Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39392e302f32342d3234203d3e20313331363139.roa
File:                     3130332e3131362e39392e302f32342d3234203d3e20313331363139.roa (raw, json)
Hash identifier:          xXNeaO4C8aKEBhmN2JoffMBnVtAHrRBzBfB76rl23+E=
Subject key identifier:   2B:45:1E:EA:78:26:15:C6:FB:D4:4B:CC:64:8C:A8:0A:07:BA:8A:16
Certificate issuer:       /CN=29663E2ACD53191459F334EE521FAAAABE4930ED
Certificate serial:       7E3DCA835659122357BC5C9EFA1E7656D0251009
Authority key identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39392e302f32342d3234203d3e20313331363139.roa
Signing time:             Mon 11 May 2026 16:33:51 +0000
ROA not before:           Mon 11 May 2026 16:28:51 +0000
ROA not after:            Mon 10 May 2027 16:33:51 +0000
asID:                     131619
IP address blocks:        103.116.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl
                          rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:14:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3d:ca:83:56:59:12:23:57:bc:5c:9e:fa:1e:76:56:d0:25:10:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29663E2ACD53191459F334EE521FAAAABE4930ED
        Validity
            Not Before: May 11 16:28:51 2026 GMT
            Not After : May 10 16:33:51 2027 GMT
        Subject: CN=2B451EEA782615C6FBD44BCC648CA80A07BA8A16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:ca:51:b3:7c:ec:6f:7d:08:14:65:2d:46:
                    85:11:2f:71:37:d4:a6:6d:bc:dd:f2:9a:52:bd:f3:
                    38:9a:29:15:a3:91:09:89:57:fd:ed:a8:bd:ef:61:
                    06:c6:43:28:0e:1d:80:ff:75:75:5f:2d:d7:7c:5a:
                    67:1f:1d:8a:61:1f:e3:bd:f6:ff:70:c1:dd:c6:88:
                    45:ce:eb:77:4f:e4:39:bd:8d:34:33:46:fe:bd:3b:
                    f0:ce:cc:94:cf:1a:b9:6f:29:13:a6:b9:a7:b9:55:
                    bd:56:ab:de:ab:1a:55:98:86:90:2d:d2:be:8d:5f:
                    fd:fb:f7:67:3c:af:8d:ad:c9:12:55:63:83:23:67:
                    2d:08:14:be:9b:59:85:ed:fb:b2:df:1c:ed:15:23:
                    6a:21:28:fc:f3:14:00:a1:ef:ef:08:0d:91:62:08:
                    4e:8b:bd:6a:9f:cc:c6:8f:60:24:fc:69:d8:85:a0:
                    ce:67:ff:25:2c:85:76:07:55:af:97:8a:71:0e:ae:
                    00:68:69:af:c4:0c:97:24:e1:18:3b:57:09:a1:18:
                    17:2b:3b:53:40:8d:ce:0a:a8:9d:32:78:e6:bb:61:
                    54:29:a9:12:21:37:59:a7:30:b4:55:1b:5f:f1:29:
                    c4:50:05:24:b6:bd:5e:a2:9d:91:3a:3a:eb:85:be:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:45:1E:EA:78:26:15:C6:FB:D4:4B:CC:64:8C:A8:0A:07:BA:8A:16
            X509v3 Authority Key Identifier:
                keyid:29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/3130332e3131362e39392e302f32342d3234203d3e20313331363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:cf:57:1f:07:0f:53:66:59:8b:69:11:0c:b8:eb:69:9a:8c:
         dd:15:7a:37:f5:d3:be:3a:07:8e:37:69:14:b4:a2:ea:89:ca:
         a2:0d:a8:ed:1d:88:da:30:86:76:e3:66:3d:f8:87:83:6c:46:
         35:38:1b:89:8f:58:29:1d:93:9b:1b:f3:1e:59:e2:8c:b4:11:
         6f:fa:e3:09:5c:da:b3:21:26:e5:30:a5:f1:38:bc:63:6d:8c:
         8e:bf:7a:fc:7e:4b:fc:4b:3c:35:a0:00:70:cc:c8:a1:52:9c:
         1c:ff:12:5f:b0:9b:5f:1d:c9:d9:a9:c4:ca:e1:ca:f4:02:a6:
         86:f4:de:69:44:7e:69:ed:f6:22:e0:6b:dd:f3:f4:85:06:c2:
         8b:92:72:1b:37:99:33:1c:d3:00:f8:11:e7:81:3a:40:54:14:
         e7:28:4c:98:cc:db:ca:1a:34:06:66:0c:49:5d:ad:7e:c4:1e:
         90:f0:4e:8e:f4:d1:d6:c8:c9:a9:ff:44:5f:be:68:73:fa:c5:
         40:2c:46:29:0c:61:b1:33:cd:57:f8:65:ae:87:a9:6e:c3:33:
         e5:db:ec:e5:ef:b2:90:40:b6:b0:fd:a2:8f:14:45:29:8b:4c:
         f2:4b:cc:ac:e3:17:3a:a1:db:c5:cf:f0:13:10:75:ce:37:2d:
         96:ce:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:04 2026 by rpki-client