Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/INFORICH/0/3130332e3135322e3235322e302f32332d3234203d3e20313331363737.roa
File:                     3130332e3135322e3235322e302f32332d3234203d3e20313331363737.roa (raw, json)
Hash identifier:          j0DKnfX1r8mJMrfGr7lsqQ7lvkU8ZyKK4q8km6mT6FE=
Subject key identifier:   F1:98:13:B6:1E:AE:B3:50:C7:14:C2:11:36:FF:38:8C:B6:8B:A0:6F
Certificate issuer:       /CN=2246FA22721287A616226553235161DB0C06A86A
Certificate serial:       32DC50E6F326E03FAA1B48CFD02BDA21EB18CBE4
Authority key identifier: 22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/INFORICH/0/3130332e3135322e3235322e302f32332d3234203d3e20313331363737.roa
Signing time:             Mon 11 May 2026 17:06:58 +0000
ROA not before:           Mon 11 May 2026 17:01:58 +0000
ROA not after:            Mon 10 May 2027 17:06:58 +0000
asID:                     131677
IP address blocks:        103.152.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl
                          rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dc:50:e6:f3:26:e0:3f:aa:1b:48:cf:d0:2b:da:21:eb:18:cb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2246FA22721287A616226553235161DB0C06A86A
        Validity
            Not Before: May 11 17:01:58 2026 GMT
            Not After : May 10 17:06:58 2027 GMT
        Subject: CN=F19813B61EAEB350C714C21136FF388CB68BA06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:54:52:ed:11:7f:7f:1e:cb:3b:49:1a:e0:
                    0a:c9:65:90:b3:16:34:7d:2c:16:79:83:69:d0:ab:
                    5c:a9:e5:83:48:f7:63:85:e6:01:37:eb:51:37:78:
                    bd:9f:23:44:7a:97:ee:86:90:0f:ad:82:e8:b5:0d:
                    0e:e5:47:a2:ef:4e:bd:f2:28:3b:0b:60:ed:4b:b5:
                    b4:55:5c:e9:90:76:b4:f7:98:f1:bd:13:07:4e:4f:
                    aa:30:72:31:e4:85:23:f7:17:cd:3b:a3:7f:4f:83:
                    8d:ac:62:ea:5c:16:c6:4d:f0:cb:62:2c:6f:1f:20:
                    ac:27:1f:12:e3:07:52:46:2d:85:41:53:76:65:a5:
                    0b:1d:79:b4:b7:1f:a9:b6:5f:ae:5f:aa:45:5c:d5:
                    e6:f0:e6:b5:02:eb:8c:2d:f0:bc:e8:0b:34:4d:f1:
                    dd:ff:5a:7f:72:47:ec:9b:7b:f0:f1:04:1f:fd:95:
                    fd:10:e5:a5:cb:2b:1d:67:3d:58:39:db:93:ba:4e:
                    67:0f:8d:04:be:fe:71:d2:32:47:8c:b6:0d:d7:9b:
                    03:75:3b:91:ef:d3:e9:fc:20:ea:42:a2:13:82:dd:
                    20:50:07:4c:3b:82:3a:c2:9a:12:7b:2b:29:8f:8f:
                    a1:be:20:15:74:99:fd:96:b0:08:51:ff:5c:cf:08:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:98:13:B6:1E:AE:B3:50:C7:14:C2:11:36:FF:38:8C:B6:8B:A0:6F
            X509v3 Authority Key Identifier:
