Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/3130332e3137332e39352e302f32342d3234203d3e2039393230.roa
File:                     3130332e3137332e39352e302f32342d3234203d3e2039393230.roa (raw, json)
Hash identifier:          GRWZ7hnM+/dWxb1R4FqblAJoXVc3WKwBr5Lvm8NY3Iw=
Subject key identifier:   0C:C6:3A:D5:95:9B:86:39:79:D0:43:BB:3C:4A:60:36:C6:DD:79:16
Certificate issuer:       /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Certificate serial:       0F3F15BBF4716E7B00A6CCD145C5E21FAF8E3AFC
Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ISTVC/0/3130332e3137332e39352e302f32342d3234203d3e2039393230.roa
Signing time:             Mon 11 May 2026 17:15:47 +0000
ROA not before:           Mon 11 May 2026 17:10:47 +0000
ROA not after:            Mon 10 May 2027 17:15:47 +0000
asID:                     9920
IP address blocks:        103.173.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
                          rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3f:15:bb:f4:71:6e:7b:00:a6:cc:d1:45:c5:e2:1f:af:8e:3a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
        Validity
            Not Before: May 11 17:10:47 2026 GMT
            Not After : May 10 17:15:47 2027 GMT
        Subject: CN=0CC63AD5959B863979D043BB3C4A6036C6DD7916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:a7:f3:dc:f1:f7:11:a4:69:5a:08:9e:f2:
                    00:e6:93:49:9b:6c:03:ff:29:59:aa:75:11:42:40:
                    f4:7d:d6:56:be:4b:d5:5c:33:43:01:72:04:fa:ad:
                    a8:2b:ad:ff:e1:74:e4:cd:45:de:44:c7:6b:3f:b5:
                    1c:ff:27:50:ba:34:72:08:f8:ab:cb:81:6f:64:16:
                    ba:31:0a:6b:5e:a6:73:ed:2d:cf:10:ed:f2:51:07:
                    fe:dc:7b:32:e7:b8:af:09:69:e4:8a:03:d5:bb:30:
                    94:f0:22:e1:4e:78:87:dd:a3:d1:56:10:11:2d:cc:
                    d2:ec:f9:94:9f:07:f4:d5:aa:d6:64:aa:96:b6:91:
                    7c:41:db:ce:38:a2:1b:01:50:fa:95:19:78:2c:84:
                    7d:0b:0a:f0:f1:71:3b:6a:99:74:c3:95:f1:fa:97:
                    9a:50:17:d2:21:62:ed:fe:84:9b:51:2e:9c:81:2a:
                    55:2b:91:fd:89:fa:75:e2:34:80:dd:55:b8:48:99:
                    a9:b0:4d:01:de:ce:c7:e6:23:b9:b9:18:f5:6b:7c:
                    f5:81:8c:57:26:62:c1:3c:96:93:67:9e:23:94:02:
                    a4:1e:59:af:69:ab:6a:2f:54:fb:2a:b6:50:07:cc:
                    bf:a3:93:77:d9:bc:da:8f:0d:51:b8:b3:99:6e:46:
                    3f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:3A:D5:95:9B:86:39:79:D0:43:BB:3C:4A:60:36:C6:DD:79:16
            X509v3 Authority Key Identifier:
                keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/3130332e3137332e39352e302f32342d3234203d3e2039393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:60:95:c9:57:ce:a6:0f:58:d2:0c:76:fa:83:ea:d0:fc:6b:
         43:af:c9:de:6c:0b:ea:9b:14:e1:15:b9:25:37:b4:ef:12:42:
         b5:3c:3e:ec:27:d1:e3:78:67:a4:e0:ab:70:9b:44:e8:4d:d8:
         0a:63:db:8d:6f:0c:86:28:0e:c9:38:2f:20:96:08:62:4e:74:
         20:4f:10:00:9b:8d:0d:b0:fc:37:0c:73:cb:c7:6f:52:e9:bd:
         61:53:96:c5:37:09:b5:a0:a4:72:fb:8f:49:ad:25:1f:69:d4:
         c4:6a:09:c2:0a:a6:67:9a:f2:38:30:8a:d0:13:e9:c6:2c:85:
         0a:3e:68:07:1e:25:fd:3f:7c:1d:55:fa:b9:d5:01:a9:e1:1a:
         f2:27:28:4f:24:47:37:36:b7:a5:02:0d:b8:ab:69:af:30:c8:
         75:83:46:3d:fa:46:23:0e:63:2a:db:31:9b:0e:ae:f1:19:fe:
         1d:f8:2a:ce:2d:a3:c8:29:e7:6a:c0:40:48:69:33:3d:e1:9b:
         e1:2a:47:d5:96:f2:e4:e1:5f:6e:aa:da:87:50:0e:3a:6a:17:
         2a:2e:f9:ff:ac:c2:ca:28:b9:b4:37:f3:da:04:6a:2b:c7:9b:
         fc:ce:64:19:a9:a4:5a:f0:b2:fb:7b:9e:74:d0:39:4c:a3:ca:
         5a:34:da:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:21 2026 by rpki-client