Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa
File:                     3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa (raw, json)
Hash identifier:          JgeKv43zj2I8mn+V1L9xsA2666IYScxWd+2UEJ5XPhc=
Subject key identifier:   73:C9:A7:0B:8E:F9:A4:5D:7A:02:3B:E2:7D:18:8A:48:D6:7C:4A:9E
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       0785998026F625070139BF3F60EBB901029CDCBA
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa
Signing time:             Mon 11 May 2026 17:32:38 +0000
ROA not before:           Mon 11 May 2026 17:27:38 +0000
ROA not after:            Mon 10 May 2027 17:32:38 +0000
asID:                     131633
IP address blocks:        103.135.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:85:99:80:26:f6:25:07:01:39:bf:3f:60:eb:b9:01:02:9c:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:27:38 2026 GMT
            Not After : May 10 17:32:38 2027 GMT
        Subject: CN=73C9A70B8EF9A45D7A023BE27D188A48D67C4A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:38:47:76:78:17:68:fb:5d:b7:ed:7f:bf:
                    26:d7:72:5e:da:43:77:75:3c:e9:96:44:0d:ee:21:
                    80:43:25:f4:d6:38:ef:59:ee:e1:ab:01:a1:93:dd:
                    83:30:0d:37:cd:02:38:c2:4e:3d:10:4d:e0:d3:b3:
                    ea:37:56:db:53:29:ac:1e:b8:fd:17:35:ff:21:1f:
                    38:24:4a:ee:c7:c9:b6:34:a9:a9:4d:4c:8a:6a:0f:
                    9a:32:4d:19:23:a8:72:21:3c:d8:9a:9f:57:01:c6:
                    f4:90:05:63:0e:59:12:8a:44:77:32:2f:31:d5:f4:
                    68:a1:f3:8c:d0:5f:d1:39:cf:9e:d8:4e:96:09:8b:
                    c1:2b:11:25:15:e4:e9:74:cd:c5:de:f5:9b:7c:15:
                    52:6f:5e:59:ae:9d:75:8b:75:0d:9e:0d:a1:64:db:
                    f7:51:5b:35:80:0e:91:97:ce:2f:6e:b7:a6:a6:a2:
                    d2:a0:c9:ba:21:74:dc:3a:f7:61:13:ee:60:c2:4a:
                    3c:40:81:aa:fb:85:3c:79:dd:ac:ee:80:92:c8:1d:
                    9f:f7:9f:5f:1f:b3:b3:b9:57:6e:ce:6f:44:97:cd:
                    92:61:0c:ed:b2:d4:ac:48:9b:fb:7a:d7:8d:4d:c0:
                    79:49:ca:8f:c0:b3:df:14:84:a2:3f:bc:ba:56:b1:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C9:A7:0B:8E:F9:A4:5D:7A:02:3B:E2:7D:18:8A:48:D6:7C:4A:9E
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32302e302f32322d3232203d3e20313331363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:e4:16:9e:50:91:1f:c3:02:0f:65:af:e6:da:90:89:09:
         6e:2f:05:bd:9c:a8:ba:0b:d0:d2:98:ba:ac:b3:35:74:c4:c2:
         b5:5c:9f:14:0f:0d:b5:1f:a7:3c:73:0d:a3:45:a7:6c:77:74:
         f2:05:f0:8b:8a:60:e4:4b:4f:d8:3f:57:7f:e8:48:07:92:d3:
         45:17:e1:e9:c5:80:5f:ff:64:c8:6f:29:f7:5f:c7:79:ba:d8:
         90:1f:a7:53:52:54:4e:44:a3:82:3b:ad:32:6f:a0:5d:45:35:
         f9:b2:b2:81:45:f2:42:ef:d7:56:9b:3b:a4:2a:3c:e3:91:7a:
         28:69:55:e5:43:07:bd:7e:15:a0:a8:92:70:d2:ee:4a:a0:4a:
         28:14:7f:d4:25:18:e8:91:37:75:95:64:ba:94:7f:5d:1b:57:
         86:b0:16:9a:d3:df:f7:1d:48:9b:78:53:63:a1:84:f2:0c:b7:
         b4:55:cc:65:f5:14:7a:19:38:58:e7:d5:07:d0:1c:78:51:6e:
         99:ab:37:49:fe:4e:ca:54:11:5c:30:0d:59:48:57:20:51:4a:
         d6:3b:7c:74:c9:7d:3e:6d:80:70:3a:e1:56:62:11:42:8f:5e:
         69:e0:cd:be:d9:d6:44:d1:95:d5:b4:36:5c:7f:d1:49:96:66:
         b4:90:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:08 2026 by rpki-client