Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFENG/0/3130332e3138382e3132302e302f32332d3234203d3e203231383539.roa
File:                     3130332e3138382e3132302e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          TV/kkKGDNzLBj39V9Lo72jKALKU5eFiuvbJ+dNiiqVM=
Subject key identifier:   05:BF:5A:4E:D8:64:78:CA:D0:F7:81:C3:BD:AE:28:9F:B0:17:9E:53
Certificate issuer:       /CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
Certificate serial:       7D04FB42D8914F1CE89DD730A513DB961432243E
Authority key identifier: 4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENG/0/3130332e3138382e3132302e302f32332d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:57:56 +0000
ROA not before:           Mon 11 May 2026 17:52:56 +0000
ROA not after:            Mon 10 May 2027 17:57:56 +0000
asID:                     21859
IP address blocks:        103.188.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:04:fb:42:d8:91:4f:1c:e8:9d:d7:30:a5:13:db:96:14:32:24:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
        Validity
            Not Before: May 11 17:52:56 2026 GMT
            Not After : May 10 17:57:56 2027 GMT
        Subject: CN=05BF5A4ED86478CAD0F781C3BDAE289FB0179E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:10:91:d8:84:38:f3:54:bd:a9:2f:7f:20:
                    cc:97:0d:80:84:74:2e:c3:d5:32:7a:1f:a8:11:35:
                    76:bc:a5:e9:1f:00:12:8e:83:46:23:cc:7c:66:03:
                    69:72:ad:5a:5d:87:34:19:98:cf:9e:e0:d2:93:f8:
                    f6:f4:62:98:3b:77:0c:b5:d5:60:8c:ac:ad:54:af:
                    5e:0f:6d:83:d1:11:7f:54:2e:b5:36:33:38:5b:a1:
                    48:38:e2:5a:4a:b1:ad:24:7a:17:35:e6:f8:1e:50:
                    be:71:0e:79:5f:8a:4b:5a:37:df:a3:94:a6:34:cd:
                    f4:64:5e:b0:96:ac:5b:5d:7d:53:24:a3:63:5e:ee:
                    48:8b:f9:d1:36:23:b8:f4:a3:56:ad:a9:e3:14:51:
                    97:ab:5b:23:c6:79:8a:59:40:23:87:7d:1f:6e:3b:
                    4b:af:5b:97:b4:92:b9:ad:c6:d8:7b:9c:86:ce:ba:
                    62:3b:1f:2a:b1:0f:c1:0a:b0:43:3b:00:50:d2:2c:
                    ee:05:cb:d3:73:22:6b:1e:4e:c7:0d:c5:42:c7:a8:
                    46:b4:7e:a1:7b:45:14:a0:57:88:b5:7a:da:d3:82:
                    fb:f9:53:10:6c:90:55:ce:17:4e:6a:5b:a0:92:c5:
                    98:99:3e:a9:1e:e9:f4:4b:79:3c:8c:47:9c:83:d6:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BF:5A:4E:D8:64:78:CA:D0:F7:81:C3:BD:AE:28:9F:B0:17:9E:53
            X509v3 Authority Key Identifier:
                keyid:4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/3130332e3138382e3132302e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:87:13:5b:72:ad:de:8e:34:e8:1a:87:26:ff:fd:f2:7f:
         24:2a:75:ea:c0:b5:b3:2d:69:46:73:4c:91:0a:ea:e6:c3:a3:
         fe:8d:81:e3:2e:35:e6:ed:42:f5:2b:ba:c8:bd:86:0c:9b:5e:
         7e:66:c0:4c:3d:b9:ff:a1:df:58:e3:de:ba:88:cc:df:02:74:
         79:d7:21:65:e7:14:70:a0:90:ee:ed:78:e6:ee:96:bf:e6:0a:
         b6:cd:b7:36:a1:0b:3a:37:7c:c5:1b:72:61:91:d1:75:f2:1b:
         39:07:2f:7f:18:b7:8a:04:0f:20:49:5d:8d:a0:96:93:48:ab:
         82:ad:79:85:73:c5:49:16:7e:16:53:43:4f:08:6d:08:94:d1:
         52:9c:1e:82:f4:d2:e0:fe:5c:04:e4:cf:d4:5d:a7:51:bf:1d:
         5e:9e:23:3e:db:ea:01:70:01:32:ee:f1:16:e3:15:5d:8e:5d:
         60:27:52:4a:29:d4:89:de:e3:50:09:51:87:f6:6a:a0:11:a8:
         1b:15:12:f7:f9:c0:a1:d9:0e:46:fc:a0:fd:c6:76:6e:dd:bf:
         46:da:4e:f8:c4:b8:b1:63:16:e3:ef:d7:bf:c2:45:59:f0:96:
         58:60:a6:6a:0c:62:7d:ff:13:7b:f6:ff:dd:fc:bd:05:94:30:
         97:67:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:07 2026 by rpki-client