Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136312e302f32342d3234203d3e2039393135.roa
File:                     3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (raw, json)
Hash identifier:          3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=
Subject key identifier:   5C:68:96:59:88:63:3C:9B:8F:18:4B:EA:F9:9D:2A:27:96:18:ED:F0
Certificate issuer:       /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial:       35DF6B01A20915CE11D6C566E10351A86CD287EE
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136312e302f32342d3234203d3e2039393135.roa
Signing time:             Mon 11 May 2026 17:31:29 +0000
ROA not before:           Mon 11 May 2026 17:26:29 +0000
ROA not after:            Mon 10 May 2027 17:31:29 +0000
asID:                     9915
IP address blocks:        103.67.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
                          rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:df:6b:01:a2:09:15:ce:11:d6:c5:66:e1:03:51:a8:6c:d2:87:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
        Validity
            Not Before: May 11 17:26:29 2026 GMT
            Not After : May 10 17:31:29 2027 GMT
        Subject: CN=5C68965988633C9B8F184BEAF99D2A279618EDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:9b:ea:56:d8:c2:84:89:b8:b6:49:c4:97:
                    a9:7f:fb:b6:55:95:b5:b8:68:14:06:9d:f8:fa:87:
                    8a:c5:f8:58:3e:fe:4b:7d:75:4b:d5:7d:99:69:ff:
                    e6:30:6c:de:2f:07:82:d8:89:04:98:77:83:0f:bf:
                    9c:a9:a2:3e:7f:d3:d2:76:b9:0a:9d:f8:d0:36:8e:
                    bb:8e:19:82:c8:ac:b7:14:f7:b3:92:57:d7:54:7a:
                    d5:49:23:4a:62:d4:10:96:e9:0a:98:18:84:7d:45:
                    02:36:6f:0f:68:77:28:13:91:70:c1:0f:21:4e:d2:
                    2d:c8:8b:b2:48:bf:33:b7:e2:7b:f2:66:c1:90:8d:
                    39:2a:9a:e7:d5:d5:48:55:85:be:51:16:d5:5d:d9:
                    9a:2e:10:83:61:0f:81:fc:f6:83:10:e7:72:e6:2e:
                    78:67:13:3b:e2:ff:fd:91:61:41:58:14:b9:74:47:
                    04:39:e9:cf:02:c2:ff:2e:b0:61:67:9a:0b:8e:04:
                    19:58:80:27:61:25:f1:a4:68:60:ff:d5:72:02:18:
                    4b:7f:86:20:2d:63:25:49:6d:e8:83:de:65:54:46:
                    42:9d:bb:2e:c6:7d:0f:ef:69:03:94:8a:dc:96:a8:
                    94:5b:77:24:c2:8a:ed:15:26:8e:93:14:bb:80:65:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:96:59:88:63:3C:9B:8F:18:4B:EA:F9:9D:2A:27:96:18:ED:F0
            X509v3 Authority Key Identifier:
                keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/3130332e36372e3136312e302f32342d3234203d3e2039393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:26:0d:7f:36:f6:df:98:33:43:ef:c5:56:32:31:0e:92:ed:
         09:4b:7c:db:0f:fe:13:7e:6f:32:a8:4c:07:4a:8a:2f:cb:cc:
         23:4d:6e:20:b3:73:85:28:5f:13:af:9b:98:97:3b:9a:71:f7:
         64:2c:b4:fb:e3:1c:0d:d7:23:a2:18:ab:94:f4:53:d7:f0:db:
         98:34:5d:dd:3f:5b:66:8e:1d:e9:b5:0e:de:f7:4a:b5:56:dc:
         30:c0:01:15:d2:83:97:a2:69:f4:a9:71:2b:65:97:f9:22:a2:
         6d:12:a2:df:da:3c:7b:fa:94:ff:4f:36:b1:c5:b0:40:d4:f5:
         54:18:a9:70:be:c8:0f:25:61:1e:5e:b9:5e:12:68:f3:ef:65:
         43:a3:a3:44:32:4d:ad:a6:c0:c9:91:5d:b5:62:37:ab:dd:45:
         81:dd:45:4a:00:c6:a9:55:cb:7d:81:42:e5:d9:ee:96:e6:c7:
         cf:c6:7d:af:d8:8a:b6:a7:63:27:5b:1d:56:09:52:bc:80:14:
         fb:d0:1c:c4:25:9f:67:e1:40:5f:2d:30:6c:d1:36:bd:fd:16:
         03:b8:6e:04:d2:3a:c1:03:9d:de:31:af:64:cd:f7:34:71:53:
         a7:b6:9e:26:17:ae:e7:ac:e8:7f:a2:86:12:41:cd:48:b6:89:
         97:68:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:49:31 2026 by rpki-client