Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NWCATVISP/0/3130332e3132362e3235322e302f32322d3234203d3e20313331363733.roa
File:                     3130332e3132362e3235322e302f32322d3234203d3e20313331363733.roa (raw, json)
Hash identifier:          XbjewDs3SN7fvoTCze4EnrDIW/wXRnlQHr/V/+JCXtA=
Subject key identifier:   1E:B6:34:7A:60:39:61:63:A4:B2:9F:A1:64:44:08:03:FD:F1:CB:AB
Certificate issuer:       /CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
Certificate serial:       2F88258B85BCA660552924FDABC577BA12288569
Authority key identifier: F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/3130332e3132362e3235322e302f32322d3234203d3e20313331363733.roa
Signing time:             Mon 11 May 2026 17:57:25 +0000
ROA not before:           Mon 11 May 2026 17:52:25 +0000
ROA not after:            Mon 10 May 2027 17:57:25 +0000
asID:                     131673
IP address blocks:        103.126.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl
                          rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:88:25:8b:85:bc:a6:60:55:29:24:fd:ab:c5:77:ba:12:28:85:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
        Validity
            Not Before: May 11 17:52:25 2026 GMT
            Not After : May 10 17:57:25 2027 GMT
        Subject: CN=1EB6347A60396163A4B29FA164440803FDF1CBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:21:a3:51:2f:3b:e6:82:a6:cf:bb:35:78:
                    d6:5c:8f:9f:2c:99:68:c3:0d:6f:e3:f2:57:01:63:
                    df:3c:af:97:92:a9:82:21:03:5e:41:63:f8:cc:66:
                    9a:cc:49:ad:35:65:87:4f:81:88:e7:ad:50:a2:b9:
                    db:18:88:6e:32:1a:d6:eb:84:42:84:2d:f3:6a:cb:
                    2e:70:2f:ae:06:d7:d3:7a:99:b5:86:6d:be:4c:46:
                    99:0a:dd:bb:1a:4e:1e:60:d5:64:f6:3d:b1:6e:38:
                    84:f1:22:e1:33:73:28:38:51:a4:ea:b7:67:4b:77:
                    3b:5e:e6:a0:8a:09:d5:46:28:37:0d:8e:b8:51:34:
                    3f:67:ba:8a:69:b6:22:72:3c:5c:42:20:43:af:50:
                    8c:81:1e:04:8a:28:97:a8:40:7b:42:e7:04:59:d9:
                    c6:0f:1b:c5:56:f6:02:c5:b2:a1:16:9a:fa:b2:20:
                    79:af:6e:c3:e9:05:17:b0:f7:0a:16:e3:2d:34:e7:
                    38:17:9c:b6:70:15:ed:38:b0:e2:f6:99:b3:4f:31:
                    94:b9:97:a9:3a:1e:77:4c:f9:e1:22:2c:7b:ba:f3:
                    5e:ff:c9:8a:4e:1d:f5:56:b5:89:e6:5d:3e:ad:08:
                    0f:13:83:a2:d6:a0:67:1a:c7:c5:4c:e3:9d:b5:5b:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B6:34:7A:60:39:61:63:A4:B2:9F:A1:64:44:08:03:FD:F1:CB:AB
            X509v3 Authority Key Identifier:
