Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136302e302f32332d3234203d3e2039393135.roa
File:                     3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (raw, json)
Hash identifier:          1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=
Subject key identifier:   5D:48:41:67:72:A2:D1:55:C9:46:2B:89:1B:1C:48:A0:AD:48:C1:3C
Certificate issuer:       /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial:       2C7FB9BC130F1DDC48BB45A490ACAA0776EEF008
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136302e302f32332d3234203d3e2039393135.roa
Signing time:             Mon 11 May 2026 17:27:34 +0000
ROA not before:           Mon 11 May 2026 17:22:34 +0000
ROA not after:            Mon 10 May 2027 17:27:34 +0000
asID:                     9915
IP address blocks:        103.67.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
                          rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7f:b9:bc:13:0f:1d:dc:48:bb:45:a4:90:ac:aa:07:76:ee:f0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
        Validity
            Not Before: May 11 17:22:34 2026 GMT
            Not After : May 10 17:27:34 2027 GMT
        Subject: CN=5D48416772A2D155C9462B891B1C48A0AD48C13C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:fa:3f:97:8e:6a:13:2e:45:07:e6:ce:d8:
                    7b:b6:33:81:f1:c7:d3:93:9e:10:39:98:1c:33:4e:
                    bb:55:8a:97:2a:9c:5b:bf:9d:42:28:e3:0f:5d:05:
                    40:3f:bb:d3:77:80:f6:03:c9:90:85:3a:5c:4e:a0:
                    bc:69:b5:48:8a:3c:1a:c7:61:b4:e2:19:41:18:ee:
                    17:03:8c:63:d5:3e:b5:ef:6b:12:eb:4b:f7:12:22:
                    09:3f:d9:16:83:98:e0:8c:43:1c:42:0c:69:25:96:
                    54:d5:67:2d:25:ac:db:af:f7:12:61:8a:39:ee:63:
                    5c:38:d8:a5:bf:86:86:49:54:e9:b8:c2:c4:21:80:
                    35:f8:e7:4b:fb:2f:3a:16:7a:fd:fc:c1:dd:a5:d5:
                    9a:ca:52:55:bf:1a:18:fc:54:c2:db:33:ce:1e:db:
                    01:46:a9:52:f3:5b:fb:62:3b:af:bd:57:70:fc:9d:
                    1c:2b:f9:6c:cc:f4:84:24:23:60:8c:f3:29:10:78:
                    59:ac:12:ce:0a:e8:04:8c:0d:59:7d:7c:42:80:4c:
                    a2:b9:99:6c:f5:a8:34:87:87:5b:5b:0b:3b:cf:9f:
                    81:b5:0a:99:e3:f4:88:a8:78:0e:2a:35:73:59:a1:
                    42:d5:c4:25:34:11:63:ed:e4:77:d1:92:b7:60:e0:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:48:41:67:72:A2:D1:55:C9:46:2B:89:1B:1C:48:A0:AD:48:C1:3C
            X509v3 Authority Key Identifier:
                keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136302e302f32332d3234203d3e2039393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:64:26:02:0f:21:7e:a0:2c:7f:52:fc:21:09:a3:a6:4c:6d:
         fe:f4:1b:fc:7e:21:e1:a9:9b:fc:85:65:fb:9e:93:6d:6b:1e:
         f6:68:65:b5:25:86:b6:f2:5d:18:d7:09:49:31:f1:94:51:1c:
         57:37:d4:64:b3:ec:93:6a:13:7e:a5:f1:4f:a4:cc:58:6a:7f:
         ec:3f:d9:86:74:c6:6c:b7:d3:2d:d4:4b:4f:4d:fe:74:48:d3:
         99:4f:48:72:89:44:c5:dc:c4:10:fb:1d:28:43:c8:09:5a:48:
         ac:d3:60:71:6d:07:d1:95:8b:d8:c8:c0:93:54:b1:f5:03:93:
         f6:50:c3:8b:4e:c9:a5:db:e9:4d:e8:83:bc:64:d2:a5:09:06:
         da:4f:b3:5e:a3:f1:e4:7b:4e:2c:94:32:0b:14:e8:82:af:e3:
         4f:2f:99:40:8c:15:8a:58:98:5f:21:65:3f:f4:79:7f:51:37:
         6a:8f:ca:d5:e1:ac:7f:f9:2a:c5:bc:0f:ab:ac:9c:6b:92:46:
         7c:5d:a7:94:ed:9c:1f:f8:f5:41:0d:40:3d:02:cb:27:bd:b1:
         d7:76:70:09:a1:e9:7c:74:6f:09:e2:e8:15:ee:fe:9f:7d:ea:
         44:e8:31:d0:d9:d2:89:9b:3b:35:cd:76:5c:d8:41:0e:3c:6d:
         05:bb:9b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:55 2026 by rpki-client