Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230332e302f32342d3234203d3e20313334303938.roa
File:                     3130332e3135322e3230332e302f32342d3234203d3e20313334303938.roa (raw, json)
Hash identifier:          /HbH5OF9d7cbvsDgXhYB7tL0Ktue5W5rZAnm+69XN0Y=
Subject key identifier:   22:C5:63:99:59:BA:63:BE:8F:44:F3:50:04:53:DD:5E:80:E7:51:AD
Certificate issuer:       /CN=EE3766CE5361179727468C239472B5A12921EA42
Certificate serial:       23F13F3BCEEB1D2F45387A216F8BF0275A4DA656
Authority key identifier: EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230332e302f32342d3234203d3e20313334303938.roa
Signing time:             Mon 11 May 2026 17:06:40 +0000
ROA not before:           Mon 11 May 2026 17:01:40 +0000
ROA not after:            Mon 10 May 2027 17:06:40 +0000
asID:                     134098
IP address blocks:        103.152.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl
                          rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f1:3f:3b:ce:eb:1d:2f:45:38:7a:21:6f:8b:f0:27:5a:4d:a6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3766CE5361179727468C239472B5A12921EA42
        Validity
            Not Before: May 11 17:01:40 2026 GMT
            Not After : May 10 17:06:40 2027 GMT
        Subject: CN=22C5639959BA63BE8F44F3500453DD5E80E751AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8b:d3:08:3f:01:61:1e:87:c2:75:ac:07:db:
                    01:ab:09:23:a8:36:7c:06:4c:6a:4d:cd:f1:30:a6:
                    65:27:06:dd:fb:98:f4:bd:f2:aa:a0:dd:ce:d1:26:
                    ad:12:7c:e7:d9:de:f2:9f:dd:34:cc:2b:ef:08:85:
                    94:6f:c4:09:e6:b0:b1:93:21:af:ec:0b:16:df:64:
                    29:14:cb:6b:15:38:93:f7:bb:d8:e2:1a:f8:5c:73:
                    10:9f:f0:52:7e:8a:ef:87:3f:19:98:c5:2e:3c:9f:
                    83:c3:72:91:31:3c:83:f6:f3:9c:6e:7e:f5:0a:99:
                    07:a6:e3:6f:2c:f6:f2:0c:6e:2e:90:fd:94:27:e2:
                    52:7f:21:2c:46:57:bf:8b:45:f4:c0:54:73:ea:42:
                    ab:d8:f6:bf:d4:89:ed:46:2b:a8:47:cf:50:d7:9f:
                    aa:3a:fa:41:b2:98:e8:cc:c8:03:c0:d1:b3:46:12:
                    1f:6f:4c:e0:b2:20:11:17:43:f8:0a:dc:bf:01:2c:
                    1e:1f:aa:40:d9:2b:ae:a6:50:26:3f:d3:60:78:75:
                    27:e6:25:3c:32:74:22:83:38:51:df:82:df:b2:95:
                    1e:cd:1a:dc:41:90:d7:6d:1b:15:d9:0a:34:93:d0:
                    f4:9d:08:0f:30:cb:1b:45:05:54:5b:47:0b:db:9e:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:63:99:59:BA:63:BE:8F:44:F3:50:04:53:DD:5E:80:E7:51:AD
            X509v3 Authority Key Identifier:
                keyid:EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230332e302f32342d3234203d3e20313334303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:29:2c:f9:52:d9:fc:68:d3:48:f3:0b:53:ff:a5:af:46:f1:
         d5:d3:64:9a:e8:44:fb:d4:d2:10:bc:82:b7:9a:7c:c5:08:8d:
         98:a0:98:5d:40:47:ed:4b:33:47:4c:3c:98:48:ea:d6:77:cb:
         c4:c3:e6:a8:e8:cd:b7:6a:2e:c4:8e:b5:55:e4:45:82:db:2d:
         96:cf:69:57:78:ad:63:da:52:fc:b0:e6:af:c1:3d:89:05:44:
         c9:2c:11:fc:0b:6f:4b:1b:57:5a:92:b5:60:a0:cf:25:46:f2:
         60:de:1a:0d:9d:16:73:e5:92:70:3c:f4:65:b0:83:2c:45:08:
         86:f9:22:fd:03:7b:a7:ad:23:96:97:d3:34:d2:6b:0a:e9:b8:
         b4:d7:bf:3e:f6:48:91:2d:49:3d:74:25:66:a7:6f:10:fa:32:
         6e:18:25:88:1a:f4:b1:8a:6f:e2:23:64:75:6a:99:c6:ad:1b:
         dc:cc:75:ac:db:67:74:c8:2c:41:a3:b7:55:12:40:9e:ee:7b:
         5d:24:c8:ea:76:74:fc:67:11:5b:6c:28:a4:5c:3c:9f:95:ec:
         83:1a:99:9b:9e:5e:72:6f:10:dd:fe:6f:5b:3f:71:75:f4:0c:
         e8:3f:08:56:c3:aa:67:d9:7f:71:4e:2b:e2:af:2d:76:f6:95:
         4a:a0:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:03 2026 by rpki-client