Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230322e302f32342d3234203d3e203137343135.roa
File:                     3130332e3135322e3230322e302f32342d3234203d3e203137343135.roa (raw, json)
Hash identifier:          ze20nYTN8811koBfT7dPn1R645rs9q/1bHFuci3e4RA=
Subject key identifier:   A9:22:59:25:DA:E4:E7:F7:0E:8E:2D:A6:3F:3D:5E:AB:43:B1:25:F9
Certificate issuer:       /CN=EE3766CE5361179727468C239472B5A12921EA42
Certificate serial:       5D7464DE0C62E588AB4E5FB8343424A66128D632
Authority key identifier: EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230322e302f32342d3234203d3e203137343135.roa
Signing time:             Mon 11 May 2026 17:06:41 +0000
ROA not before:           Mon 11 May 2026 17:01:41 +0000
ROA not after:            Mon 10 May 2027 17:06:41 +0000
asID:                     17415
IP address blocks:        103.152.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl
                          rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:74:64:de:0c:62:e5:88:ab:4e:5f:b8:34:34:24:a6:61:28:d6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3766CE5361179727468C239472B5A12921EA42
        Validity
            Not Before: May 11 17:01:41 2026 GMT
            Not After : May 10 17:06:41 2027 GMT
        Subject: CN=A9225925DAE4E7F70E8E2DA63F3D5EAB43B125F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:6b:17:1e:34:6e:5e:89:25:89:d8:38:c0:
                    93:41:fd:0f:d0:4a:a9:ae:8f:e4:34:71:0a:7c:c5:
                    4f:aa:95:f2:83:a0:35:55:32:52:a1:0f:a2:f7:e9:
                    de:c1:43:3e:cf:19:44:77:84:44:75:06:59:db:4d:
                    47:a3:30:b9:af:5b:b8:41:28:76:98:cb:78:86:84:
                    b5:28:24:e2:35:98:23:00:24:00:e5:24:3a:7e:f7:
                    44:ee:f3:3a:9d:f4:0c:cf:05:16:b8:e0:a5:5f:c5:
                    9d:1d:88:2f:7f:49:80:ae:22:5e:e8:e0:27:99:f7:
                    50:6c:42:e3:f0:7b:29:82:cf:5d:6f:0c:0f:26:c7:
                    a4:3f:1b:1a:ca:d3:f1:f5:a3:29:d8:65:e3:44:46:
                    5b:93:2c:69:13:64:52:8f:51:0e:68:47:60:ef:cf:
                    2e:98:66:76:60:bb:8e:59:e9:50:69:94:b8:32:5f:
                    d5:fb:ff:46:dd:b4:15:fa:0c:2b:bf:ba:7e:8e:d4:
                    b7:0c:14:c7:76:4d:1a:4a:31:44:c8:5e:aa:d4:35:
                    b5:a2:8a:2b:3e:d9:c7:c3:f4:93:78:97:96:2f:9a:
                    e2:c0:3d:d9:20:b8:f2:27:b8:16:34:aa:46:17:ae:
                    98:66:87:00:04:e5:fb:78:88:09:87:11:0d:60:e6:
                    ad:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:22:59:25:DA:E4:E7:F7:0E:8E:2D:A6:3F:3D:5E:AB:43:B1:25:F9
            X509v3 Authority Key Identifier:
