Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132372e302f32342d3234203d3e203138303436.roa
File:                     3130332e3133312e3132372e302f32342d3234203d3e203138303436.roa (raw, json)
Hash identifier:          cYsF0RHOWmf9Q443STadaXgOAjjBtJ3+u0wxBoRDKJ4=
Subject key identifier:   11:F0:4B:BB:31:88:A7:67:EE:4F:25:FA:F2:B2:17:67:2D:42:8F:05
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       60396CF59E5E58C43B120CEA236942F4B72FF3CC
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132372e302f32342d3234203d3e203138303436.roa
Signing time:             Thu 30 Jul 2026 09:04:02 +0000
ROA not before:           Thu 30 Jul 2026 08:59:02 +0000
ROA not after:            Thu 29 Jul 2027 09:04:02 +0000
asID:                     18046
IP address blocks:        103.131.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:39:6c:f5:9e:5e:58:c4:3b:12:0c:ea:23:69:42:f4:b7:2f:f3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Jul 30 08:59:02 2026 GMT
            Not After : Jul 29 09:04:02 2027 GMT
        Subject: CN=11F04BBB3188A767EE4F25FAF2B217672D428F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:ee:a9:86:6c:08:96:ec:27:75:52:0a:29:
                    bf:ca:d9:ef:df:3b:41:a9:31:fb:c8:64:8b:dc:70:
                    bd:5f:a1:4c:e4:c8:70:bd:e1:a1:a9:b6:79:2c:4b:
                    25:3a:4c:e8:f5:ca:86:c4:58:74:29:47:a1:3f:43:
                    b9:67:08:d5:56:ec:55:3c:43:a1:9a:17:46:e6:ea:
                    7e:ca:12:2a:79:6c:bb:91:64:af:2d:14:ea:73:3d:
                    59:5b:e5:90:a7:b1:85:cd:b3:59:a6:62:a7:98:03:
                    78:fe:eb:47:a6:fd:98:5e:38:52:e7:0d:7c:c8:87:
                    75:32:c8:c9:62:2c:b8:b0:9e:dd:2b:e1:35:63:1f:
                    a0:fd:05:84:4b:9f:8b:c0:bc:07:26:ea:38:ac:c9:
                    70:1e:b6:7b:c6:b6:2e:3e:35:43:75:cc:f3:16:b7:
                    9c:fe:9f:ab:f5:97:11:50:0b:53:25:5c:39:f1:5d:
                    39:03:b5:c3:8b:a8:2d:d3:8e:05:a1:42:40:ad:44:
                    66:80:88:ae:10:b9:e1:d7:41:16:45:78:cc:8b:ee:
                    df:1b:07:43:f9:c3:7e:f4:01:22:fc:13:b8:ec:5f:
                    af:98:e8:d1:17:ac:4f:c0:60:e2:c9:4d:77:e8:7c:
                    ab:86:a4:cb:82:ac:8c:a6:98:61:1f:81:d0:54:53:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F0:4B:BB:31:88:A7:67:EE:4F:25:FA:F2:B2:17:67:2D:42:8F:05
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132372e302f32342d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:36:08:1d:42:54:ad:61:e3:c5:ea:54:8e:7c:06:ac:a0:3f:
         ae:01:36:0e:d0:2d:f5:64:3e:ac:9a:cd:97:a9:99:bb:a9:cf:
         3b:5e:6a:7e:dc:03:9e:36:07:c5:98:5b:56:ae:c4:64:e4:9f:
         fe:1b:f4:b5:97:d4:45:38:8f:3c:78:62:2a:45:34:f3:ed:0b:
         df:63:c5:18:37:79:3e:7a:01:f8:f4:ed:e6:64:f5:6a:ca:d3:
         5d:95:90:85:98:c5:28:27:22:8c:3d:e6:1e:69:02:fd:67:d6:
         de:67:af:d7:7f:cb:fb:ae:50:c3:60:cd:2d:f7:04:92:ad:1e:
         d1:0c:34:18:ad:9a:ab:81:0f:cd:12:eb:d5:d7:75:f4:8b:ac:
         aa:cc:a2:f3:df:af:b8:03:46:9c:64:1e:2e:7d:c8:aa:36:e8:
         c1:36:83:5b:74:e0:13:b4:bc:46:6f:ea:fe:d4:c4:05:91:28:
         9b:2d:7b:07:84:5c:a4:dd:85:b0:87:d1:1d:a2:aa:af:f3:06:
         f6:e2:ea:1f:e8:e0:7b:fe:d8:96:09:45:b6:86:48:7b:e7:4e:
         19:b9:14:c6:09:b2:60:b5:9a:1e:f5:e8:1d:74:56:46:49:fe:
         bd:1b:dd:14:7c:d5:ed:cd:7e:14:c2:b1:3c:c9:ab:83:be:e0:
         3b:ee:fc:72
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUYDls9Z5eWMQ7EgzqI2lC9Lcv88wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUwNjczMTRDRkM2NTA5ODM4NkE5N0U4MTEwRjc4N0Uw
NzNDQTUxRTAeFw0yNjA3MzAwODU5MDJaFw0yNzA3MjkwOTA0MDJaMDMxMTAvBgNV
BAMTKDExRjA0QkJCMzE4OEE3NjdFRTRGMjVGQUYyQjIxNzY3MkQ0MjhGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeDO6phmwIluwndVIKKb/K2e/f
O0GpMfvIZIvccL1foUzkyHC94aGptnksSyU6TOj1yobEWHQpR6E/Q7lnCNVW7FU8
Q6GaF0bm6n7KEip5bLuRZK8tFOpzPVlb5ZCnsYXNs1mmYqeYA3j+60em/ZheOFLn
DXzIh3UyyMliLLiwnt0r4TVjH6D9BYRLn4vAvAcm6jisyXAetnvGti4+NUN1zPMW
t5z+n6v1lxFQC1MlXDnxXTkDtcOLqC3TjgWhQkCtRGaAiK4QueHXQRZFeMyL7t8b
B0P5w370ASL8E7jsX6+Y6NEXrE/AYOLJTXfofKuGpMuCrIymmGEfgdBUUzIbAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUEfBLuzGIp2fuTyX68rIXZy1CjwUwHwYDVR0j
BBgwFoAU5QZzFM/GUJg4apfoEQ94fgc8pR4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVBPV0VS
LzAvRTUwNjczMTRDRkM2NTA5ODM4NkE5N0U4MTEwRjc4N0UwNzNDQTUxRS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9FNTA2NzMxNENGQzY1MDk4Mzg2QTk3RTgxMTBG
Nzg3RTA3M0NBNTFFLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTVBPV0VSLzAvMzEzMDMzMmUzMTMz
MzEyZTMxMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzYucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABng38wDQYJKoZIhvcNAQELBQADggEBAHE2CB1CVK1h48XqVI58Bqyg
P64BNg7QLfVkPqyazZepmbupzztean7cA542B8WYW1auxGTkn/4b9LWX1EU4jzx4
YipFNPPtC99jxRg3eT56Afj07eZk9WrK012VkIWYxSgnIow95h5pAv1n1t5nr9d/
y/uuUMNgzS33BJKtHtEMNBitmquBD80S69XXdfSLrKrMovPfr7gDRpxkHi59yKo2
6ME2g1t04BO0vEZv6v7UxAWRKJsteweEXKTdhbCH0R2iqq/zBvbi6h/o4Hv+2JYJ
RbaGSHvnThm5FMYJsmC1mh716B10VkZJ/r0b3RR81e3NfhTCsTzJq4O+4Dvu/HI=
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:11 2026 by rpki-client