Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132352e302f32342d3234203d3e203138303436.roa
File:                     3130332e3133312e3132352e302f32342d3234203d3e203138303436.roa (raw, json)
Hash identifier:          pB/s6v3xGszIM+2AYkzOkrjCqqoFijaFNYXVcJf8aUQ=
Subject key identifier:   67:AB:60:D8:6F:18:9E:D4:89:94:7C:9A:9D:D9:3C:6C:BD:2F:96:90
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       36D10D42D2B9D88D5A14D12AF2D3BCE1A204F063
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132352e302f32342d3234203d3e203138303436.roa
Signing time:             Thu 30 Jul 2026 09:04:01 +0000
ROA not before:           Thu 30 Jul 2026 08:59:01 +0000
ROA not after:            Thu 29 Jul 2027 09:04:01 +0000
asID:                     18046
IP address blocks:        103.131.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d1:0d:42:d2:b9:d8:8d:5a:14:d1:2a:f2:d3:bc:e1:a2:04:f0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Jul 30 08:59:01 2026 GMT
            Not After : Jul 29 09:04:01 2027 GMT
        Subject: CN=67AB60D86F189ED489947C9A9DD93C6CBD2F9690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:b0:26:24:ea:a4:c4:4a:8e:f6:d1:da:2d:
                    03:ab:e6:d7:5e:60:06:61:9e:33:e8:a1:2c:38:68:
                    b0:6a:ee:42:f1:4a:7e:9a:fc:6b:77:16:7b:60:30:
                    88:59:61:ad:89:ab:8b:7d:4e:cb:b5:28:f9:aa:02:
                    75:db:8a:e2:b4:cf:c1:15:9d:bf:4e:72:ce:ba:7a:
                    d3:47:61:2a:ec:58:6f:20:7d:2f:75:ea:76:40:c1:
                    c1:2b:fa:6b:d7:e3:cb:4b:66:28:b3:6c:91:a8:6c:
                    ed:ec:d2:0d:c6:3c:a5:7f:d0:8a:c6:e6:c5:0f:69:
                    67:f8:3a:1c:12:c4:b7:0e:bc:53:1f:1a:06:c9:85:
                    fe:c3:71:b3:fc:ad:6e:98:dc:ee:7b:3e:48:92:c5:
                    4f:e0:76:f7:dd:07:7b:b2:4f:c4:1a:96:18:b6:c5:
                    6b:8f:86:07:2b:5b:75:32:e9:ad:5e:92:67:77:ec:
                    18:03:25:c0:2f:fd:fb:79:d4:3f:ff:a7:48:81:12:
                    31:e1:ce:c6:ac:23:12:6e:9a:0a:8e:70:21:89:e7:
                    3a:7f:5d:34:ed:2d:5f:36:59:af:64:ee:51:0c:e3:
                    ec:cf:01:8b:f9:6d:ec:44:51:42:f3:ee:c8:ff:f1:
                    ee:ac:83:80:89:df:0f:95:45:bc:55:3a:92:99:4b:
                    a0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AB:60:D8:6F:18:9E:D4:89:94:7C:9A:9D:D9:3C:6C:BD:2F:96:90
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132352e302f32342d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:95:a3:39:86:7a:26:2c:55:1d:db:af:86:04:5b:94:49:
         c8:d6:3e:dd:e3:29:ea:6d:b3:36:47:e0:41:a5:2e:81:01:cb:
         40:49:9f:6b:c9:f4:fe:c2:39:01:1a:84:27:50:a6:f0:5b:e7:
         1a:4f:ba:85:75:db:2a:85:8b:6a:5c:b1:d3:55:ff:0e:e0:46:
         93:9e:a0:69:dc:fb:4f:3c:18:3c:f0:d3:01:39:3a:3e:92:8b:
         25:fa:cc:ed:8e:48:d3:31:52:5b:ca:bd:a8:af:24:c8:86:7b:
         24:58:db:1c:56:17:46:88:51:0c:17:f8:7b:5b:3e:8a:36:92:
         9e:ca:84:81:b1:9d:d7:e4:f5:e0:97:7a:00:d0:f0:61:36:42:
         f8:f5:22:7f:56:10:4c:56:48:83:ff:83:74:e8:bf:ce:2c:41:
         07:e9:a3:70:8f:7b:1f:84:55:df:34:85:7a:04:97:1f:2b:88:
         ac:5b:c8:d2:a3:09:ee:d9:0c:94:65:81:32:d0:73:39:18:9d:
         d6:78:56:65:2d:68:b8:50:b9:39:40:97:0c:ee:13:0e:ec:96:
         be:15:9f:03:49:7b:21:01:1b:5d:ff:b0:79:8b:b2:ce:cc:ea:
         5a:e3:bc:36:97:a2:fd:d5:48:e2:50:16:50:38:5f:17:43:ca:
         77:59:a8:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:11 2026 by rpki-client