Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230332e302f32342d3234203d3e203137343135.roa
File:                     3130332e3135322e3230332e302f32342d3234203d3e203137343135.roa (raw, json)
Hash identifier:          I5DKlltfUbjEWmcuotgiUdAcIn8UvGmXpXUFuK/p+Ck=
Subject key identifier:   B1:39:22:19:91:3C:2E:97:23:87:73:24:C9:A3:2B:D8:7B:6A:1A:D4
Certificate issuer:       /CN=EE3766CE5361179727468C239472B5A12921EA42
Certificate serial:       2C472D738111F7D7FEAEC9C1EE96BA4D0DE9DEEC
Authority key identifier: EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230332e302f32342d3234203d3e203137343135.roa
Signing time:             Mon 11 May 2026 17:07:34 +0000
ROA not before:           Mon 11 May 2026 17:02:34 +0000
ROA not after:            Mon 10 May 2027 17:07:34 +0000
asID:                     17415
IP address blocks:        103.152.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl
                          rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:47:2d:73:81:11:f7:d7:fe:ae:c9:c1:ee:96:ba:4d:0d:e9:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3766CE5361179727468C239472B5A12921EA42
        Validity
            Not Before: May 11 17:02:34 2026 GMT
            Not After : May 10 17:07:34 2027 GMT
        Subject: CN=B1392219913C2E9723877324C9A32BD87B6A1AD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:2f:95:c7:cc:94:65:02:d2:f2:9b:7e:32:
                    f8:f7:5d:7b:c9:6d:8f:fe:ba:e5:23:91:8b:f7:88:
                    09:85:22:41:6e:ff:48:27:af:81:f6:16:61:de:2c:
                    38:a2:36:5f:5a:71:2c:a3:95:a0:15:c9:69:80:ff:
                    b2:7d:81:20:21:d7:c3:9e:0a:03:fb:9e:b4:be:04:
                    2d:36:98:d2:f8:32:03:18:c3:21:32:e0:50:5a:a0:
                    be:70:0d:38:6c:4b:0b:47:a8:4a:28:a8:38:81:74:
                    b2:1c:cd:22:fd:43:3f:1a:c4:f0:35:85:e0:3c:b3:
                    f1:3b:f7:a3:d1:c9:4a:b1:53:68:7e:89:01:b2:64:
                    ca:ac:a8:e3:ed:85:89:1d:72:8f:95:5e:6b:43:02:
                    d6:4c:21:70:97:dc:c5:20:ac:6b:ea:b0:6a:f7:6a:
                    9c:a1:2c:59:08:01:53:83:05:fd:d9:6d:9a:60:37:
                    45:84:34:b3:dc:a1:0f:c2:05:12:81:e6:74:a3:ac:
                    ab:06:aa:31:a4:9e:0d:03:82:66:44:c7:92:41:9e:
                    4f:5e:d9:b3:ee:0d:10:34:b7:17:1d:22:33:de:90:
                    c0:34:b5:e8:2c:c5:c4:88:90:1c:7e:75:e2:5e:40:
                    75:04:64:b5:95:d8:ab:2d:12:30:bb:4d:a5:f8:da:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:39:22:19:91:3C:2E:97:23:87:73:24:C9:A3:2B:D8:7B:6A:1A:D4
            X509v3 Authority Key Identifier:
