Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3233203d3e2035303635.roa
File:                     3130332e3133352e32322e302f32332d3233203d3e2035303635.roa (raw, json)
Hash identifier:          iWARJBn4vMQOBwB3Q05z+epz9OlkdIYS5W6NmlmWssc=
Subject key identifier:   29:6F:6D:52:B9:09:E7:B4:F5:8D:C7:6E:1B:E8:BA:4B:24:E6:73:BF
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       46B868C0ECC15A8A3335DDD3CCC6CE2D150DD6D1
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3233203d3e2035303635.roa
Signing time:             Mon 11 May 2026 17:39:35 +0000
ROA not before:           Mon 11 May 2026 17:34:35 +0000
ROA not after:            Mon 10 May 2027 17:39:35 +0000
asID:                     5065
IP address blocks:        103.135.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:68:c0:ec:c1:5a:8a:33:35:dd:d3:cc:c6:ce:2d:15:0d:d6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:34:35 2026 GMT
            Not After : May 10 17:39:35 2027 GMT
        Subject: CN=296F6D52B909E7B4F58DC76E1BE8BA4B24E673BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:ac:84:0b:c5:fe:1a:36:3a:35:39:a7:75:
                    73:bc:72:85:4c:ed:6a:ef:41:3b:a8:01:1d:ff:e4:
                    76:61:6a:59:4d:b5:77:a6:59:7d:73:10:46:17:51:
                    c5:70:d6:86:b2:2a:db:98:a6:1a:9f:61:45:e9:fb:
                    ab:44:24:d5:bc:f9:06:e6:ac:cb:76:3f:ad:44:11:
                    42:6a:fe:d4:ee:16:e5:99:61:b3:5c:4e:8d:f0:13:
                    97:ec:5f:3d:3d:11:69:11:46:86:72:9b:3b:f0:2b:
                    72:75:22:fc:85:5f:ab:26:7a:5c:fb:1e:a1:0b:b7:
                    ba:f2:30:65:50:b3:43:b4:c3:cf:f4:d5:1a:84:19:
                    0f:5c:5e:d0:da:ab:08:ca:11:d5:5a:da:eb:86:24:
                    8b:26:39:4c:7b:fe:5a:c9:53:78:0f:79:c1:ad:46:
                    66:e0:d7:b5:28:33:30:d3:a3:fd:f7:76:d7:7c:95:
                    1c:89:af:22:a4:3a:d3:de:29:6e:73:37:c8:64:86:
                    c8:92:01:58:f9:21:da:27:a9:c9:7b:32:d4:4a:26:
                    82:c1:75:89:60:03:b1:1d:04:11:3a:67:2f:4d:b8:
                    5e:02:4d:f1:6c:7d:76:3c:33:84:53:80:5c:82:e8:
                    c5:1d:6b:c8:f5:52:01:bf:59:3d:8a:94:7d:1d:e2:
                    9f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6F:6D:52:B9:09:E7:B4:F5:8D:C7:6E:1B:E8:BA:4B:24:E6:73:BF
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3233203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:4a:09:ec:6b:6c:c0:50:f6:d3:4a:83:ca:75:f2:55:eb:de:
         5a:97:dc:39:77:45:e6:8b:37:88:37:b1:dd:ed:79:2c:b2:ca:
         e8:7f:17:f0:dd:48:ac:00:fb:c5:55:c7:ba:8e:69:0c:ab:18:
         6d:c7:22:7b:1e:97:d5:d2:69:a8:6b:58:1d:d0:6e:0b:8d:ac:
         0b:aa:eb:d8:7c:bc:9a:31:6b:fa:4a:2a:68:e6:cb:a7:cb:8a:
         7e:95:26:70:a0:6a:19:2b:6e:cc:97:a7:ba:e1:70:45:f6:3e:
         a0:b0:9f:81:eb:1d:44:03:7d:a8:e9:12:3b:d9:f8:9e:25:fb:
         f2:a6:67:de:20:79:88:41:d9:e4:70:8f:95:7a:dc:b1:8f:72:
         13:a1:3f:41:72:62:04:14:d7:bc:3e:19:1f:69:71:30:2d:ef:
         03:ec:ee:3a:2b:72:ac:e7:44:c5:93:88:fe:64:e2:45:66:7d:
         dd:cc:25:52:9c:a8:bd:b5:58:86:7a:bd:b5:58:9d:59:fe:32:
         cb:23:21:92:95:9c:db:3b:55:30:cf:0d:73:26:d5:1f:38:26:
         e2:ca:40:0d:eb:44:7d:2a:1b:f0:c6:c3:00:58:aa:17:02:f2:
         67:59:55:68:91:5f:3e:4a:be:2e:78:1b:c2:8d:36:61:46:64:
         62:46:62:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:48:42 2026 by rpki-client