Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3134382e302f32322d3232203d3e20313331353933.roa
File:                     3130332e34322e3134382e302f32322d3232203d3e20313331353933.roa (raw, json)
Hash identifier:          4QcUoLlti2ubIZElcXrsLJlUdy/U2sz6iF5wdimfIH0=
Subject key identifier:   AA:68:BB:E9:B4:5E:29:0F:15:CC:7D:23:4A:2B:F7:39:30:97:A4:82
Certificate issuer:       /CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
Certificate serial:       348CD8EBC9E25601F7F02AB1533229C11FEFBF1D
Authority key identifier: E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3134382e302f32322d3232203d3e20313331353933.roa
Signing time:             Mon 11 May 2026 17:07:22 +0000
ROA not before:           Mon 11 May 2026 17:02:22 +0000
ROA not after:            Mon 10 May 2027 17:07:22 +0000
asID:                     131593
IP address blocks:        103.42.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl
                          rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8c:d8:eb:c9:e2:56:01:f7:f0:2a:b1:53:32:29:c1:1f:ef:bf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
        Validity
            Not Before: May 11 17:02:22 2026 GMT
            Not After : May 10 17:07:22 2027 GMT
        Subject: CN=AA68BBE9B45E290F15CC7D234A2BF7393097A482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:af:c4:50:25:a0:d0:b9:b0:68:3b:45:ca:
                    d6:d1:3d:5a:af:27:a8:8c:0e:85:4a:50:41:64:cf:
                    ff:b9:16:a9:1a:8d:63:cc:2d:ca:00:de:17:72:a3:
                    36:e7:04:4e:33:5f:fa:a5:6e:5f:36:6f:9f:a9:43:
                    3e:35:c8:d7:0b:bd:2a:11:33:d5:c7:75:a9:c7:f7:
                    8f:6a:24:58:d4:a2:f3:a6:98:4f:a3:8a:a0:e5:a0:
                    99:ea:86:22:75:33:60:a9:27:a3:b7:9c:3b:9f:0c:
                    0e:1f:8d:c9:b1:ff:83:20:29:c4:6f:bb:b9:5d:c0:
                    93:b3:da:f0:b4:87:fa:59:42:fa:03:5f:d8:56:0c:
                    7b:e1:ef:51:9d:c7:6e:b5:fa:e4:7c:cb:37:42:2d:
                    3f:5c:7a:16:d4:b8:db:71:dc:50:76:e3:68:f4:20:
                    a1:f1:f3:4c:42:f9:5e:0d:ea:9a:03:c6:c1:23:1b:
                    14:63:dc:0d:46:37:b3:7a:86:f3:90:0d:f7:d3:c4:
                    07:97:46:60:2d:7d:25:c6:ff:6e:f1:b4:1c:19:2f:
                    2b:14:e8:8d:2b:c2:8b:68:cb:bc:8c:e2:87:20:04:
                    bb:c4:98:12:c5:90:59:11:c5:a8:3a:eb:bb:fc:3d:
                    ae:b5:6d:18:6a:96:b4:87:6f:9a:9c:bc:a8:c2:c3:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:BB:E9:B4:5E:29:0F:15:CC:7D:23:4A:2B:F7:39:30:97:A4:82
            X509v3 Authority Key Identifier:
                keyid:E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3134382e302f32322d3232203d3e20313331353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:8a:b3:2f:a9:4b:69:91:37:86:ae:76:98:13:a3:21:eb:be:
         7e:c1:94:22:29:85:b9:58:f9:6d:e6:f9:1a:11:3c:af:e1:7f:
         b9:d7:a9:ac:50:bc:b5:6a:72:78:49:46:0f:ab:7f:17:70:fa:
         68:61:7b:0a:2c:50:4f:b3:db:20:b0:e0:4c:79:1f:ae:ee:99:
         2f:7b:3f:34:e2:6a:33:d7:b5:bb:4f:84:ec:38:5c:3b:5b:34:
         ae:2b:cf:50:03:11:45:74:a8:6b:0a:6d:8f:47:6e:d9:0e:5f:
         39:ab:42:d9:e0:c6:0c:41:25:17:e8:a0:d2:f6:64:cd:6d:62:
         e6:92:c2:86:77:4e:e2:c4:eb:18:36:3d:99:88:5e:db:23:11:
         9c:1a:17:81:a4:f4:77:0c:76:de:0c:55:ac:78:87:21:45:74:
         f3:c2:33:f1:23:94:67:2c:c3:a9:52:50:97:f7:e6:d2:b2:56:
         11:69:90:a7:d9:a0:63:00:62:4b:ce:2f:b2:a7:93:85:02:96:
         bf:45:ff:0f:52:1d:bf:0b:e5:d7:67:f6:9c:f5:d1:03:1f:bc:
         23:f0:d2:5c:8a:c9:2a:97:ed:8d:08:6a:68:ab:e4:c0:f6:81:
         d5:00:15:27:e2:78:c7:cf:2e:2d:0a:1b:0f:6c:53:40:97:a5:
         07:3c:7c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:03 2026 by rpki-client