                keyid:EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/3130332e3135322e3230332e302f32342d3234203d3e203137343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:dd:45:ae:7b:47:68:a5:8c:fc:54:f1:2d:6a:fb:0c:cb:4f:
         0b:d1:ca:6a:4e:53:e0:b5:32:a6:c9:b4:17:33:03:11:e6:ab:
         c7:33:e8:86:8d:8d:e3:a4:56:77:ce:c1:68:2c:7a:1e:f7:85:
         e3:26:57:c5:74:e1:b2:93:21:de:b9:ec:cd:93:93:b5:83:64:
         37:d4:1f:24:d6:75:91:4b:a2:ff:e1:bb:67:20:55:91:46:bf:
         6a:b4:14:c8:99:0f:05:34:22:f6:fc:e0:08:0a:c6:bf:35:9f:
         66:c3:87:68:ee:ca:d3:0f:80:5f:20:2d:c2:46:39:bf:af:18:
         21:21:ce:25:58:de:8c:3f:c0:57:95:1c:9e:0d:1f:16:cf:aa:
         a8:b2:2b:17:63:9f:2f:17:81:dc:53:78:7a:29:28:45:6a:51:
         a5:ae:93:03:a2:e3:d1:88:1e:da:dd:58:d4:dd:64:c2:93:95:
         09:f2:ca:1f:14:b3:46:a9:93:d5:e5:42:09:a8:fd:d1:a5:6c:
         c9:61:cc:18:35:d1:81:d0:3e:7b:65:5d:70:3d:e1:fa:de:c4:
         b8:49:d7:17:1a:14:81:fd:40:a2:f5:94:df:00:28:25:a1:de:
         2f:07:4a:c0:2e:9b:90:17:61:46:20:c3:20:c8:93:19:06:c1:
         d1:34:9a:94
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIULEctc4ER99f+rsnB7pa6TQ3p3uwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUzNzY2Q0U1MzYxMTc5NzI3NDY4QzIzOTQ3MkI1QTEy
OTIxRUE0MjAeFw0yNjA1MTExNzAyMzRaFw0yNzA1MTAxNzA3MzRaMDMxMTAvBgNV
BAMTKEIxMzkyMjE5OTEzQzJFOTcyMzg3NzMyNEM5QTMyQkQ4N0I2QTFBRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbKi+Vx8yUZQLS8pt+Mvj3XXvJ
bY/+uuUjkYv3iAmFIkFu/0gnr4H2FmHeLDiiNl9acSyjlaAVyWmA/7J9gSAh18Oe
CgP7nrS+BC02mNL4MgMYwyEy4FBaoL5wDThsSwtHqEooqDiBdLIczSL9Qz8axPA1
heA8s/E796PRyUqxU2h+iQGyZMqsqOPthYkdco+VXmtDAtZMIXCX3MUgrGvqsGr3
apyhLFkIAVODBf3ZbZpgN0WENLPcoQ/CBRKB5nSjrKsGqjGkng0DgmZEx5JBnk9e
2bPuDRA0txcdIjPekMA0tegsxcSIkBx+deJeQHUEZLWV2KstEjC7TaX42h0xAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUsTkiGZE8Lpcjh3MkyaMr2HtqGtQwHwYDVR0j
BBgwFoAU7jdmzlNhF5cnRowjlHK1oSkh6kIwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUlOR1lJ
VEVBLzAvRUUzNzY2Q0U1MzYxMTc5NzI3NDY4QzIzOTQ3MkI1QTEyOTIxRUE0Mi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FRTM3NjZDRTUzNjExNzk3Mjc0NjhDMjM5
NDcyQjVBMTI5MjFFQTQyLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL01JTkdZSVRFQS8wLzMxMzAz
MzJlMzEzNTMyMmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM3MzQz
MTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ5jLMA0GCSqGSIb3DQEBCwUAA4IBAQCS3UWue0dopYz8
VPEtavsMy08L0cpqTlPgtTKmybQXMwMR5qvHM+iGjY3jpFZ3zsFoLHoe94XjJlfF
dOGykyHeuezNk5O1g2Q31B8k1nWRS6L/4btnIFWRRr9qtBTImQ8FNCL2/OAICsa/
NZ9mw4do7srTD4BfIC3CRjm/rxghIc4lWN6MP8BXlRyeDR8Wz6qosisXY58vF4Hc
U3h6KShFalGlrpMDouPRiB7a3VjU3WTCk5UJ8sofFLNGqZPV5UIJqP3RpWzJYcwY
NdGB0D57ZV1wPeH63sS4SdcXGhSB/UCi9ZTfACglod4vB0rALpuQF2FGIMMgyJMZ
BsHRNJqU
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:03 2026 by rpki-client