19:92:
                    75:f1:ee:9b:e6:8f:c6:9c:16:57:0c:2f:24:a8:1e:
                    7e:d2:3b:41:6e:75:dc:16:8e:bc:33:30:f9:47:d4:
                    a2:76:e0:22:93:e9:98:94:97:d4:58:19:3b:46:e5:
                    99:69:2a:ec:73:77:64:03:c0:98:bb:6e:37:d3:52:
                    ef:6f:6d:ac:82:8f:fa:85:2d:f9:32:33:eb:87:85:
                    3f:13:03:eb:11:79:9b:ad:b9:fb:46:2e:04:f4:3a:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7D:CB:33:54:8C:D1:13:23:C5:4E:A8:B5:69:43:AD:D1:93:87:36
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3130332e39382e37352e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:82:1f:7a:14:9d:6b:e6:66:7e:bc:39:0b:d9:4d:a9:90:d5:
         8a:76:c9:53:52:bb:4d:fb:96:67:95:e8:2d:ed:d3:e2:5d:23:
         fa:71:69:41:37:44:38:28:8e:69:78:2f:f2:73:2c:9e:55:d8:
         b3:b0:f2:ce:56:75:8a:0f:07:e5:15:86:6c:85:eb:4f:34:1a:
         fb:49:24:7a:6b:a2:6e:86:0e:e0:b9:b6:14:6c:fa:de:1b:76:
         f2:0e:20:a5:4b:0d:ac:d7:2d:24:b3:a3:51:b3:ca:29:0b:85:
         6b:71:70:14:3d:b6:28:59:09:8d:09:1e:10:10:75:07:cc:f6:
         3c:55:59:f2:35:f7:83:7d:45:81:da:89:c9:07:98:ae:5f:60:
         ca:ef:a8:82:d7:b6:e1:b4:f5:b6:4a:da:9f:02:97:6d:60:4b:
         48:d4:62:5a:d1:cb:fa:18:51:f5:68:c9:7f:8c:f3:91:f8:2a:
         4c:c8:16:cd:08:e4:43:3d:fc:af:3d:04:60:55:da:c3:8a:95:
         55:14:f6:f9:61:80:49:25:52:ba:48:a8:6b:2b:96:ee:84:7f:
         17:dc:39:de:e8:d1:bc:23:79:3a:bc:83:7c:31:a0:a7:c5:ff:
         c2:55:91:49:39:d1:85:0e:54:94:ca:84:5c:2d:32:2b:1b:fa:
         e0:51:d0:00
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIUEm7SL3MrVUyza2y4XApYRrALRbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBE
RkQzMkQyQTAeFw0yNjA1MTExNzAzNTZaFw0yNzA1MTAxNzA4NTZaMDMxMTAvBgNV
BAMTKEZFN0RDQjMzNTQ4Q0QxMTMyM0M1NEVBOEI1Njk0M0FERDE5Mzg3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPQgb3kZiCIaB7EZ0yVlT52Eo
ZPxtPerGNZGTSlAuMpuBP02QF4XRcX0lihUuVByR6TbNbkwhJrhsXlBnKzSO4Dri
riIhTuu9GQPhS0O2o9cNlgnX7UcPvcTMegvaA8pcQNtAJe3X/OrFwlttbIfUyLv6
P9ecQ2V0EHXuKg+stzrubvborHwfVr019iblduHqnA049FDTUiyl6hPykXmrY3EZ
knXx7pvmj8acFlcMLySoHn7SO0FuddwWjrwzMPlH1KJ24CKT6ZiUl9RYGTtG5Zlp
Kuxzd2QDwJi7bjfTUu9vbayCj/qFLfkyM+uHhT8TA+sReZutuftGLgT0OjDBAgMB
AAGjggHfMIIB2zAdBgNVHQ4EFgQU/n3LM1SM0RMjxU6otWlDrdGThzYwHwYDVR0j
BBgwFoAUYKbyDjnoGWL9N3DExExeEN/TLSowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO
LzAvNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS82MEE2RjIwRTM5RTgxOTYyRkQzNzcwQzRDNDRD
NUUxMERGRDMyRDJBLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzAvMzEzMDMzMmUzOTM4
MmUzNzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzNjM3Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BABnYkswDQYJKoZIhvcNAQELBQADggEBAEyCH3oUnWvmZn68OQvZTamQ1Yp2yVNS
u037lmeV6C3t0+JdI/pxaUE3RDgojml4L/JzLJ5V2LOw8s5WdYoPB+UVhmyF6080
GvtJJHprom6GDuC5thRs+t4bdvIOIKVLDazXLSSzo1GzyikLhWtxcBQ9tihZCY0J
HhAQdQfM9jxVWfI194N9RYHaickHmK5fYMrvqILXtuG09bZK2p8Cl21gS0jUYlrR
y/oYUfVoyX+M85H4KkzIFs0I5EM9/K89BGBV2sOKlVUU9vlhgEklUrpIqGsrlu6E
fxfcOd7o0bwjeTq8g3wxoKfF/8JVkUk50YUOVJTKhFwtMisb+uBR0AA=
-----END CERTIFICATE-----
Generated at Wed May 13 21:16:31 2026 by rpki-client