Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIANGCAI/0/3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa
File:                     3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa (raw, json)
Hash identifier:          JM1ES7aYxSnNnfsEPzEsFs8jJ+J2CBl25b9ETMqQfLU=
Subject key identifier:   04:9E:C3:9D:99:11:8C:58:50:3A:18:4B:20:55:4E:2B:E6:7B:D6:0A
Certificate issuer:       /CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
Certificate serial:       337A533AF5C507F207D9ED90065ADBCAB66AF440
Authority key identifier: D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa
Signing time:             Mon 11 May 2026 17:37:58 +0000
ROA not before:           Mon 11 May 2026 17:32:58 +0000
ROA not after:            Mon 10 May 2027 17:37:58 +0000
asID:                     131642
IP address blocks:        103.99.138.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl
                          rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:36:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7a:53:3a:f5:c5:07:f2:07:d9:ed:90:06:5a:db:ca:b6:6a:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12
        Validity
            Not Before: May 11 17:32:58 2026 GMT
            Not After : May 10 17:37:58 2027 GMT
        Subject: CN=049EC39D99118C58503A184B20554E2BE67BD60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:02:99:7e:4e:9d:0d:d6:23:e0:81:54:8f:0d:
                    2f:1a:bc:96:44:41:72:ee:d3:1d:41:e7:28:e3:1d:
                    43:e3:df:9c:25:23:24:ab:cf:a4:ad:26:c3:30:a3:
                    fc:6c:c4:ee:ea:c3:75:77:3d:9f:d4:a6:e7:5c:ec:
                    d0:15:a0:88:21:c3:d1:3b:99:12:16:6d:2f:00:8f:
                    33:79:57:27:32:40:fb:8f:2e:7e:3f:03:15:d1:5c:
                    fd:1e:5a:5f:4b:af:8e:80:b3:72:9c:ee:14:df:98:
                    27:aa:84:2c:40:69:26:bf:18:e9:2f:d8:7c:79:a0:
                    7e:56:91:e3:d7:c0:c0:57:04:6e:e4:cf:67:9c:08:
                    0a:89:f8:32:c5:40:75:e0:9f:02:da:80:dd:26:bc:
                    65:29:57:e3:24:2f:df:33:7d:3f:c1:61:22:cb:80:
                    ca:b2:2c:f3:3a:ad:63:d5:f6:3a:4f:26:fc:a8:67:
                    93:39:50:7a:a7:8e:eb:f0:60:fb:40:cc:ef:bb:4b:
                    5e:7a:f8:dd:60:97:32:8f:01:2b:19:4f:8d:45:a0:
                    ed:de:ca:2a:24:7c:96:ea:e3:fc:fa:18:c8:cc:0c:
                    f8:81:24:db:e1:d4:35:85:a6:d0:3c:8d:6e:9f:6a:
                    f4:e6:90:82:d8:0d:16:a3:c9:c3:4a:b8:f3:44:4a:
                    a1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9E:C3:9D:99:11:8C:58:50:3A:18:4B:20:55:4E:2B:E6:7B:D6:0A
            X509v3 Authority Key Identifier:
                keyid:D0:B4:58:CE:0B:E5:8E:21:77:9D:5A:CA:09:6C:EF:CE:BC:ED:5D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D0B458CE0BE58E21779D5ACA096CEFCEBCED5D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIANGCAI/0/3130332e39392e3133382e302f32332d3332203d3e20313331363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:59:f0:19:b8:81:b1:2a:37:75:3c:2f:d2:1a:ea:1e:e6:a6:
         63:43:9b:b7:f2:f2:5d:18:0a:b2:01:f3:56:c0:8d:bc:08:ce:
         41:9c:e4:fb:17:62:46:57:21:20:bc:1d:89:f2:9a:cc:dd:e8:
         b3:3a:3e:74:0d:35:c6:33:fb:37:e1:b2:16:2b:ae:bd:cd:04:
         7e:52:b4:ad:1a:bd:3e:57:43:1a:3e:43:c8:d8:66:ac:22:ce:
         80:6c:41:dc:ca:b7:1a:35:c8:1d:fb:89:30:26:b1:66:7c:4c:
         da:14:67:11:39:19:14:9f:40:c4:c4:e4:1a:0b:98:4b:63:69:
         41:8d:89:e1:8c:78:b6:f9:5e:06:68:1d:36:91:5a:bd:c3:4a:
         65:eb:a1:3a:4c:94:52:18:52:16:83:15:18:41:1c:04:05:6e:
         36:bb:1c:26:18:ee:3b:fe:b7:03:74:6e:cd:5c:f8:ea:2d:0b:
         a1:9b:9b:ec:71:7f:31:54:72:fc:17:df:dd:7b:09:99:cf:84:
         4c:0c:23:ed:49:2b:36:21:58:8e:f1:64:e4:b1:b0:93:da:82:
         56:4f:41:03:67:03:e2:31:5f:94:e4:bb:1c:05:b9:e5:bf:a7:
         06:f2:60:ad:9f:0d:7b:72:75:cb:80:ac:3e:23:6d:bb:f7:52:
         74:2b:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:52 2026 by rpki-client