Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAIFOOD/0/3130332e3139302e3136382e302f32332d3234203d3e2037343833.roa
File:                     3130332e3139302e3136382e302f32332d3234203d3e2037343833.roa (raw, json)
Hash identifier:          HUxXTX4AEZCdEmoKnBU0/T6Q3Fkfl/P32GPMMl4DSA0=
Subject key identifier:   8C:3A:5F:AC:1F:12:C6:EA:20:14:3E:FB:DE:26:31:CF:B8:8A:07:07
Certificate issuer:       /CN=146BBB242D194BB38E4863F248016CC51755565D
Certificate serial:       6BB868CC26B31A17C556994B135846792A18721B
Authority key identifier: 14:6B:BB:24:2D:19:4B:B3:8E:48:63:F2:48:01:6C:C5:17:55:56:5D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/3130332e3139302e3136382e302f32332d3234203d3e2037343833.roa
Signing time:             Mon 11 May 2026 17:19:31 +0000
ROA not before:           Mon 11 May 2026 17:14:31 +0000
ROA not after:            Mon 10 May 2027 17:19:31 +0000
asID:                     7483
IP address blocks:        103.190.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.crl
                          rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b8:68:cc:26:b3:1a:17:c5:56:99:4b:13:58:46:79:2a:18:72:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146BBB242D194BB38E4863F248016CC51755565D
        Validity
            Not Before: May 11 17:14:31 2026 GMT
            Not After : May 10 17:19:31 2027 GMT
        Subject: CN=8C3A5FAC1F12C6EA20143EFBDE2631CFB88A0707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:8e:1e:29:5a:7c:52:19:cc:2f:4f:5a:5a:
                    6a:6c:5c:14:e8:fd:33:e9:1d:69:5d:ad:c3:8d:aa:
                    61:a7:91:48:f9:36:42:23:61:57:1a:a3:d2:28:6c:
                    a8:bb:36:f3:9d:9e:06:94:33:66:cd:65:7a:c9:04:
                    93:83:d0:26:d9:95:3c:20:7c:8d:12:a4:44:6a:b5:
                    f1:ac:8e:dc:c1:93:0a:01:35:c8:f3:8d:cb:fa:1d:
                    17:a4:7f:c0:d4:f8:66:a0:c8:69:6b:91:59:48:a5:
                    ec:26:4c:9f:3f:97:18:61:59:2f:bd:4c:49:ab:57:
                    af:57:76:dd:c7:3a:0c:4d:85:6f:a4:86:b7:8f:d5:
                    87:02:20:2c:b1:a8:51:7d:5a:fd:e0:63:b9:07:51:
                    aa:c5:63:81:b6:62:f3:60:58:56:ac:f7:de:7e:d7:
                    c1:71:6b:33:61:41:e9:b4:4c:ce:08:85:b1:d6:1d:
                    34:69:b0:23:07:51:00:ca:dd:0a:c4:9c:f0:3a:32:
                    7b:fa:46:e8:29:e5:6b:3a:b5:9e:93:19:d8:a5:f3:
                    85:1c:f2:2d:bd:96:75:69:56:3a:da:09:38:2d:42:
                    b5:c0:a5:b8:86:5c:a5:ed:0a:aa:81:ba:8f:4e:4f:
                    65:0b:47:13:d1:b5:0c:c1:43:c6:3a:2e:7b:1f:49:
                    1a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3A:5F:AC:1F:12:C6:EA:20:14:3E:FB:DE:26:31:CF:B8:8A:07:07
            X509v3 Authority Key Identifier:
                keyid:14:6B:BB:24:2D:19:4B:B3:8E:48:63:F2:48:01:6C:C5:17:55:56:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/146BBB242D194BB38E4863F248016CC51755565D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/146BBB242D194BB38E4863F248016CC51755565D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAIFOOD/0/3130332e3139302e3136382e302f32332d3234203d3e2037343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:e6:60:be:95:0f:e9:9e:e1:e5:73:f2:18:d6:8b:63:c0:b7:
         51:d7:ae:40:ae:16:ab:2f:d4:d5:5c:a2:bb:c9:22:a3:33:a3:
         cc:f9:1f:be:43:d0:a6:24:1f:d2:72:8e:06:d3:51:e3:2f:51:
         53:ad:61:2e:53:ba:fc:46:ee:f7:0d:05:43:a5:59:60:4d:6e:
         c6:36:c5:0f:50:93:de:73:1f:ab:48:03:78:ae:24:64:3a:ae:
         58:53:cc:1c:a2:1f:2c:b7:8b:3a:64:d1:29:c5:b7:5b:e0:67:
         7d:f9:b9:3f:d4:9c:d6:ca:41:7d:39:8a:45:55:3a:d5:06:bf:
         35:d9:b7:45:19:1a:26:21:de:d0:0c:88:56:44:7f:4d:56:5c:
         fd:91:e7:1c:6c:8f:ab:12:28:97:72:9e:1a:19:cc:d5:c8:58:
         d1:50:70:a4:13:c5:2d:06:0e:bd:5a:fe:85:e7:25:cb:d8:3f:
         2e:75:3d:e3:43:17:20:8f:07:c1:66:92:14:57:f4:e6:5d:75:
         3a:ef:05:b5:50:c7:a1:71:2d:9d:ec:85:1d:98:c7:dc:74:35:
         01:66:17:a0:9e:2d:e5:4a:16:bd:6a:0a:39:42:42:1c:17:da:
         44:51:dc:48:15:bb:d7:bd:ca:ef:4d:62:cf:b0:74:d3:53:c5:
         68:a8:0c:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:36 2026 by rpki-client