Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e3130322e302f32342d3234203d3e2034373831.roa
File:                     3231302e36332e3130322e302f32342d3234203d3e2034373831.roa (raw, json)
Hash identifier:          GHaw+CjnUR7UTaF17geosdaWBptieeQMfmtnq2Q4EgQ=
Subject key identifier:   0D:C5:D9:9C:EF:E5:5E:3D:83:8C:6E:FC:84:71:51:C8:2A:F4:D2:70
Certificate issuer:       /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
Certificate serial:       14D25BFFDE0008419EE43A32383831AF7230C54A
Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e3130322e302f32342d3234203d3e2034373831.roa
Signing time:             Mon 11 May 2026 17:06:39 +0000
ROA not before:           Mon 11 May 2026 17:01:39 +0000
ROA not after:            Mon 10 May 2027 17:06:39 +0000
asID:                     4781
IP address blocks:        210.63.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl
                          rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d2:5b:ff:de:00:08:41:9e:e4:3a:32:38:38:31:af:72:30:c5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D
        Validity
            Not Before: May 11 17:01:39 2026 GMT
            Not After : May 10 17:06:39 2027 GMT
        Subject: CN=0DC5D99CEFE55E3D838C6EFC847151C82AF4D270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:1e:5d:89:f2:18:20:8f:97:3a:b1:ea:c7:
                    9e:38:28:8e:2b:b5:43:ea:a3:3f:81:d0:d0:50:85:
                    e1:20:79:dc:28:1b:42:82:39:73:6f:fc:0d:7a:19:
                    89:d1:82:4d:92:33:06:a3:2b:32:cf:62:6a:40:df:
                    ef:e0:45:c1:83:f2:04:0a:c7:fe:2a:27:8d:a4:7a:
                    a4:13:67:ae:c3:72:98:b4:b9:cb:ad:11:6d:39:f7:
                    49:d0:ca:60:2f:6f:6d:63:5d:f5:ba:17:a1:71:74:
                    9c:8d:11:27:12:c5:30:c7:74:81:76:2c:05:32:b7:
                    52:74:f6:8d:7b:68:75:1c:03:3c:8d:c5:bc:eb:b5:
                    98:eb:8a:a2:1c:a0:ab:95:9d:ad:54:70:6e:03:ed:
                    94:08:dd:86:c5:f4:fe:ed:df:0d:f5:fa:b1:02:68:
                    86:14:88:9f:44:53:51:02:21:75:ec:fc:2b:46:17:
                    da:b8:a6:1a:a7:09:fa:14:5a:bc:53:5e:ea:7d:2a:
                    b5:76:c3:23:a5:0a:1f:35:ef:d0:e4:14:18:1f:fb:
                    38:84:88:4c:d7:4e:dd:60:c8:0a:a7:6b:20:b9:22:
                    15:a4:54:51:38:f7:90:c3:50:71:33:3f:97:c3:c0:
                    e1:4e:0d:69:72:43:a6:2c:e0:73:c2:97:f0:e1:51:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:D9:9C:EF:E5:5E:3D:83:8C:6E:FC:84:71:51:C8:2A:F4:D2:70
            X509v3 Authority Key Identifier:
                keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e3130322e302f32342d3234203d3e2034373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.63.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:46:13:e1:be:7e:13:cb:cf:84:9f:dd:38:c4:6c:1e:0d:50:
         00:76:7d:50:65:a6:b4:dd:44:e3:e4:83:58:f4:ec:f8:95:51:
         c6:af:04:8f:81:aa:b0:60:bb:b4:68:b9:78:8a:46:eb:1e:33:
         21:66:e1:a6:ef:60:3d:65:0f:16:42:05:64:67:41:0b:99:b8:
         0f:77:34:e6:a9:a5:84:c8:d1:95:fe:dd:2c:4d:5b:73:e3:b6:
         76:77:0f:0e:ea:7c:ff:29:e0:38:76:d5:21:e0:3e:ed:84:2b:
         4b:b7:2a:44:e4:d9:a4:7a:77:87:7c:6d:fb:87:36:c9:93:c6:
         73:ef:1e:b6:10:a6:a8:d9:02:40:f2:d5:bd:6a:28:10:82:ec:
         ee:c7:48:fe:d9:5d:c8:db:5f:ce:21:fa:dc:15:0e:0e:2e:60:
         e0:8f:61:50:d2:ee:42:de:0a:93:b1:8a:18:da:df:43:b4:9f:
         f1:48:bf:fd:82:e1:7a:1c:6f:9c:0a:9c:4c:a0:21:28:52:8d:
         41:9d:e3:29:5a:05:ee:72:0e:83:c4:00:de:a4:5a:45:66:ce:
         3b:de:22:2c:97:58:c2:ed:d0:15:82:d0:8e:8b:11:1a:e0:d3:
         6c:9e:ff:e4:e8:62:ae:8e:ee:2c:6f:94:6c:aa:ad:ac:ab:9d:
         6a:d9:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:02 2026 by rpki-client