Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39362e302f32342d3234203d3e20313331363139.roa
File:                     3130332e3131362e39362e302f32342d3234203d3e20313331363139.roa (raw, json)
Hash identifier:          UaKYusfbQq14jtksCxK2CbIiFuahrOYiKDtCnF6A974=
Subject key identifier:   0A:30:D5:40:64:1F:3F:05:E6:4D:33:96:24:F7:3F:BA:39:08:76:99
Certificate issuer:       /CN=29663E2ACD53191459F334EE521FAAAABE4930ED
Certificate serial:       177CAD28BEFEB45BEDF0A3C5E901F454E206806E
Authority key identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39362e302f32342d3234203d3e20313331363139.roa
Signing time:             Mon 11 May 2026 16:33:50 +0000
ROA not before:           Mon 11 May 2026 16:28:50 +0000
ROA not after:            Mon 10 May 2027 16:33:50 +0000
asID:                     131619
IP address blocks:        103.116.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl
                          rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7c:ad:28:be:fe:b4:5b:ed:f0:a3:c5:e9:01:f4:54:e2:06:80:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29663E2ACD53191459F334EE521FAAAABE4930ED
        Validity
            Not Before: May 11 16:28:50 2026 GMT
            Not After : May 10 16:33:50 2027 GMT
        Subject: CN=0A30D540641F3F05E64D339624F73FBA39087699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8d:b5:a8:93:a6:3b:22:c7:e1:b9:67:bd:72:
                    20:b4:84:20:14:a7:2d:b5:ff:54:f6:97:de:1c:76:
                    92:ac:e0:ca:8a:65:75:7e:fd:ff:dd:9d:e6:fe:5f:
                    39:f6:45:5a:18:87:0f:2b:69:a9:05:a4:01:b0:bf:
                    ee:98:2f:98:7c:ca:d3:cd:c8:44:ad:77:66:52:68:
                    be:4c:5b:5e:d8:a0:3a:56:a5:35:b8:05:9b:65:78:
                    bc:d0:9d:ae:1e:10:02:b6:72:30:eb:dc:10:3a:48:
                    e6:38:b3:e0:a3:4f:14:ca:89:62:1f:bc:fa:0b:75:
                    eb:75:99:ea:1b:3d:23:b5:04:15:43:66:bd:c0:81:
                    1b:de:39:bf:0a:66:43:74:be:89:87:72:d9:cb:0b:
                    9f:bd:df:81:f7:f4:46:cb:d7:b5:f1:f7:b2:1f:c2:
                    fb:2a:be:d0:f9:54:36:68:a5:0a:80:c7:88:82:00:
                    ab:58:d8:a7:58:87:2b:a6:c9:6f:a9:aa:cc:26:99:
                    ff:73:31:f4:c8:bf:1c:96:e6:11:a8:4c:b7:69:3f:
                    a7:da:6f:75:ad:99:9c:b6:d7:73:d3:f3:ba:df:1c:
                    6d:c6:c1:85:9d:8c:0a:1c:15:b0:f2:6c:cf:22:c5:
                    86:8d:dd:e6:e5:4f:88:ee:ec:95:40:86:a0:95:07:
                    97:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:D5:40:64:1F:3F:05:E6:4D:33:96:24:F7:3F:BA:39:08:76:99
            X509v3 Authority Key Identifier:
                keyid:29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39362e302f32342d3234203d3e20313331363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:84:05:92:07:4c:26:10:0a:cb:a4:20:44:69:75:9e:c0:0e:
         76:7f:80:e7:dc:68:9f:c8:90:6b:d2:98:85:bb:dc:13:dd:eb:
         e3:42:26:e7:ff:18:03:24:3f:d1:7d:f1:98:2b:97:cb:9f:5b:
         6c:e4:b2:e9:91:5b:e2:33:97:55:98:53:d0:dc:54:b6:de:87:
         df:da:d2:73:ca:e0:ea:14:01:da:c1:fd:a7:6e:8a:17:b5:1d:
         5a:c3:76:34:fa:bf:67:1c:c7:d9:3b:53:38:6b:8d:7b:3a:98:
         94:67:4e:3f:eb:46:36:c0:76:7b:f6:0f:c1:ab:71:77:bc:fa:
         94:eb:c2:09:e5:e7:d0:5f:11:cb:06:9b:7b:35:50:42:b2:32:
         b9:5d:ed:51:fa:4e:bb:84:9c:2e:d3:e8:90:44:2e:82:c9:2c:
         1a:2c:14:05:5a:3c:aa:7b:e3:2d:16:12:16:4a:93:27:98:41:
         c4:50:74:bf:e6:f0:ec:cb:a2:61:a7:ca:bf:e4:bf:39:d3:de:
         6a:47:46:bc:4c:af:39:89:ed:29:93:04:9c:d7:68:f4:61:1b:
         3a:0a:37:99:c3:a1:aa:f5:6e:3d:5b:fe:e9:0d:26:d4:41:f5:
         e7:6f:8b:23:e2:b2:be:51:9b:51:ea:b1:6f:5b:8d:e4:ef:16:
         c0:e5:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:08 2026 by rpki-client