                keyid:EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230322e302f32342d3234203d3e203137343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:2d:23:1c:e2:0b:e7:4c:0e:18:09:83:bf:d5:94:9a:2f:
         0c:3c:a2:57:9a:0a:59:49:4f:3b:e4:ed:15:54:85:26:12:02:
         7b:6d:68:13:d4:3d:57:cb:7a:5b:32:a9:3d:a2:49:5b:cd:90:
         aa:fa:27:15:45:07:da:ae:0d:20:b7:9c:85:ea:6c:ae:03:60:
         fb:0b:32:23:52:7c:82:d3:cb:ef:93:0a:91:4d:be:76:c8:fc:
         07:61:89:80:95:ca:af:43:05:31:b6:7e:a5:4a:28:f6:d3:bc:
         f1:69:c0:93:d9:b6:4b:8a:ad:d1:88:b9:b0:ba:b6:fb:15:3a:
         f0:4c:88:bd:3b:fc:a9:ce:b0:4f:30:7e:f6:6c:55:0d:2e:b6:
         6c:e9:68:f5:b4:b8:e1:33:11:79:b0:45:e1:53:38:ed:b2:74:
         6a:ef:31:8e:a8:c1:1d:fc:36:79:61:58:bd:61:ef:11:03:30:
         be:5e:e3:e1:6f:13:58:09:eb:f9:00:07:30:95:65:46:96:84:
         7b:ea:32:eb:27:38:04:4c:23:ba:7a:e4:9e:92:d0:c9:ca:b1:
         9f:03:1d:be:c6:c0:41:1f:ca:66:0e:16:b9:08:8e:fb:b1:28:
         a2:b5:d2:5f:84:7e:49:c2:cd:f5:8f:8c:a8:f8:3b:9f:4b:d4:
         08:e7:70:66
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUXXRk3gxi5YirTl+4NDQkpmEo1jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUzNzY2Q0U1MzYxMTc5NzI3NDY4QzIzOTQ3MkI1QTEy
OTIxRUE0MjAeFw0yNjA1MTExNzAxNDFaFw0yNzA1MTAxNzA2NDFaMDMxMTAvBgNV
BAMTKEE5MjI1OTI1REFFNEU3RjcwRThFMkRBNjNGM0Q1RUFCNDNCMTI1RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VmsXHjRuXoklidg4wJNB/Q/Q
Sqmuj+Q0cQp8xU+qlfKDoDVVMlKhD6L36d7BQz7PGUR3hER1BlnbTUejMLmvW7hB
KHaYy3iGhLUoJOI1mCMAJADlJDp+90Tu8zqd9AzPBRa44KVfxZ0diC9/SYCuIl7o
4CeZ91BsQuPweymCz11vDA8mx6Q/GxrK0/H1oynYZeNERluTLGkTZFKPUQ5oR2Dv
zy6YZnZgu45Z6VBplLgyX9X7/0bdtBX6DCu/un6O1LcMFMd2TRpKMUTIXqrUNbWi
iis+2cfD9JN4l5YvmuLAPdkguPInuBY0qkYXrphmhwAE5ft4iAmHEQ1g5q0dAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUqSJZJdrk5/cOji2mPz1eq0OxJfkwHwYDVR0j
BBgwFoAU7jdmzlNhF5cnRowjlHK1oSkh6kIwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1lJ
VEVBLzAvRUUzNzY2Q0U1MzYxMTc5NzI3NDY4QzIzOTQ3MkI1QTEyOTIxRUE0Mi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FRTM3NjZDRTUzNjExNzk3Mjc0NjhDMjM5
NDcyQjVBMTI5MjFFQTQyLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01JTkdZSVRFQS8wLzMxMzAz
MzJlMzEzNTMyMmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQz
MTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ5jKMA0GCSqGSIb3DQEBCwUAA4IBAQBVwC0jHOIL50wO
GAmDv9WUmi8MPKJXmgpZSU875O0VVIUmEgJ7bWgT1D1Xy3pbMqk9oklbzZCq+icV
RQfarg0gt5yF6myuA2D7CzIjUnyC08vvkwqRTb52yPwHYYmAlcqvQwUxtn6lSij2
07zxacCT2bZLiq3RiLmwurb7FTrwTIi9O/ypzrBPMH72bFUNLrZs6Wj1tLjhMxF5
sEXhUzjtsnRq7zGOqMEd/DZ5YVi9Ye8RAzC+XuPhbxNYCev5AAcwlWVGloR76jLr
JzgETCO6euSektDJyrGfAx2+xsBBH8pmDha5CI77sSiitdJfhH5Jws31j4yo+Duf
S9QI53Bm
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:46 2026 by rpki-client