Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132362e302f32342d3234203d3e203138303436.roa
File:                     3130332e3133312e3132362e302f32342d3234203d3e203138303436.roa (raw, json)
Hash identifier:          uuBeTQ17s48oKEAgFpbzvii7y9SujI3tDANoQd+BEMA=
Subject key identifier:   81:8B:E0:24:5A:4B:C6:92:D7:DB:F9:A9:3E:2E:8A:10:47:68:4C:09
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       0E4EC58E0A004AEE7BA79490E0AF581476229B89
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132362e302f32342d3234203d3e203138303436.roa
Signing time:             Thu 30 Jul 2026 09:04:01 +0000
ROA not before:           Thu 30 Jul 2026 08:59:01 +0000
ROA not after:            Thu 29 Jul 2027 09:04:01 +0000
asID:                     18046
IP address blocks:        103.131.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:4e:c5:8e:0a:00:4a:ee:7b:a7:94:90:e0:af:58:14:76:22:9b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Jul 30 08:59:01 2026 GMT
            Not After : Jul 29 09:04:01 2027 GMT
        Subject: CN=818BE0245A4BC692D7DBF9A93E2E8A1047684C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:eb:9e:cf:70:2a:a5:86:4c:c2:83:0b:fa:77:
                    77:8c:c1:79:20:b0:0a:fc:7d:0f:b7:f4:61:47:dc:
                    57:5d:75:29:7d:02:44:76:30:a6:e5:ac:42:6b:4e:
                    07:f4:9c:3c:53:85:38:2b:9e:42:f3:33:7a:90:54:
                    af:6c:5e:a2:be:e6:9f:dd:10:db:79:6b:91:f6:30:
                    4f:bb:0f:fa:e5:17:c9:1c:a5:1c:f6:d7:e0:52:b6:
                    f8:b4:48:de:d0:5c:41:ab:e4:8e:92:f0:fa:b8:8d:
                    e3:cc:17:10:e4:38:b5:88:8f:19:8c:d3:fc:e7:81:
                    7e:50:6e:9f:01:9c:50:78:ae:73:7c:af:08:24:76:
                    b3:00:fe:42:35:60:79:d5:12:7c:04:15:02:be:1e:
                    8e:a6:7e:12:df:69:fb:f8:02:4b:cf:ad:bc:b7:f3:
                    f6:12:f6:04:ae:4e:2d:96:b8:11:52:84:03:4c:52:
                    96:1e:32:b5:79:eb:fc:f1:6f:f4:a0:48:60:cf:ff:
                    6e:0e:eb:a6:d7:78:7b:c4:51:62:e0:83:36:e7:8e:
                    ed:ac:44:eb:33:47:77:d2:3d:01:a8:9e:39:0f:fc:
                    b8:92:ab:62:d4:f3:cf:44:36:9c:2e:b8:ee:b0:ce:
                    57:d0:90:30:5e:68:a5:ae:14:d4:7a:4a:24:44:31:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8B:E0:24:5A:4B:C6:92:D7:DB:F9:A9:3E:2E:8A:10:47:68:4C:09
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132362e302f32342d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:29:a6:44:74:a5:f8:f2:6e:1d:04:11:99:b6:e4:70:be:d1:
         16:fd:00:27:5e:aa:b5:8d:84:d8:27:02:fe:f3:b9:0f:90:1c:
         da:bb:46:f7:9a:2e:6d:22:64:40:70:f5:62:98:62:b7:4d:a6:
         96:a8:19:dd:b6:08:48:dc:80:90:3a:1b:c6:b4:b8:62:87:34:
         95:e7:45:05:1e:4e:34:6a:fe:70:44:8f:06:f3:59:21:b9:42:
         4e:ee:5d:3e:f8:63:a6:9b:33:92:0d:f3:44:c5:40:49:fa:5b:
         26:bf:c6:63:56:b5:32:64:93:f2:61:55:1c:ec:5a:14:b6:47:
         e5:65:7a:77:8e:3c:0b:47:b7:78:37:83:e2:43:0e:3e:a7:66:
         0a:2a:b9:b0:37:4b:61:d1:47:52:c9:1e:98:eb:0d:98:e9:43:
         10:0c:d9:94:4f:61:a2:0f:36:7d:a8:ac:f6:73:1b:e5:a0:ec:
         0f:d2:68:00:1b:aa:f8:39:82:0a:7c:18:9d:c8:76:ba:7e:b2:
         1e:66:6e:3c:5f:a9:4c:4a:cb:ce:6e:c2:85:ef:69:97:ec:91:
         40:8e:d6:e3:ad:22:8d:8e:59:0f:20:b9:80:49:10:08:71:e2:
         87:11:d1:0f:c4:09:9e:80:59:e5:9c:68:ee:be:0a:f5:64:f0:
         f0:53:e9:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:11 2026 by rpki-client