Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIBO/0/3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa
File:                     3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          jfPzdhlPSaVWUOyXk1OyVIn8kAk2JIHNsOorXtdv+L0=
Subject key identifier:   02:1F:5C:EF:7A:D0:56:25:13:F6:21:F5:EE:97:40:4B:33:29:06:DA
Certificate issuer:       /CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
Certificate serial:       758E72AFBD76247AB889540D30A117F075230F63
Authority key identifier: 39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIBO/0/3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:31:55 +0000
ROA not before:           Mon 11 May 2026 17:26:55 +0000
ROA not after:            Mon 10 May 2027 17:31:55 +0000
asID:                     131149
IP address blocks:        103.237.48.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl
                          rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8e:72:af:bd:76:24:7a:b8:89:54:0d:30:a1:17:f0:75:23:0f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
        Validity
            Not Before: May 11 17:26:55 2026 GMT
            Not After : May 10 17:31:55 2027 GMT
        Subject: CN=021F5CEF7AD0562513F621F5EE97404B332906DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ee:b1:6b:94:48:85:e2:a1:02:02:d7:bd:47:
                    47:c1:de:c2:61:fd:af:3e:9a:31:da:68:0b:ea:2b:
                    24:30:d0:01:4b:49:31:74:b7:31:9f:3d:1d:39:9d:
                    25:ad:13:62:57:56:a7:f5:16:34:ba:eb:ad:75:41:
                    25:00:8a:2b:48:0a:a9:4f:37:fd:63:f4:31:f9:6c:
                    41:36:37:9e:22:dc:cf:61:96:07:6a:cd:79:64:1d:
                    ef:24:bc:7c:d2:e9:b5:12:83:10:be:3b:6b:e4:9c:
                    1e:e7:6f:5b:2a:0a:bf:88:08:21:7c:65:11:fc:82:
                    94:f9:e6:c9:a6:0c:79:f5:e3:31:02:6d:46:17:6e:
                    d4:a5:14:e5:47:52:92:db:8d:fe:87:0e:af:b5:b3:
                    a0:31:b4:93:ad:88:6b:7c:4b:47:b1:f5:84:e4:12:
                    ca:5e:7f:26:92:c9:d3:4a:3e:c3:75:88:5a:96:78:
                    e5:b8:99:09:6d:4e:90:e4:c4:4e:a2:39:8e:60:48:
                    b8:8c:5d:59:ea:77:45:94:ea:04:e6:40:1c:66:92:
                    a4:06:fd:e5:c2:df:b4:9b:81:9c:a1:4e:0a:dc:a5:
                    e1:06:a7:e0:09:06:bf:b7:e4:03:ae:d5:af:b6:84:
                    0d:f4:4f:54:a7:b1:88:fb:de:2c:54:5d:9e:5a:9d:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1F:5C:EF:7A:D0:56:25:13:F6:21:F5:EE:97:40:4B:33:29:06:DA
            X509v3 Authority Key Identifier:
                keyid:39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:8e:dd:00:f4:83:2c:0d:05:69:33:e8:a2:0e:63:54:2c:
         5d:12:7b:7e:01:80:c4:c8:38:80:da:26:b5:91:f6:cf:a6:46:
         dc:6a:47:2e:2f:15:ce:e1:d7:84:34:c4:e0:fb:76:15:ae:ec:
         31:46:ac:3f:48:82:de:29:42:ca:01:45:08:ed:b8:f7:ee:a9:
         a2:5a:7f:ba:27:1e:ba:85:84:52:f3:f2:d4:26:50:8a:f2:d5:
         5c:a3:4b:da:80:6a:a0:fa:0b:d0:7c:d0:91:2e:f1:e0:81:f9:
         be:73:f5:42:04:8e:a7:5f:ec:f8:d9:e8:67:45:b8:d6:97:27:
         46:ea:fb:37:cb:fa:21:b6:52:96:45:80:26:da:c8:46:e3:aa:
         a5:9e:d4:90:de:8a:5b:e8:78:dc:ef:0b:bd:d7:ff:11:5f:a4:
         dc:a7:05:5a:a3:74:f8:95:bb:94:8c:ac:c5:b2:28:b5:0e:17:
         4d:97:b5:b4:0a:13:9f:20:7c:ac:63:59:a0:e7:fa:72:cc:ca:
         a3:fc:50:6f:b1:17:3a:b7:79:70:03:27:16:76:71:52:c6:c7:
         e6:72:e3:fa:bf:49:e6:d6:6c:09:05:fc:0d:4a:ad:24:a0:bd:
         73:4a:d9:e2:71:c9:7b:8a:e6:bc:94:e8:dc:a7:6f:b5:ab:82:
         eb:f5:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:49:41 2026 by rpki-client