Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NWCATVISP/0/3130332e3132362e3235322e302f32322d3234203d3e203138303436.roa
File:                     3130332e3132362e3235322e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier:          0p2C5UFLTCbfIwJPIw4v0QPxsj3Q6BFbv279Z9N1VQ8=
Subject key identifier:   0A:88:11:4B:F2:CA:AA:02:89:F3:A9:08:8C:43:6A:51:63:B5:9B:66
Certificate issuer:       /CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
Certificate serial:       2ED220EE2FD5D4FFF6D8FB09033E6CF359295FB0
Authority key identifier: F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/3130332e3132362e3235322e302f32322d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:08:58 +0000
ROA not before:           Mon 11 May 2026 17:03:58 +0000
ROA not after:            Mon 10 May 2027 17:08:58 +0000
asID:                     18046
IP address blocks:        103.126.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl
                          rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d2:20:ee:2f:d5:d4:ff:f6:d8:fb:09:03:3e:6c:f3:59:29:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CDC8123E8195E3CCA82D01E8769EFA603F6432
        Validity
            Not Before: May 11 17:03:58 2026 GMT
            Not After : May 10 17:08:58 2027 GMT
        Subject: CN=0A88114BF2CAAA0289F3A9088C436A5163B59B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:b0:d1:d5:bc:ab:34:2a:9d:80:d5:8a:90:
                    03:c3:66:a7:1b:9a:33:b4:66:1a:b7:6a:88:82:4c:
                    8b:4b:ca:9e:d7:ea:f9:09:07:4e:9a:05:bb:d0:5f:
                    69:04:46:2e:0b:54:bf:5e:f0:3d:80:1f:50:b2:8c:
                    bf:3e:f9:05:0b:82:e8:0d:83:b3:7b:ec:b9:b3:5f:
                    4c:2b:e4:7e:0b:20:fd:ce:a8:99:04:6e:27:f8:3c:
                    88:d0:2d:73:54:28:6d:25:95:4f:82:37:6f:84:c5:
                    10:2a:1b:c9:79:3d:4e:12:7d:5d:a9:b7:94:04:96:
                    8e:c6:2c:04:07:61:9c:4a:37:32:e8:11:69:9d:54:
                    d5:fd:df:79:29:a0:46:26:f9:1c:3b:32:e8:23:cd:
                    2d:32:fa:4e:a2:df:05:5b:fc:1b:38:a4:31:c0:9c:
                    82:b7:e2:ca:6d:be:80:72:c5:a2:86:a3:32:c0:07:
                    d4:4f:58:12:ea:58:89:3c:94:08:e7:1a:dd:ec:24:
                    4d:f9:ce:e5:f0:17:9d:69:0e:0d:34:04:77:5c:a1:
                    7d:76:ac:66:75:23:85:a7:97:2e:3b:64:1e:5c:d1:
                    04:4c:ff:09:e9:64:a1:8d:42:48:a2:ba:a6:40:51:
                    b2:6a:52:1b:3f:5f:ac:bd:fe:d8:a4:b0:07:f7:cd:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:88:11:4B:F2:CA:AA:02:89:F3:A9:08:8C:43:6A:51:63:B5:9B:66
            X509v3 Authority Key Identifier:
