Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136302e302f32342d3234203d3e2039393135.roa
File:                     3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (raw, json)
Hash identifier:          gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=
Subject key identifier:   F2:8E:AA:B9:5D:DF:60:7D:D0:A5:E3:82:75:04:78:DA:5A:E3:C7:FB
Certificate issuer:       /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial:       43DB8B1EBBD171F9BE8409DD0A9BA792374E5390
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136302e302f32342d3234203d3e2039393135.roa
Signing time:             Mon 11 May 2026 17:31:29 +0000
ROA not before:           Mon 11 May 2026 17:26:29 +0000
ROA not after:            Mon 10 May 2027 17:31:29 +0000
asID:                     9915
IP address blocks:        103.67.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
                          rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:db:8b:1e:bb:d1:71:f9:be:84:09:dd:0a:9b:a7:92:37:4e:53:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
        Validity
            Not Before: May 11 17:26:29 2026 GMT
            Not After : May 10 17:31:29 2027 GMT
        Subject: CN=F28EAAB95DDF607DD0A5E382750478DA5AE3C7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:78:ea:bc:fa:37:9b:1d:d1:40:21:d8:4a:
                    1c:e6:5b:86:03:c6:1d:70:b7:76:e6:48:39:6c:e0:
                    f3:d8:52:d8:9e:38:73:6b:75:1e:25:a1:ab:71:0b:
                    b7:d7:c4:4f:0d:d8:bd:b7:07:2b:d2:f6:9b:32:67:
                    dc:e3:02:20:84:7d:4e:c2:2d:66:24:fd:16:76:6f:
                    72:27:29:a7:48:e3:ee:9b:e8:37:22:ab:3c:ff:14:
                    b9:30:8f:e9:4c:8f:54:b9:29:a8:e8:76:85:64:76:
                    ef:dc:31:ab:21:ed:85:d0:a9:db:f7:7d:4e:0c:32:
                    7e:12:14:7d:1f:07:1e:aa:37:64:44:b1:9d:52:05:
                    6e:8e:b1:93:aa:cd:43:6e:ca:2f:6e:c6:69:20:7f:
                    00:42:41:f0:8c:01:3d:2c:7b:d3:2e:19:ef:b8:b0:
                    ea:c5:02:0f:92:69:ce:9f:06:99:d4:f0:9a:1e:b0:
                    e9:c9:c5:a6:e4:8c:12:3d:a5:57:35:ba:e0:46:68:
                    2b:69:06:d2:93:f4:ba:d8:46:a3:1c:ac:08:e8:1a:
                    65:70:3f:52:8d:de:3d:8b:5c:e1:9c:de:ff:c3:5e:
                    5b:77:a9:4d:d7:d8:c2:07:7d:4c:11:94:2d:3a:6f:
                    3d:ee:b8:ae:6b:e8:09:cb:e3:ca:27:4b:a3:13:32:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8E:AA:B9:5D:DF:60:7D:D0:A5:E3:82:75:04:78:DA:5A:E3:C7:FB
            X509v3 Authority Key Identifier:
                keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136302e302f32342d3234203d3e2039393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:bd:61:da:f6:9b:6e:1b:eb:c3:bc:d6:15:0d:90:d5:cd:bf:
         6f:89:67:e9:a7:0d:13:1b:f6:d7:1f:b7:20:90:71:c6:b5:e6:
         c5:8d:e8:5c:4a:bd:07:d9:8a:e9:38:f6:70:0d:ea:53:81:d8:
         f7:12:7c:a6:8a:2a:24:1f:2e:ae:50:1c:98:6f:6c:fc:12:f6:
         b0:e1:0f:60:ee:77:a3:85:f8:48:03:8f:89:14:87:af:6a:c1:
         ac:0b:67:57:c2:b7:7a:49:08:c7:1d:36:cc:c3:aa:64:d3:eb:
         9e:ff:aa:45:2a:ca:79:37:4e:53:9e:53:90:22:e7:94:49:ce:
         fb:58:3d:d9:74:ba:15:af:08:c0:92:2d:02:6e:dd:52:ad:91:
         76:0e:de:84:01:a5:46:fb:70:b9:0f:bb:3b:fb:48:3b:25:c2:
         f8:70:50:e3:63:20:66:e6:16:02:e6:97:71:e0:64:86:f9:6b:
         ea:30:70:94:5a:b5:da:de:3f:87:1b:1b:33:7d:3c:4d:7b:80:
         e6:99:61:66:78:8a:0e:6b:77:bd:c5:89:b0:63:62:e7:57:71:
         4f:41:68:4d:31:c9:14:5f:74:c2:cf:74:65:de:3e:9a:e7:49:
         8f:14:26:2e:03:ec:4b:32:33:ea:44:f4:de:b5:32:14:7b:61:
         42:68:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:52 2026 by rpki-client