Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa
File:                     3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa (raw, json)
Hash identifier:          C3OJeu7QwWAZKqQNtD3rtSGZubdl01iTngU6YcVIGgI=
Subject key identifier:   8A:DA:37:41:D3:4D:B6:6E:9A:B6:57:E2:4C:95:8F:44:0A:73:2D:6A
Certificate issuer:       /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial:       73FC3F1C26E8B4344D1BACA9701B0730C858DEDC
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NARL/0/3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa
Signing time:             Fri 05 Jun 2026 09:24:20 +0000
ROA not before:           Fri 05 Jun 2026 09:19:20 +0000
ROA not after:            Fri 04 Jun 2027 09:24:20 +0000
asID:                     7539
IP address blocks:        103.160.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl
                          rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 04:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:fc:3f:1c:26:e8:b4:34:4d:1b:ac:a9:70:1b:07:30:c8:58:de:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Validity
            Not Before: Jun  5 09:19:20 2026 GMT
            Not After : Jun  4 09:24:20 2027 GMT
        Subject: CN=8ADA3741D34DB66E9AB657E24C958F440A732D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:77:6a:8e:bc:d7:be:7f:4c:01:fd:88:af:
                    39:03:a3:a7:4a:5f:88:81:85:65:6c:56:b2:6d:fe:
                    de:09:d0:5a:d3:85:37:fd:77:4f:ba:f8:5a:f0:cc:
                    e6:9f:a6:1a:94:d9:ef:db:63:00:8d:28:80:70:f6:
                    30:5b:7f:4c:dd:95:b2:6c:1f:fb:a2:c9:45:51:de:
                    f5:1e:ee:84:50:f0:f2:7b:4a:2b:2f:3a:fd:b9:81:
                    c7:02:69:fd:26:fd:4f:4b:c7:6f:20:2e:56:33:ce:
                    8c:a0:f8:38:c1:30:cb:e5:08:b2:1d:24:48:4f:60:
                    f1:72:ff:88:83:ea:fe:a3:88:74:89:0a:74:2b:bb:
                    36:c5:09:7f:91:bf:77:95:71:5c:d7:87:ff:0e:3a:
                    0a:f9:5d:49:f0:94:ae:ac:5a:30:ff:4f:d2:8c:93:
                    d8:6c:e4:7e:57:04:46:3e:d3:0f:24:73:64:7a:74:
                    db:c4:13:3f:5e:09:f6:eb:e0:99:1a:6d:f1:62:45:
                    34:0b:3c:b2:82:2c:c6:26:9d:82:c6:54:96:1d:d5:
                    19:b8:4b:bd:fb:c5:b6:17:5c:42:10:97:51:7d:a8:
                    04:02:91:18:0e:3c:b0:42:48:51:1c:ea:3a:e6:71:
                    ce:5c:1c:94:c9:76:f7:f7:fb:f5:6c:ef:c7:58:79:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:37:41:D3:4D:B6:6E:9A:B6:57:E2:4C:95:8F:44:0A:73:2D:6A
            X509v3 Authority Key Identifier:
                keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/3130332e3136302e3232302e302f32332d3234203d3e2037353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:b8:e5:ac:78:40:52:bb:58:6d:44:d4:95:45:fa:68:ef:4a:
         27:d2:06:7c:c1:d0:c6:b9:d4:ac:d0:90:b8:7b:d4:20:9d:b5:
         a7:9a:53:44:0e:2e:5f:67:7e:d7:27:72:f9:51:04:df:40:e4:
         54:a2:fc:aa:b3:70:bb:de:a1:4d:ca:45:1f:f8:f3:83:2d:30:
         c6:ab:fa:6f:dd:c8:a8:13:74:d9:bc:f9:75:c6:39:4f:91:f8:
         d7:27:a7:6d:59:4a:f9:84:de:74:b6:fa:7e:84:d7:04:cd:96:
         c2:d3:26:ff:f8:3f:f6:2c:00:75:7b:a9:5d:91:3a:6d:9c:7c:
         c8:54:21:95:81:f5:56:c3:28:f4:e6:e0:13:b1:70:b9:1e:a7:
         cd:66:69:9d:62:a4:bd:bf:90:1e:28:e8:5e:88:23:4c:a0:80:
         f5:b6:a3:ec:39:d1:4b:8f:f8:4b:6f:51:4e:71:4b:dd:02:b8:
         d0:fd:39:1d:4e:46:77:37:14:79:e8:39:85:2d:87:73:32:f5:
         28:2f:99:f6:7f:72:79:c6:42:17:ed:03:25:46:a6:92:4a:a6:
         fb:5f:67:0a:1f:1b:72:a9:74:a8:0c:6a:d6:94:46:b4:b3:6f:
         8c:95:e5:cb:f7:39:37:cd:81:7b:4e:e0:32:a2:b9:92:e4:20:
         0a:68:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 21:41:56 2026 by rpki-client