Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32332d3234203d3e203338303432.roa
File:                     3130332e3137372e33322e302f32332d3234203d3e203338303432.roa (raw, json)
Hash identifier:          xPDyINdFmufQbNbHGWy0zvLscglHenPHYxlwfT+v00s=
Subject key identifier:   15:E5:2F:BC:FB:1D:4F:10:F2:AD:00:84:5C:9A:17:1F:C6:D5:25:D5
Certificate issuer:       /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
Certificate serial:       635B64636460678F1C5A0DCE581D03374C1635B9
Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32332d3234203d3e203338303432.roa
Signing time:             Mon 11 May 2026 17:11:46 +0000
ROA not before:           Mon 11 May 2026 17:06:46 +0000
ROA not after:            Mon 10 May 2027 17:11:46 +0000
asID:                     38042
IP address blocks:        103.177.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl
                          rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5b:64:63:64:60:67:8f:1c:5a:0d:ce:58:1d:03:37:4c:16:35:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0
        Validity
            Not Before: May 11 17:06:46 2026 GMT
            Not After : May 10 17:11:46 2027 GMT
        Subject: CN=15E52FBCFB1D4F10F2AD00845C9A171FC6D525D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:2e:ec:ae:f8:41:39:c2:25:37:7a:8a:8e:
                    2b:74:40:71:02:22:69:2e:a9:25:6c:1a:d1:41:da:
                    5c:6d:46:20:58:23:a8:cc:f0:ca:57:48:25:4b:7f:
                    6b:0d:8c:f9:34:29:78:96:4a:46:d4:f9:3c:2b:a9:
                    fd:e8:c8:67:5f:8a:07:9a:8c:1e:be:78:f7:b9:d4:
                    0b:22:5c:8e:36:31:1b:6d:ac:f8:8c:1e:9e:20:02:
                    09:a8:79:6f:f5:69:64:d1:fc:4c:c5:e2:ed:7d:4a:
                    7d:ee:ea:a0:53:f8:78:e0:21:f0:4f:e4:80:45:1b:
                    6a:4b:e1:2f:22:45:ec:81:a8:85:02:78:37:b1:22:
                    db:58:47:b9:5a:06:5c:2c:73:7d:80:53:a8:20:8b:
                    f8:22:f6:4e:4d:d2:f9:eb:f9:b6:b7:b9:1a:54:e6:
                    7f:42:c6:9c:e6:b3:4a:a5:09:4e:35:e4:25:6c:c8:
                    3a:1e:f0:14:da:27:02:79:9c:30:d5:0f:df:17:3d:
                    98:f6:67:28:63:64:0f:89:25:5d:e9:e0:f7:4c:9b:
                    86:b2:bf:73:21:5c:a6:ce:34:06:a7:09:19:22:5a:
                    52:2c:8d:61:4f:70:b7:d2:56:d6:ef:b2:c3:06:50:
                    f2:e8:75:00:ec:6f:8b:c9:d2:6c:72:07:02:d9:d3:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:2F:BC:FB:1D:4F:10:F2:AD:00:84:5C:9A:17:1F:C6:D5:25:D5
            X509v3 Authority Key Identifier:
                keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3137372e33322e302f32332d3234203d3e203338303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:b0:7d:ee:9e:3b:14:7d:46:08:14:d5:4b:04:28:9c:93:
         95:51:b1:ad:c6:77:6f:7b:0e:8a:27:8a:dc:f8:4d:cf:de:b0:
         42:2f:68:73:6f:29:a1:89:1b:49:c9:97:4e:18:03:be:bf:3e:
         fa:0a:54:15:d7:e8:f1:b0:46:7e:e4:02:2f:21:4f:09:db:47:
         ba:d8:df:2e:a4:36:96:81:a5:b6:4d:88:ea:21:32:dd:34:db:
         f0:e3:87:40:4e:5f:93:95:15:c6:83:ea:6e:cd:21:f9:1d:b9:
         fe:00:52:59:19:12:c2:ed:8b:5f:00:cd:11:ea:23:4e:e6:91:
         75:99:bd:37:16:5f:b6:66:db:05:18:42:d3:e1:7c:12:5c:b1:
         94:73:31:27:4f:11:f4:c1:05:1c:9f:3a:8c:2e:53:28:6f:f2:
         eb:98:f6:60:0f:c6:1c:2f:28:1a:12:99:4a:87:78:01:5c:da:
         61:79:6f:e4:94:8e:dd:e6:ef:6d:91:73:6b:54:bd:a1:06:60:
         01:78:af:94:75:0f:ce:d9:60:29:b1:39:46:63:33:a6:7f:a9:
         8d:ac:48:24:c4:9f:36:86:c0:1a:7a:34:85:d4:d2:5d:fe:1c:
         8c:b2:49:9a:83:78:23:5d:ab:3c:a1:4c:3c:a6:95:42:a5:60:
         80:ca:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:32 2026 by rpki-client