Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32312e302f32342d3234203d3e203633383937.roa
File:                     3130332e3133352e32312e302f32342d3234203d3e203633383937.roa (raw, json)
Hash identifier:          YwhItagtaRjuaO7DPIKNJnjb7/MjB9VTKfuoj4e9bQc=
Subject key identifier:   21:31:58:B9:F8:EB:4D:79:F3:A9:9A:DC:85:BD:1A:94:70:50:D2:AF
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       1E9D330CC0A0A8CE53F1EF4B56F9BE4C67849FD2
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32312e302f32342d3234203d3e203633383937.roa
Signing time:             Mon 11 May 2026 17:40:17 +0000
ROA not before:           Mon 11 May 2026 17:35:17 +0000
ROA not after:            Mon 10 May 2027 17:40:17 +0000
asID:                     63897
IP address blocks:        103.135.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:33:0c:c0:a0:a8:ce:53:f1:ef:4b:56:f9:be:4c:67:84:9f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:35:17 2026 GMT
            Not After : May 10 17:40:17 2027 GMT
        Subject: CN=213158B9F8EB4D79F3A99ADC85BD1A947050D2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:86:da:e5:f7:b9:ac:22:72:b6:82:62:4b:
                    e3:32:bc:74:8e:7d:82:38:86:9c:78:f0:4d:87:61:
                    be:27:f4:22:58:fc:eb:6f:f4:f1:ee:af:43:8e:d5:
                    20:5d:4b:4d:b6:fb:b3:46:ec:db:89:1a:58:bb:a9:
                    9c:c2:c7:a5:11:d1:05:57:73:7f:43:9c:e8:01:f4:
                    b9:72:27:d8:df:ee:a6:b9:71:f5:30:ee:5b:a5:e4:
                    1f:eb:20:23:e6:e7:55:dd:36:a2:2c:f0:83:33:9a:
                    2f:f9:ac:36:21:bf:70:2b:65:8a:5b:8f:c2:a7:66:
                    34:3b:e1:00:67:1e:09:3b:d5:13:28:1d:79:94:fc:
                    92:d4:b1:14:c1:4a:8a:a9:52:b3:67:b0:6a:7c:20:
                    f0:df:73:60:aa:5d:71:bb:a4:33:3c:10:3e:01:9d:
                    49:7a:0c:5c:76:8d:7b:f5:41:23:fb:0c:8b:c1:bd:
                    d5:3e:6c:be:d5:d5:3f:4d:48:d4:cf:da:5b:83:0f:
                    68:a2:2b:63:ba:34:7b:c5:84:a4:92:f7:2e:dc:b7:
                    25:29:9a:8f:f1:89:9a:15:3c:c4:24:ab:ef:c5:19:
                    49:16:ee:26:13:85:8d:e1:bb:97:5d:00:1d:ad:c4:
                    3f:f4:4b:e3:4f:97:c9:44:f1:25:0b:1c:a0:bd:16:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:31:58:B9:F8:EB:4D:79:F3:A9:9A:DC:85:BD:1A:94:70:50:D2:AF
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32312e302f32342d3234203d3e203633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:2b:a2:06:04:4b:47:10:e1:a0:a5:f8:54:4c:ec:f8:a9:a3:
         4c:30:0d:12:b7:21:a1:36:a7:6b:bc:f8:af:62:93:4d:76:12:
         f5:e1:a3:98:f6:1b:6d:24:31:5e:e5:cd:40:77:62:f4:09:ce:
         95:6a:99:22:d4:fa:77:8a:e3:45:42:f0:72:a1:c6:8c:07:a8:
         ec:59:68:32:ce:c9:49:6c:eb:cc:33:42:19:53:7f:b5:b3:c6:
         d9:4b:ef:77:83:6a:f0:60:56:a0:2e:76:bc:75:1d:d5:44:16:
         3e:39:cd:0d:60:6a:23:ea:3d:be:d5:30:97:fb:1e:50:89:7b:
         b0:bc:cf:47:b8:70:d7:87:99:f5:af:83:e5:9c:b4:42:7d:07:
         47:26:0c:dd:db:48:e3:b8:e5:24:71:ff:16:6d:26:2a:ae:1a:
         5a:9b:30:1e:54:7c:f5:78:f8:e3:03:33:c1:a4:47:ca:5f:8e:
         5c:01:76:95:b4:e0:de:49:43:94:c9:60:1b:f5:4d:e4:82:0c:
         85:d2:af:ae:00:6f:79:33:0b:ca:f5:d1:49:63:74:ca:12:73:
         79:a5:a7:35:74:58:25:37:17:89:eb:e6:12:e1:0b:dd:66:c4:
         e2:de:99:5f:23:3c:e6:b4:14:2c:7f:2f:67:6a:f7:4f:0d:09:
         9f:f0:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:07 2026 by rpki-client