Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NTCL/0/3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa
File:                     3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa (raw, json)
Hash identifier:          q7dF1jX4ROfIjFDlO5sVW9hRX9k2oXkr8fjwFlVtFmE=
Subject key identifier:   2D:D9:79:94:9C:4F:61:A0:47:72:D5:A5:8F:13:13:D4:62:3F:B9:ED
Certificate issuer:       /CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22
Certificate serial:       0F63916BB9EC30E64CE623FEE87FEE505E5CF3EE
Authority key identifier: 2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NTCL/0/3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa
Signing time:             Mon 11 May 2026 17:37:28 +0000
ROA not before:           Mon 11 May 2026 17:32:28 +0000
ROA not after:            Mon 10 May 2027 17:37:28 +0000
asID:                     32242
IP address blocks:        103.140.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl
                          rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:63:91:6b:b9:ec:30:e6:4c:e6:23:fe:e8:7f:ee:50:5e:5c:f3:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D58FB0AD6CB4CFDF7364791D1435AD48C675D22
        Validity
            Not Before: May 11 17:32:28 2026 GMT
            Not After : May 10 17:37:28 2027 GMT
        Subject: CN=2DD979949C4F61A04772D5A58F1313D4623FB9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:5d:54:1f:9c:b4:3e:55:7c:df:73:db:bb:
                    b5:cc:70:eb:a1:f7:4f:66:c3:50:58:70:40:8c:d7:
                    6e:7f:ac:7a:61:e2:ac:29:26:c3:7f:b9:cc:2b:2a:
                    07:65:34:e6:5c:a1:82:f7:9c:44:56:d6:ce:e7:76:
                    f6:e7:e9:77:7d:68:0e:4b:4c:7c:84:ef:f5:70:94:
                    b8:bc:f4:03:ff:b3:66:a8:05:12:99:84:f9:2e:91:
                    2e:25:79:15:f6:0f:4b:df:c2:f4:c2:b5:28:5e:7b:
                    87:ea:53:b6:4f:db:1e:44:3c:2f:26:30:10:34:93:
                    c3:c7:94:ca:91:15:29:a0:6d:9e:23:f8:be:50:98:
                    ad:ed:d3:b2:17:55:10:6c:6f:cf:b7:9b:f7:5b:ad:
                    6f:06:b9:ac:e8:df:38:dd:bf:76:20:30:5c:9b:c2:
                    21:7d:4b:b4:f3:e7:72:09:3e:23:5d:a4:71:c2:ab:
                    ea:8b:2d:ba:63:a4:12:37:c1:bd:25:72:27:44:fc:
                    4a:cb:76:4a:1b:12:97:95:9a:62:53:f9:9b:3d:99:
                    34:c4:2c:15:62:85:cb:c2:a1:88:74:a1:0d:fb:40:
                    de:7c:71:67:2c:7c:46:48:f1:f0:1e:65:97:34:e7:
                    f2:ef:0f:d6:ce:32:25:7f:6b:00:c1:3a:01:4b:70:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D9:79:94:9C:4F:61:A0:47:72:D5:A5:8F:13:13:D4:62:3F:B9:ED
            X509v3 Authority Key Identifier:
                keyid:2D:58:FB:0A:D6:CB:4C:FD:F7:36:47:91:D1:43:5A:D4:8C:67:5D:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D58FB0AD6CB4CFDF7364791D1435AD48C675D22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NTCL/0/3130332e3134302e3233322e302f32342d3234203d3e203332323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1f:bd:1d:f6:dc:88:5a:86:85:87:3f:37:03:5d:97:ea:95:
         03:b2:61:10:bb:67:10:47:bd:ff:0b:4a:1b:67:12:42:6e:72:
         9d:24:67:36:0d:1b:44:21:9f:44:a2:ff:0d:45:c5:c1:c1:ea:
         95:1f:79:ab:7f:d8:d4:84:b4:20:3f:ef:ee:8d:1f:6d:2e:d7:
         5a:41:f6:5e:96:c1:a9:f4:03:7e:c8:d5:aa:40:67:7d:14:47:
         54:cf:5b:a5:84:19:72:aa:93:f1:89:50:94:c0:de:30:8e:00:
         8f:45:62:a6:be:24:c4:48:3b:df:73:51:bd:af:ae:b0:4e:4b:
         4d:14:1f:bd:f9:4b:dd:51:3a:45:d8:df:e5:ba:1f:75:82:03:
         59:24:ea:4c:97:03:71:89:8f:3a:97:eb:8c:1f:eb:8b:20:28:
         95:7c:01:6b:15:03:73:58:4e:bd:13:f0:82:57:db:7d:0f:12:
         76:63:aa:9e:11:64:e2:b4:e8:a1:4f:bc:e1:e0:af:d4:d0:04:
         fb:3e:7c:9b:56:14:49:76:61:6b:6a:64:20:52:25:b2:63:d9:
         ad:3b:51:51:89:9b:0e:10:ca:b1:2a:33:6e:2e:21:bc:e0:d0:
         93:22:88:28:c1:44:20:0c:d7:29:f8:f6:2e:3e:bd:c1:35:e5:
         ff:a0:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:13 2026 by rpki-client