Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3234203d3e203130313033.roa
File:                     3130332e3133352e32322e302f32332d3234203d3e203130313033.roa (raw, json)
Hash identifier:          etSY0iPHg+QFBuxkSoWWrdTsB958SF+SYPdXB4Jcolc=
Subject key identifier:   7D:75:30:61:F6:85:24:BA:2B:C0:48:7A:86:BB:B9:24:8A:C2:C1:EB
Certificate issuer:       /CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
Certificate serial:       57A1B2FF0B976091EABE24F7AE9E1B3160C6F7C0
Authority key identifier: FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3234203d3e203130313033.roa
Signing time:             Mon 11 May 2026 17:37:39 +0000
ROA not before:           Mon 11 May 2026 17:32:39 +0000
ROA not after:            Mon 10 May 2027 17:37:39 +0000
asID:                     10103
IP address blocks:        103.135.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl
                          rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a1:b2:ff:0b:97:60:91:ea:be:24:f7:ae:9e:1b:31:60:c6:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6
        Validity
            Not Before: May 11 17:32:39 2026 GMT
            Not After : May 10 17:37:39 2027 GMT
        Subject: CN=7D753061F68524BA2BC0487A86BBB9248AC2C1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0c:70:98:31:de:10:eb:4b:71:1a:08:2b:93:
                    b5:9a:99:8e:07:c1:69:83:d0:04:eb:34:e1:86:81:
                    33:41:bd:6c:84:f8:7e:37:b3:15:d3:cc:d3:89:da:
                    71:e2:0e:72:d3:6d:83:5e:78:dd:ac:51:b4:cd:48:
                    fb:89:a3:9c:57:f2:c1:6e:4f:fa:7b:23:b5:13:a2:
                    45:75:3a:55:4e:77:65:85:63:5e:df:a8:54:fa:be:
                    d7:ae:5d:f2:4c:84:86:0d:21:aa:39:49:4b:d1:52:
                    26:69:14:75:2d:7b:e9:27:f5:9e:be:d2:26:e7:9f:
                    50:50:3d:05:19:b6:60:e6:eb:be:bb:98:9e:58:e7:
                    02:cb:9d:85:7e:72:ff:50:f5:86:93:21:63:d1:29:
                    ec:ea:91:6e:f9:11:65:a3:cc:11:6b:8f:15:85:35:
                    d4:ee:45:12:5b:40:81:26:2c:74:32:f3:73:26:83:
                    8f:2c:e8:e8:ca:e4:c5:a9:11:3e:ca:7e:54:8e:d6:
                    7a:a3:f5:db:c9:53:d3:7b:cc:48:b3:98:f4:67:dc:
                    99:29:9b:59:a5:3a:82:59:63:c1:0b:26:76:3a:d3:
                    20:0d:14:3f:d3:3d:cb:e0:0f:90:4d:f4:97:84:bc:
                    cc:e6:78:56:b8:ef:4e:76:10:aa:a7:07:c4:eb:a3:
                    f2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:75:30:61:F6:85:24:BA:2B:C0:48:7A:86:BB:B9:24:8A:C2:C1:EB
            X509v3 Authority Key Identifier:
                keyid:FD:6E:1D:F6:0D:EF:D4:38:47:09:30:6D:E6:F6:2F:96:FE:1C:5B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FD6E1DF60DEFD4384709306DE6F62F96FE1C5BA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGJINGEN/0/3130332e3133352e32322e302f32332d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:8e:e8:d7:62:c3:e5:c4:86:30:70:03:76:ad:27:46:73:
         10:33:0d:ea:f5:d0:76:85:dc:b6:e6:a2:cd:85:2b:0c:9a:a0:
         09:46:b0:08:e4:56:ce:0b:b1:26:ab:15:b5:bc:8d:c9:0c:fd:
         04:bf:7f:36:a1:10:9f:e7:3a:0b:53:54:e3:c7:e1:96:da:9f:
         a5:bb:85:2c:3b:94:4e:dd:8c:ab:67:39:83:e7:cc:24:aa:94:
         bd:ba:3c:68:59:5b:cb:ab:78:d6:7e:74:d0:d0:63:05:a9:76:
         f1:a5:81:40:09:58:6d:ba:a9:06:b6:4b:56:a6:26:09:33:cf:
         42:e9:a1:f7:03:d6:8b:d6:d9:66:8c:3f:3e:5e:47:0f:b1:de:
         da:23:7e:05:0e:d8:84:97:d5:01:1a:61:38:a3:a5:aa:89:48:
         ff:a5:8f:de:f9:84:4a:fc:7b:28:30:5f:1b:10:3b:08:cb:71:
         61:04:9a:94:80:81:9c:99:7b:51:a5:8d:96:7a:42:2d:e7:54:
         ad:8b:eb:b6:a4:37:e8:c2:6a:10:15:8c:ca:af:b2:2a:05:1b:
         5c:31:d5:41:87:d5:e8:d6:91:6a:fa:da:42:28:8f:97:53:b7:
         28:d3:72:c5:0a:91:a9:d2:2e:af:b7:46:f3:82:32:c9:41:a1:
         f5:49:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:05 2026 by rpki-client