Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NETGUARD/0/3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa
File:                     3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa (raw, json)
Hash identifier:          47voBXTyiYiW0GNSqQXzjv9mGc6KAROEr3k+QrljAQs=
Subject key identifier:   9D:46:8F:0C:D8:AF:68:E7:D3:9A:C9:9C:CA:FE:3B:FF:6E:E1:5B:28
Certificate issuer:       /CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
Certificate serial:       1472D4DBBC77C12BB33B11D6351063F158F85F7F
Authority key identifier: A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NETGUARD/0/3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa
Signing time:             Mon 11 May 2026 17:31:27 +0000
ROA not before:           Mon 11 May 2026 17:26:27 +0000
ROA not after:            Mon 10 May 2027 17:31:27 +0000
asID:                     131652
IP address blocks:        103.160.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl
                          rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:d4:db:bc:77:c1:2b:b3:3b:11:d6:35:10:63:f1:58:f8:5f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8
        Validity
            Not Before: May 11 17:26:27 2026 GMT
            Not After : May 10 17:31:27 2027 GMT
        Subject: CN=9D468F0CD8AF68E7D39AC99CCAFE3BFF6EE15B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:41:6c:fd:81:8c:a6:88:24:1e:29:27:8c:
                    90:05:1d:09:83:b2:db:ec:cf:12:0f:67:d5:4d:57:
                    96:bc:b5:d8:58:f0:04:2b:7c:5e:0d:52:bc:3b:d5:
                    2f:5b:dc:a5:3a:41:2d:0c:01:57:d7:d2:98:00:27:
                    52:b5:7a:29:af:85:f1:12:59:f5:ee:49:5d:70:ac:
                    3f:6f:3a:c3:42:74:d8:12:ea:f6:34:9e:b2:7e:84:
                    67:bb:9d:18:4a:99:c8:0b:23:25:57:ca:24:48:52:
                    ed:d2:40:e5:23:53:3d:91:e5:32:21:d8:7f:8e:e2:
                    d3:27:07:40:d3:27:8a:6d:80:3b:cb:87:15:2e:4c:
                    15:d6:31:a7:cc:c3:93:9e:67:fa:cd:95:92:61:db:
                    e7:25:95:fb:d0:27:0b:d3:13:64:71:04:33:cb:99:
                    19:76:53:5c:c1:64:25:a2:84:6c:05:f3:e1:7f:85:
                    55:65:2e:c4:9b:11:dd:65:2d:8d:29:a7:83:6a:6f:
                    e7:a4:d2:08:9e:a9:d1:8d:83:52:b6:a7:1e:a9:18:
                    1c:4d:aa:2a:82:04:66:7f:40:5b:ef:5e:96:79:8d:
                    5a:e9:23:b2:a6:f6:d1:cb:fb:ce:44:05:1f:ef:50:
                    a0:88:e9:34:3c:27:2a:5c:0b:44:a6:57:5c:be:6f:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:46:8F:0C:D8:AF:68:E7:D3:9A:C9:9C:CA:FE:3B:FF:6E:E1:5B:28
            X509v3 Authority Key Identifier:
                keyid:A7:9F:FF:D9:8D:67:B1:DC:F7:64:D6:C6:0D:9D:8F:77:B1:8C:80:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A79FFFD98D67B1DCF764D6C60D9D8F77B18C80F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NETGUARD/0/3130332e3136302e3232342e302f32332d3234203d3e20313331363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:f6:33:2d:5d:a7:89:f0:33:e1:14:6b:f5:99:df:4c:e6:f4:
         51:66:66:20:8e:9c:92:7a:61:44:4b:68:e5:a2:d6:68:71:11:
         d4:be:7c:02:47:fe:18:77:c9:73:f3:d2:d0:96:fb:13:13:88:
         e6:15:57:11:25:a0:c2:a9:01:fd:ee:70:f3:f9:4a:82:19:dc:
         ea:27:d7:af:ef:53:8b:87:24:7f:8e:54:0d:ec:0e:d3:7e:fc:
         99:e4:cb:32:76:4b:69:b3:e8:24:9c:43:84:41:b1:2b:e4:45:
         88:76:04:90:54:1a:f3:89:07:47:70:7f:17:54:e5:bc:f9:67:
         bb:b2:5f:31:48:0b:ea:c0:26:54:5f:69:f3:01:f0:d8:84:dc:
         48:86:04:98:b4:67:5e:18:2e:f8:95:08:7f:b0:2b:96:12:8a:
         47:28:bf:85:7c:20:b7:89:63:13:07:90:22:fb:dd:c6:dd:2b:
         88:c3:d3:74:8e:64:32:46:ae:d3:b6:9b:f5:ea:67:4c:da:f3:
         9f:8e:3a:17:1c:de:1c:f9:d3:c9:7b:79:5b:c7:ae:a7:1a:90:
         cb:dc:6b:f2:e1:fd:51:1d:bf:bd:16:81:38:e7:ec:9e:c4:d6:
         80:ec:4a:4a:ff:a3:5d:50:a7:4c:e0:51:e0:ce:30:07:c9:e7:
         4f:6d:51:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:48:31 2026 by rpki-client