Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/LUOSI/0/3130332e3137362e35302e302f32332d3234203d3e203138303436.roa
File:                     3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (raw, json)
Hash identifier:          nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=
Subject key identifier:   75:13:76:E6:0A:4B:EA:3D:B4:D9:43:DE:AE:3E:87:1A:EC:B0:F3:90
Certificate issuer:       /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial:       62C438BDEE981B18D08D524ABE6DD74110A342AB
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LUOSI/0/3130332e3137362e35302e302f32332d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:59:03 +0000
ROA not before:           Mon 11 May 2026 17:54:03 +0000
ROA not after:            Mon 10 May 2027 17:59:03 +0000
asID:                     18046
IP address blocks:        103.176.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
                          rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:c4:38:bd:ee:98:1b:18:d0:8d:52:4a:be:6d:d7:41:10:a3:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
        Validity
            Not Before: May 11 17:54:03 2026 GMT
            Not After : May 10 17:59:03 2027 GMT
        Subject: CN=751376E60A4BEA3DB4D943DEAE3E871AECB0F390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:76:c2:ff:87:8c:a8:dc:c3:a4:ee:bb:f8:
                    a0:e6:f1:b6:6c:71:2b:f5:e2:a9:8a:3a:e5:6c:50:
                    2c:c6:44:1f:03:77:d2:d9:60:30:a3:10:b4:a0:25:
                    95:ad:8f:09:20:0f:fc:67:c2:63:f2:19:dd:83:4f:
                    3e:eb:26:ef:79:1c:0a:e3:5c:fa:ff:b2:b1:8f:38:
                    d8:69:17:3e:54:a9:b6:d7:c3:b5:0b:7e:1d:fb:7b:
                    2d:37:83:43:2d:23:27:54:c2:e7:9b:43:71:22:70:
                    8c:f2:70:1e:33:49:f1:da:cb:27:bc:2d:f6:f6:e0:
                    87:92:e0:2a:6f:67:b5:4f:2c:75:36:e3:0b:19:93:
                    9f:07:7e:20:a2:70:ac:d8:f4:96:bc:21:9b:e5:e4:
                    23:7a:7a:f9:65:67:eb:cf:39:99:67:18:e1:a2:2c:
                    ae:5c:80:7a:26:9d:67:13:46:26:06:90:02:87:4e:
                    ab:a1:de:ec:b9:a9:c7:64:a4:93:e6:86:5d:78:ff:
                    3b:41:8a:d3:ca:5e:f7:89:bf:51:18:e7:ff:92:3a:
                    60:db:14:72:d9:be:2a:7e:6a:37:a1:e1:4e:3f:c7:
                    59:a3:da:fb:6c:9d:d0:02:77:17:0e:de:fe:cb:dc:
                    90:0c:31:64:de:1f:37:ce:49:7d:72:76:aa:3f:4b:
                    62:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:76:E6:0A:4B:EA:3D:B4:D9:43:DE:AE:3E:87:1A:EC:B0:F3:90
            X509v3 Authority Key Identifier:
                keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/3130332e3137362e35302e302f32332d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:87:49:11:d4:cb:02:ab:fb:c5:11:3b:64:b6:9c:8c:56:9f:
         6a:01:f2:48:d0:ef:b8:67:bc:35:d0:dd:6a:4a:ba:7a:0d:5a:
         5b:fa:e3:f9:20:3c:f1:21:ea:a2:9a:3b:61:4e:ab:4d:8b:69:
         41:c9:2b:40:a8:57:a0:19:98:e7:29:96:c8:4f:48:d1:70:37:
         1e:d8:ad:06:9b:12:dc:38:50:34:e7:ff:14:c9:6e:c3:e4:d1:
         08:05:bd:ba:6b:17:d1:bb:9e:f0:f5:f4:ed:bf:51:f5:37:a1:
         03:61:49:e2:67:d1:61:ff:48:7d:3c:cc:d1:cb:46:8c:bd:70:
         55:a0:c8:b1:33:00:7a:d6:b7:cf:8e:54:14:a5:3d:ca:1a:4f:
         4f:92:f1:92:d5:8b:06:ae:ba:67:bc:ca:9b:d2:91:7c:6f:b7:
         f6:63:8c:52:5f:4b:c8:2f:3d:42:25:07:ce:6f:4b:86:35:f6:
         0a:4d:28:7e:de:97:f9:1d:75:b0:94:6c:c2:9d:ea:b7:61:3c:
         2c:da:af:20:be:6b:01:35:91:89:29:c7:2f:ef:8f:17:2d:43:
         82:ab:91:08:a9:9a:17:05:1e:0b:e3:3a:ad:aa:6a:31:41:9d:
         37:35:c5:97:ce:6e:6f:83:4b:3f:00:3b:3b:ca:1d:db:7c:3a:
         19:cf:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:48:34 2026 by rpki-client