Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/INNOLUX/0/3130332e3136312e39302e302f32332d3234203d3e20313331363833.roa
File:                     3130332e3136312e39302e302f32332d3234203d3e20313331363833.roa (raw, json)
Hash identifier:          JwjoRj1j48why172F9G4mQrd5YnaWPfcwnJcrULopfQ=
Subject key identifier:   04:EE:F6:F9:60:EB:62:84:99:D2:37:5F:71:2C:67:BE:89:24:9E:66
Certificate issuer:       /CN=4EB98F523D7ADE585D0759A99A1663EA4285D18F
Certificate serial:       3442007E01D8E018529CCAB145DE59899FCB4C53
Authority key identifier: 4E:B9:8F:52:3D:7A:DE:58:5D:07:59:A9:9A:16:63:EA:42:85:D1:8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/INNOLUX/0/3130332e3136312e39302e302f32332d3234203d3e20313331363833.roa
Signing time:             Mon 11 May 2026 17:15:25 +0000
ROA not before:           Mon 11 May 2026 17:10:25 +0000
ROA not after:            Mon 10 May 2027 17:15:25 +0000
asID:                     131683
IP address blocks:        103.161.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.crl
                          rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:00:7e:01:d8:e0:18:52:9c:ca:b1:45:de:59:89:9f:cb:4c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EB98F523D7ADE585D0759A99A1663EA4285D18F
        Validity
            Not Before: May 11 17:10:25 2026 GMT
            Not After : May 10 17:15:25 2027 GMT
        Subject: CN=04EEF6F960EB628499D2375F712C67BE89249E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f9:bb:41:b9:9a:3d:62:16:54:1c:5e:81:05:
                    ec:50:ec:bf:3f:ea:b0:0a:23:b2:e6:33:73:f9:9f:
                    8d:fa:4b:9d:2f:97:a2:79:ce:69:2f:13:10:77:dd:
                    6e:3f:d3:89:9c:6a:b9:8d:f9:74:07:3c:10:4a:6f:
                    13:c2:87:ce:3a:09:4c:45:95:d9:5d:cc:1f:c3:fe:
                    2d:56:a6:1c:a3:b0:e7:10:ef:69:a9:c9:fa:cb:32:
                    91:e0:50:a4:ca:e5:52:f1:1c:56:9f:9d:54:e1:c3:
                    e3:9e:76:86:2b:0f:ed:90:bb:c4:ad:88:1a:c4:00:
                    29:85:ea:70:6f:9b:bb:d2:e9:43:a6:55:60:5b:31:
                    05:0e:12:bc:34:a8:49:a0:b4:9e:94:49:65:23:78:
                    f2:98:10:25:50:6d:75:62:fc:58:ce:e8:da:ab:66:
                    5d:cb:84:bb:d9:14:38:62:15:cc:0d:4c:d5:bd:30:
                    d4:db:a5:30:f8:81:02:49:2c:78:1b:b9:b7:f2:0b:
                    fd:88:9e:1e:52:cc:8c:41:9c:2d:7b:43:cb:9e:3a:
                    ca:89:bc:56:7d:ca:71:f5:a1:4e:d2:ad:86:eb:88:
                    43:d0:6a:dc:5b:8a:6a:d2:2a:8c:5a:b5:91:3a:8d:
                    15:c5:54:7d:d0:c8:be:16:b6:9d:a6:8c:61:0e:8a:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:EE:F6:F9:60:EB:62:84:99:D2:37:5F:71:2C:67:BE:89:24:9E:66
            X509v3 Authority Key Identifier:
                keyid:4E:B9:8F:52:3D:7A:DE:58:5D:07:59:A9:9A:16:63:EA:42:85:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/INNOLUX/0/4EB98F523D7ADE585D0759A99A1663EA4285D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4EB98F523D7ADE585D0759A99A1663EA4285D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INNOLUX/0/3130332e3136312e39302e302f32332d3234203d3e20313331363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:03:eb:6d:7a:b6:2a:4d:b5:9b:67:1c:be:38:bb:b4:e8:b9:
         62:f0:e7:6c:80:0d:e7:a6:1b:b2:3b:0b:e5:45:15:67:f3:5b:
         16:c3:7a:c6:67:1c:c9:9f:8c:d3:29:9e:90:44:9c:70:dc:16:
         2c:91:d3:ca:e2:94:82:fa:6f:20:fe:e3:03:d8:e7:d1:cc:8d:
         47:46:43:46:28:61:3c:fc:8d:5f:a3:54:a6:1a:df:55:1b:99:
         04:47:e9:a5:15:07:f5:d2:22:16:ec:9a:40:82:47:8f:c8:7c:
         33:92:eb:3d:27:3b:06:b5:cf:e4:11:40:02:4f:ab:d7:cf:40:
         bb:fb:3c:17:f1:39:49:13:8a:c0:fc:cf:95:ec:33:ec:5d:b3:
         4d:59:32:da:55:1f:8e:bd:2c:65:ce:2e:02:1e:51:bf:f2:35:
         88:f6:38:7b:f6:3e:10:47:88:aa:4a:a7:51:d9:dc:3a:f4:91:
         49:ca:7e:90:9f:32:39:57:2f:fc:36:a2:75:ba:95:52:4b:e4:
         83:eb:b8:7e:b1:7c:d6:02:c3:05:e5:af:c2:c3:92:8b:45:93:
         fd:52:4a:e9:a2:66:e9:19:a5:5a:5e:24:dd:c6:4f:0f:87:15:
         e5:e0:34:9b:fc:be:d0:86:f1:14:57:91:1a:dd:be:50:54:f4:
         4b:06:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:15 2026 by rpki-client