                keyid:22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/3130332e3135322e3235322e302f32332d3234203d3e20313331363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:09:c3:c6:76:a5:a1:7e:e0:84:8f:a6:55:a0:03:eb:60:
         e3:f9:c8:86:4f:58:73:1f:7a:c8:26:b0:5b:c4:85:68:87:a6:
         15:41:03:99:40:82:aa:2a:9a:27:34:29:94:a9:c1:44:7f:e1:
         37:09:01:12:69:6c:5f:b6:9b:93:20:fb:9b:ab:ea:52:db:43:
         7e:97:fe:ae:85:bc:6e:74:b8:44:b2:9b:42:23:a1:94:3c:14:
         f2:14:1b:31:53:7d:20:9b:ad:a7:14:52:36:1d:b4:4b:fa:ee:
         65:53:7c:28:b4:79:5b:04:d4:94:53:7c:79:81:38:7c:cd:85:
         b3:75:5b:ef:ed:b4:d1:20:ee:f5:ee:89:65:be:3d:9f:57:af:
         a8:d9:f1:14:87:77:e1:26:13:6f:d3:8d:ef:ef:5b:96:da:4d:
         c2:14:14:95:c4:63:f3:75:9b:f4:de:18:3f:36:93:b2:17:4d:
         9a:5c:c1:3d:53:a6:27:ab:31:41:77:ef:84:d0:f5:00:db:02:
         dc:49:ee:70:31:54:fa:59:8d:fd:01:a6:a7:0f:04:35:24:43:
         80:5d:61:d5:19:df:8c:3c:64:ae:3a:27:3d:73:23:af:94:f3:
         3f:27:9e:b1:bc:3f:dc:27:42:c3:ff:e0:d6:1a:35:7a:6a:5b:
         80:49:24:4e
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUMtxQ5vMm4D+qG0jP0CvaIesYy+QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0NkZBMjI3MjEyODdBNjE2MjI2NTUzMjM1MTYxREIw
QzA2QTg2QTAeFw0yNjA1MTExNzAxNThaFw0yNzA1MTAxNzA2NThaMDMxMTAvBgNV
BAMTKEYxOTgxM0I2MUVBRUIzNTBDNzE0QzIxMTM2RkYzODhDQjY4QkEwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nFRS7RF/fx7LO0ka4ArJZZCz
FjR9LBZ5g2nQq1yp5YNI92OF5gE361E3eL2fI0R6l+6GkA+tgui1DQ7lR6LvTr3y
KDsLYO1LtbRVXOmQdrT3mPG9EwdOT6owcjHkhSP3F807o39Pg42sYupcFsZN8Mti
LG8fIKwnHxLjB1JGLYVBU3ZlpQsdebS3H6m2X65fqkVc1ebw5rUC64wt8LzoCzRN
8d3/Wn9yR+ybe/DxBB/9lf0Q5aXLKx1nPVg525O6TmcPjQS+/nHSMkeMtg3XmwN1
O5Hv0+n8IOpCohOC3SBQB0w7gjrCmhJ7KymPj6G+IBV0mf2WsAhR/1zPCKFfAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU8ZgTth6us1DHFMIRNv84jLaLoG8wHwYDVR0j
BBgwFoAUIkb6InISh6YWImVTI1Fh2wwGqGowDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU5GT1JJ
Q0gvMC8yMjQ2RkEyMjcyMTI4N0E2MTYyMjY1NTMyMzUxNjFEQjBDMDZBODZBLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzIyNDZGQTIyNzIxMjg3QTYxNjIyNjU1MzIz
NTE2MURCMEMwNkE4NkEuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU5GT1JJQ0gvMC8zMTMwMzMy
ZTMxMzUzMjJlMzIzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzMxMzYz
NzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ5j8MA0GCSqGSIb3DQEBCwUAA4IBAQAiLgnDxnaloX7g
hI+mVaAD62Dj+ciGT1hzH3rIJrBbxIVoh6YVQQOZQIKqKponNCmUqcFEf+E3CQES
aWxftpuTIPubq+pS20N+l/6uhbxudLhEsptCI6GUPBTyFBsxU30gm62nFFI2HbRL
+u5lU3wotHlbBNSUU3x5gTh8zYWzdVvv7bTRIO717ollvj2fV6+o2fEUh3fhJhNv
043v71uW2k3CFBSVxGPzdZv03hg/NpOyF02aXME9U6YnqzFBd++E0PUA2wLcSe5w
MVT6WY39AaanDwQ1JEOAXWHVGd+MPGSuOic9cyOvlPM/J56xvD/cJ0LD/+DWGjV6
aluASSRO
-----END CERTIFICATE-----
Generated at Wed May 13 21:16:29 2026 by rpki-client