Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39372e302f32342d3234203d3e20313331363139.roa
File:                     3130332e3131362e39372e302f32342d3234203d3e20313331363139.roa (raw, json)
Hash identifier:          CH3QbLk0/qbEK/EUtq0OeWcQdKVrjc4fx65CJOAhNOc=
Subject key identifier:   92:9E:B2:3E:92:C3:FC:DE:9D:13:AA:A5:DB:B4:1F:54:37:38:65:97
Certificate issuer:       /CN=29663E2ACD53191459F334EE521FAAAABE4930ED
Certificate serial:       484F1C18CBA193360450250FEA2B03130AB6525B
Authority key identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39372e302f32342d3234203d3e20313331363139.roa
Signing time:             Mon 11 May 2026 16:33:50 +0000
ROA not before:           Mon 11 May 2026 16:28:50 +0000
ROA not after:            Mon 10 May 2027 16:33:50 +0000
asID:                     131619
IP address blocks:        103.116.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl
                          rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:4f:1c:18:cb:a1:93:36:04:50:25:0f:ea:2b:03:13:0a:b6:52:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29663E2ACD53191459F334EE521FAAAABE4930ED
        Validity
            Not Before: May 11 16:28:50 2026 GMT
            Not After : May 10 16:33:50 2027 GMT
        Subject: CN=929EB23E92C3FCDE9D13AAA5DBB41F5437386597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:b4:35:d9:80:cd:9a:c9:52:87:73:c1:7f:
                    1a:f4:ed:6b:8c:fe:2c:5c:ab:60:d7:fa:71:fa:56:
                    8c:ab:4e:84:87:22:3c:94:4c:44:32:7c:91:a9:18:
                    b3:cc:e5:b3:0f:6a:4a:4c:71:84:2d:f2:f9:37:21:
                    9a:e9:d9:4b:dc:9b:fd:f9:1b:cd:c7:08:83:4d:e7:
                    50:0a:7a:9f:16:9c:be:c2:30:6e:d8:92:f3:83:d6:
                    7a:18:7a:34:f4:28:0d:cd:e2:98:9d:3c:3f:fe:a8:
                    4a:5c:40:28:4f:35:33:70:2d:cd:bc:bc:5c:42:97:
                    c2:7e:41:ab:9c:2a:77:d0:ea:59:8f:be:a8:5f:2f:
                    01:c8:13:94:05:18:f5:55:88:29:27:cb:38:80:f8:
                    8e:4a:be:94:62:8b:2e:ec:3c:20:a6:48:2a:b6:26:
                    2d:d5:25:45:e4:92:ed:a1:34:7c:14:a5:86:87:4a:
                    77:d7:a8:28:52:4c:1f:8d:30:4d:15:11:fa:ad:95:
                    da:a9:0f:b4:c0:e5:20:f4:fe:2f:d9:33:06:96:ac:
                    80:d6:67:f3:9a:bd:08:db:69:37:d3:5e:65:d6:d7:
                    72:e2:57:3d:6b:c6:44:7c:a6:cb:82:84:79:77:b2:
                    90:ef:34:eb:e8:33:bb:ef:89:3b:35:90:ef:c5:7f:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9E:B2:3E:92:C3:FC:DE:9D:13:AA:A5:DB:B4:1F:54:37:38:65:97
            X509v3 Authority Key Identifier:
                keyid:29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39372e302f32342d3234203d3e20313331363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:21:05:62:f3:32:99:39:ea:36:fb:2c:88:5f:9d:37:a1:
         e2:2e:d8:7e:0c:31:ca:30:ff:e6:40:42:0d:3f:15:f6:23:e3:
         e9:4e:25:4f:43:f3:c2:77:54:f6:d1:60:c8:3a:21:42:fe:cb:
         0a:2e:8d:77:c4:7d:85:c8:3c:0a:dc:14:f7:99:09:42:d7:af:
         2b:f1:10:90:fc:68:7b:bc:e2:b6:fb:21:70:f8:0f:89:39:07:
         01:36:3c:2f:10:46:51:4a:ea:cf:47:45:9d:a4:5a:1e:c9:d7:
         02:4e:52:1d:14:f8:46:94:64:04:b5:aa:e2:7b:cd:16:49:70:
         1c:dd:ac:f4:8f:e1:ea:cb:80:91:c9:6e:d0:62:42:d6:e8:ac:
         e0:f5:c4:58:12:7d:bd:95:34:61:62:90:ca:71:ec:ad:ae:75:
         be:50:d3:be:ad:98:96:f5:ef:83:ce:4f:f0:51:48:0b:8e:70:
         26:bb:97:e8:ee:f4:51:6b:40:41:63:95:29:c2:0b:a7:f7:e9:
         78:f6:6c:d4:4e:5b:08:25:d0:b0:c3:2f:ca:1e:6e:b4:fb:4b:
         82:4e:0a:d8:95:68:62:76:10:ca:2a:ad:9c:9e:44:df:39:5c:
         ef:78:07:f4:69:bd:20:68:9f:1d:61:d4:29:39:6d:06:dc:6f:
         a6:f0:b4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:10 2026 by rpki-client