Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3233203d3e2039333034.roa
File:                     3130332e3133352e32322e302f32332d3233203d3e2039333034.roa (raw, json)
Hash identifier:          w+9yE9SmJnaREr5tKGvYWSBKPbCpy/4FytVd0vk/6p4=
Subject key identifier:   FC:63:70:4A:D3:23:BF:6E:4D:19:6D:18:D9:B2:5C:00:F5:AE:A8:ED
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       225F9DE368C56746A3ADB03619D4D033B52AAC0E
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3233203d3e2039333034.roa
Signing time:             Mon 11 May 2026 17:39:27 +0000
ROA not before:           Mon 11 May 2026 17:34:27 +0000
ROA not after:            Mon 10 May 2027 17:39:27 +0000
asID:                     9304
IP address blocks:        103.135.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5f:9d:e3:68:c5:67:46:a3:ad:b0:36:19:d4:d0:33:b5:2a:ac:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:34:27 2026 GMT
            Not After : May 10 17:39:27 2027 GMT
        Subject: CN=FC63704AD323BF6E4D196D18D9B25C00F5AEA8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:87:a6:b0:46:65:ad:d5:66:01:90:e2:b5:
                    a1:47:ca:21:08:1f:05:9d:df:8a:78:f7:99:f5:1c:
                    2d:06:a5:dc:87:87:6f:06:2d:5e:43:d7:0c:9c:fa:
                    c4:9a:c4:bf:9b:5a:e9:af:a3:05:3c:64:e1:8d:63:
                    2c:72:76:b2:1b:a3:83:f8:c3:5b:02:18:f2:d7:25:
                    89:73:6f:2d:ed:f6:34:ae:56:71:79:36:c2:fe:40:
                    46:55:ad:6c:9c:37:be:c4:d6:af:df:94:1b:34:f4:
                    bf:e2:93:fe:e5:e1:82:4d:ae:21:49:35:42:5e:f7:
                    7b:d0:5a:40:ec:64:31:91:eb:b2:fa:71:5e:fe:00:
                    62:71:c4:6d:22:eb:51:53:7c:af:25:cd:21:33:76:
                    c0:ef:27:d2:37:45:7a:9f:53:3e:7b:0f:56:2c:c4:
                    19:86:05:8c:23:8f:07:1d:6f:f0:4f:7c:02:ed:7b:
                    b7:6d:de:2e:33:3a:b3:8b:eb:f7:b4:44:72:d2:1e:
                    14:57:04:96:21:6c:95:4d:ed:5b:0f:7e:01:a8:70:
                    04:91:96:60:d9:8c:77:5b:8d:85:d7:ee:1e:31:90:
                    99:06:d0:65:85:b5:2e:e1:e8:55:c8:94:75:48:9b:
                    e9:e4:1a:b8:e2:09:92:91:10:4c:bd:27:96:45:41:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:63:70:4A:D3:23:BF:6E:4D:19:6D:18:D9:B2:5C:00:F5:AE:A8:ED
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3233203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:39:c2:1b:6b:16:df:c4:9d:f3:d1:46:78:0f:09:36:52:54:
         db:4a:56:e8:8a:0e:90:1d:6e:31:c7:9d:9b:ea:7c:97:a2:b0:
         e3:50:73:fb:f7:2e:9b:eb:77:61:f9:2e:bb:ae:03:73:a1:2a:
         7f:69:a1:50:64:0b:c3:e6:49:cd:6e:c9:74:23:6e:26:c7:e8:
         41:a2:a5:bb:e0:06:0e:5a:62:b6:c2:12:7c:70:a5:e2:a9:38:
         fe:1e:92:ef:9c:bb:3d:08:e1:d2:74:1e:23:7c:1e:91:27:eb:
         df:82:e7:eb:f1:25:1a:11:22:87:19:58:f5:8b:35:fd:ef:b3:
         a0:1f:4a:67:46:3b:f1:c0:00:8e:5a:bc:4e:a5:cd:06:93:59:
         7c:74:cf:62:59:2e:8f:0a:50:c9:bf:3f:5c:7f:12:9e:8d:e2:
         18:ed:35:01:65:3c:3f:50:d1:a2:62:6f:84:1f:6c:bc:bc:2a:
         bf:32:20:01:7d:ef:1c:22:a1:af:59:af:6f:37:e6:4c:bf:93:
         d3:49:6e:0f:25:fb:02:0e:bb:f6:59:44:79:40:6f:30:8c:25:
         30:b5:2d:21:bc:e8:5e:e0:14:a5:a4:80:e2:f7:40:64:82:72:
         12:5c:a6:6a:81:0d:ba:2b:4f:19:f0:85:61:0a:74:e9:da:3f:
         5e:56:ea:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:08:52 2026 by rpki-client