Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFENG/0/3130332e3138382e3132302e302f32332d3234203d3e203234313632.roa
File:                     3130332e3138382e3132302e302f32332d3234203d3e203234313632.roa (raw, json)
Hash identifier:          LmwwUpuv8Sdk8tENdd/b/+ib5Yq3yrtpL7doLISV6t0=
Subject key identifier:   3B:28:FD:03:B0:3B:5B:13:05:06:E4:27:6A:69:26:9E:83:B7:4A:CD
Certificate issuer:       /CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
Certificate serial:       2968569DA83FC131AFE3A3820C95F2D335667597
Authority key identifier: 4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFENG/0/3130332e3138382e3132302e302f32332d3234203d3e203234313632.roa
Signing time:             Mon 11 May 2026 17:57:15 +0000
ROA not before:           Mon 11 May 2026 17:52:15 +0000
ROA not after:            Mon 10 May 2027 17:57:15 +0000
asID:                     24162
IP address blocks:        103.188.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:68:56:9d:a8:3f:c1:31:af:e3:a3:82:0c:95:f2:d3:35:66:75:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A
        Validity
            Not Before: May 11 17:52:15 2026 GMT
            Not After : May 10 17:57:15 2027 GMT
        Subject: CN=3B28FD03B03B5B130506E4276A69269E83B74ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:4a:e5:b4:3e:bd:06:07:70:3e:6c:3d:ad:
                    b1:45:78:a7:77:55:87:4d:20:37:f8:b5:f4:32:16:
                    99:73:36:53:0f:86:0f:9a:2a:6f:e7:e8:71:1e:8e:
                    94:77:88:75:db:da:08:48:01:c5:1c:19:9d:02:1d:
                    ba:df:4d:e1:cb:30:10:36:09:be:a9:57:1c:7e:d2:
                    6c:96:d7:8c:74:02:0d:ec:64:0d:a0:0d:22:18:00:
                    d0:21:b2:a9:31:d4:41:f3:f7:20:67:11:d7:5f:2e:
                    b5:2a:40:60:ec:93:ec:3f:4a:f1:33:d3:e9:e9:fd:
                    e9:a6:43:12:dd:ab:0b:39:15:61:ee:19:9e:88:e4:
                    02:6d:e4:c3:13:5b:fa:41:2f:22:0b:36:89:05:db:
                    b5:ab:04:cd:68:17:ea:83:b4:26:62:3f:0e:5d:62:
                    e3:aa:f1:e6:62:9e:d5:d0:48:cd:c6:f5:c7:6f:19:
                    91:36:b6:0f:49:50:cf:0d:ae:cb:d6:ad:10:ec:ac:
                    6e:ff:64:47:3e:3c:1b:73:ed:e0:eb:4b:d9:32:62:
                    be:da:c7:b3:d3:6f:43:61:a2:ec:b0:90:d5:d4:3b:
                    50:f8:ab:4c:97:85:d2:d6:b2:87:f2:08:f6:22:36:
                    02:49:c2:a1:7b:a6:96:82:ad:9d:2a:6f:6d:63:49:
                    a2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:FD:03:B0:3B:5B:13:05:06:E4:27:6A:69:26:9E:83:B7:4A:CD
            X509v3 Authority Key Identifier:
                keyid:4E:0F:5E:DE:24:04:39:F8:FC:2D:99:F9:67:DF:DF:AE:18:B6:78:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E0F5EDE240439F8FC2D99F967DFDFAE18B6783A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFENG/0/3130332e3138382e3132302e302f32332d3234203d3e203234313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:da:b9:79:ac:f0:1b:c6:8b:29:52:eb:a1:b5:71:89:4c:
         ea:11:24:7b:b2:6a:45:f4:0f:67:5e:61:a3:aa:f2:48:4e:7e:
         a8:a5:af:73:7d:42:4e:bb:98:18:61:74:ea:35:40:b0:f8:94:
         05:9a:5e:69:1b:3d:7e:fa:65:9f:eb:56:8e:d9:b0:d6:7d:3a:
         f6:a2:dd:cc:ea:15:21:59:a3:86:3e:a7:b7:a3:34:11:69:cf:
         b9:63:13:d6:af:0e:f7:09:41:bc:8a:31:fe:b9:c7:4d:95:05:
         57:cf:c1:3c:d6:3f:0d:3d:30:52:3c:92:a0:c6:63:7f:8b:bf:
         7e:15:c4:48:e2:72:ef:24:05:db:aa:35:7a:9d:20:a8:19:98:
         de:d9:4a:72:70:e4:24:e3:bd:de:f1:97:29:46:49:95:62:6b:
         48:60:fe:c0:d8:a0:36:0f:de:83:3b:dc:46:80:0d:c7:0c:92:
         ea:e4:32:3d:1b:cb:d9:dd:dd:46:ca:36:87:64:46:e4:8c:5d:
         ee:5c:83:97:0b:22:66:5f:e0:34:bb:61:2e:d7:ef:25:f0:66:
         fb:a1:ed:d7:4e:cc:1e:5f:d2:ef:09:c3:37:39:b4:11:60:4e:
         e1:f2:f7:04:7c:53:08:cd:8f:72:81:a9:89:54:66:b2:ba:c0:
         0a:e3:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:12 2026 by rpki-client