                keyid:F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/3130332e3132362e3235322e302f32322d3234203d3e20313331363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:d4:c9:e9:cd:a1:77:99:ae:d5:17:2e:98:53:1c:99:9f:e8:
         2a:40:5e:80:26:50:65:49:e9:c7:b9:f4:ab:1d:83:5a:b5:a4:
         f4:09:0d:b6:a3:f3:64:f6:ac:7e:4c:2d:31:57:0a:33:32:d4:
         33:8b:d9:3a:37:2e:af:f8:02:3c:d0:c4:55:d8:c1:09:a3:f4:
         e5:3f:f1:e5:d5:01:41:15:64:b2:4b:6f:67:a7:4c:bf:f6:80:
         a8:50:3a:a9:09:bd:3d:93:2c:3e:c1:69:76:5f:59:0c:c7:06:
         0d:63:5d:2a:4a:0d:6a:b1:6d:8d:cc:d3:1e:21:b4:ae:7c:46:
         f1:06:26:75:b0:1c:82:3a:e4:5d:1d:55:0b:3d:a1:b0:e2:15:
         dd:e1:6e:8b:d3:d6:0d:e0:4d:ca:16:c0:23:89:b8:3b:e4:58:
         86:44:ee:45:dc:aa:30:16:e2:95:c5:60:4b:54:a5:ea:7f:36:
         9b:a1:22:7d:9a:06:ff:48:a8:4a:e3:e5:6c:a0:6b:a1:4f:54:
         ec:9d:3b:d4:1e:76:0f:9f:71:ec:d3:e2:98:76:01:05:b8:a5:
         e7:f9:aa:7b:dc:f5:00:59:4a:e1:87:83:a7:4e:ea:19:01:98:
         1f:34:95:ea:56:06:50:12:d5:45:23:65:f2:cd:fe:17:fa:fb:
         c1:72:22:e7
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUL4gli4W8pmBVKST9q8V3uhIohWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDREM4MTIzRTgxOTVFM0NDQTgyRDAxRTg3NjlFRkE2
MDNGNjQzMjAeFw0yNjA1MTExNzUyMjVaFw0yNzA1MTAxNzU3MjVaMDMxMTAvBgNV
BAMTKDFFQjYzNDdBNjAzOTYxNjNBNEIyOUZBMTY0NDQwODAzRkRGMUNCQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbiGjUS875oKmz7s1eNZcj58s
mWjDDW/j8lcBY988r5eSqYIhA15BY/jMZprMSa01ZYdPgYjnrVCiudsYiG4yGtbr
hEKELfNqyy5wL64G19N6mbWGbb5MRpkK3bsaTh5g1WT2PbFuOITxIuEzcyg4UaTq
t2dLdzte5qCKCdVGKDcNjrhRND9nuopptiJyPFxCIEOvUIyBHgSKKJeoQHtC5wRZ
2cYPG8VW9gLFsqEWmvqyIHmvbsPpBRew9woW4y005zgXnLZwFe04sOL2mbNPMZS5
l6k6HndM+eEiLHu6817/yYpOHfVWtYnmXT6tCA8Tg6LWoGcax8VM4521W+p1AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUHrY0emA5YWOksp+hZEQIA/3xy6swHwYDVR0j
BBgwFoAU9c3IEj6BlePMqC0B6Hae+mA/ZDIwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTldDQVRW
SVNQLzAvRjVDREM4MTIzRTgxOTVFM0NDQTgyRDAxRTg3NjlFRkE2MDNGNjQzMi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GNUNEQzgxMjNFODE5NUUzQ0NBODJEMDFF
ODc2OUVGQTYwM0Y2NDMyLmNlcjCBgwYIKwYBBQUHAQsEdzB1MHMGCCsGAQUFBzAL
hmdyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05XQ0FUVklTUC8wLzMxMzAz
MzJlMzEzMjM2MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEz
NjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAJnfvwwDQYJKoZIhvcNAQELBQADggEBAIXUyenNoXeZ
rtUXLphTHJmf6CpAXoAmUGVJ6ce59Ksdg1q1pPQJDbaj82T2rH5MLTFXCjMy1DOL
2To3Lq/4AjzQxFXYwQmj9OU/8eXVAUEVZLJLb2enTL/2gKhQOqkJvT2TLD7BaXZf
WQzHBg1jXSpKDWqxbY3M0x4htK58RvEGJnWwHII65F0dVQs9obDiFd3hbovT1g3g
TcoWwCOJuDvkWIZE7kXcqjAW4pXFYEtUpep/NpuhIn2aBv9IqErj5Wyga6FPVOyd
O9Qedg+fcezT4ph2AQW4pef5qnvc9QBZSuGHg6dO6hkBmB80lepWBlAS1UUjZfLN
/hf6+8FyIuc=
-----END CERTIFICATE-----
Generated at Wed May 13 21:17:20 2026 by rpki-client