                keyid:F5:CD:C8:12:3E:81:95:E3:CC:A8:2D:01:E8:76:9E:FA:60:3F:64:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5CDC8123E8195E3CCA82D01E8769EFA603F6432.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NWCATVISP/0/3130332e3132362e3235322e302f32322d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:cf:c0:af:eb:23:ff:20:6c:91:f2:f1:4a:e0:e0:6b:45:
         52:bd:2e:a6:13:35:67:b9:14:1a:6e:4c:7a:30:db:73:ed:d7:
         a8:b7:0a:ee:60:6d:e2:0d:7a:ab:d7:8a:67:c5:9c:9a:32:95:
         83:52:eb:d9:a0:68:37:f7:e6:45:50:8d:24:2c:ef:9f:0a:24:
         e6:2e:a8:6d:8e:cb:0b:8a:d2:0f:08:be:d8:8e:e0:34:55:2a:
         c0:05:5f:21:b4:77:3b:41:67:0c:aa:a5:02:39:1c:79:89:0e:
         59:e3:4a:1f:6c:be:fa:8f:24:3d:77:ff:b5:09:65:9c:26:21:
         05:a7:b7:fb:53:97:de:a5:e3:66:7e:39:db:5a:51:05:7b:93:
         6f:b6:63:60:76:83:7d:0d:fc:40:ef:4e:79:98:d8:ff:f7:88:
         9c:47:f0:90:7a:0c:fc:9c:6a:eb:99:cd:c1:fa:56:60:6a:73:
         00:94:8d:36:6a:c1:c8:85:1f:e1:4f:00:0a:2d:2e:4d:51:0f:
         3a:ad:c4:12:35:46:59:c5:04:61:eb:dc:41:7a:1d:21:74:96:
         f6:75:f6:31:9d:90:81:49:3b:c7:5e:e9:93:13:db:63:85:4c:
         fa:9a:39:0b:56:fd:86:ba:9d:1e:33:cd:f2:ce:ea:a6:6a:5f:
         09:54:5f:54
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIULtIg7i/V1P/22PsJAz5s81kpX7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDREM4MTIzRTgxOTVFM0NDQTgyRDAxRTg3NjlFRkE2
MDNGNjQzMjAeFw0yNjA1MTExNzAzNThaFw0yNzA1MTAxNzA4NThaMDMxMTAvBgNV
BAMTKDBBODgxMTRCRjJDQUFBMDI4OUYzQTkwODhDNDM2QTUxNjNCNTlCNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConrDR1byrNCqdgNWKkAPDZqcb
mjO0Zhq3aoiCTItLyp7X6vkJB06aBbvQX2kERi4LVL9e8D2AH1CyjL8++QULgugN
g7N77LmzX0wr5H4LIP3OqJkEbif4PIjQLXNUKG0llU+CN2+ExRAqG8l5PU4SfV2p
t5QElo7GLAQHYZxKNzLoEWmdVNX933kpoEYm+Rw7MugjzS0y+k6i3wVb/Bs4pDHA
nIK34sptvoByxaKGozLAB9RPWBLqWIk8lAjnGt3sJE35zuXwF51pDg00BHdcoX12
rGZ1I4Wnly47ZB5c0QRM/wnpZKGNQkiiuqZAUbJqUhs/X6y9/tiksAf3zVy/AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUCogRS/LKqgKJ86kIjENqUWO1m2YwHwYDVR0j
BBgwFoAU9c3IEj6BlePMqC0B6Hae+mA/ZDIwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTldDQVRW
SVNQLzAvRjVDREM4MTIzRTgxOTVFM0NDQTgyRDAxRTg3NjlFRkE2MDNGNjQzMi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GNUNEQzgxMjNFODE5NUUzQ0NBODJEMDFF
ODc2OUVGQTYwM0Y2NDMyLmNlcjCBgQYIKwYBBQUHAQsEdTBzMHEGCCsGAQUFBzAL
hmVyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05XQ0FUVklTUC8wLzMxMzAz
MzJlMzEzMjM2MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzAz
NDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ378MA0GCSqGSIb3DQEBCwUAA4IBAQBcZ8/Ar+sj/yBs
kfLxSuDga0VSvS6mEzVnuRQabkx6MNtz7deotwruYG3iDXqr14pnxZyaMpWDUuvZ
oGg39+ZFUI0kLO+fCiTmLqhtjssLitIPCL7YjuA0VSrABV8htHc7QWcMqqUCORx5
iQ5Z40ofbL76jyQ9d/+1CWWcJiEFp7f7U5fepeNmfjnbWlEFe5NvtmNgdoN9DfxA
7055mNj/94icR/CQegz8nGrrmc3B+lZganMAlI02asHIhR/hTwAKLS5NUQ86rcQS
NUZZxQRh69xBeh0hdJb2dfYxnZCBSTvHXumTE9tjhUz6mjkLVv2Gup0eM83yzuqm
al8JVF9U
-----END CERTIFICATE-----
Generated at Wed May 13 21:17:23 2026 by rpki-client