Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3134382e302f32342d3234203d3e20313331353933.roa
File:                     3130332e34322e3134382e302f32342d3234203d3e20313331353933.roa (raw, json)
Hash identifier:          ohrVHSNriTR8tKR0tOVKhkgazKeFiBNeVPMFrzycUaY=
Subject key identifier:   8D:B0:08:F7:66:EA:E5:A5:E6:9F:8D:A5:D4:57:7C:50:BA:CC:15:EA
Certificate issuer:       /CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
Certificate serial:       4B542072A73219F83DF9A7062D01EBB00341A2E9
Authority key identifier: E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3134382e302f32342d3234203d3e20313331353933.roa
Signing time:             Mon 11 May 2026 17:07:24 +0000
ROA not before:           Mon 11 May 2026 17:02:24 +0000
ROA not after:            Mon 10 May 2027 17:07:24 +0000
asID:                     131593
IP address blocks:        103.42.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl
                          rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:54:20:72:a7:32:19:f8:3d:f9:a7:06:2d:01:eb:b0:03:41:a2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050
        Validity
            Not Before: May 11 17:02:24 2026 GMT
            Not After : May 10 17:07:24 2027 GMT
        Subject: CN=8DB008F766EAE5A5E69F8DA5D4577C50BACC15EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:e8:a4:13:a1:8f:53:cd:96:ca:0b:da:a9:
                    39:7e:97:60:4a:2c:51:d4:73:1c:61:87:2b:a9:4c:
                    3e:c0:ba:72:9f:42:5d:5d:ef:08:0e:4e:ae:77:de:
                    61:fe:96:6b:bb:5c:8e:b8:ff:0f:0e:93:3b:c5:4d:
                    5c:12:88:82:38:69:2f:54:40:62:5e:10:c4:2b:2c:
                    d8:9a:a0:58:49:85:ec:72:80:23:85:76:17:7c:a5:
                    f8:3a:79:c5:b9:b8:1c:c8:f4:27:e4:38:c4:70:61:
                    d3:1e:38:92:07:be:7c:ea:ec:2f:9b:a9:84:4d:db:
                    06:e4:e2:56:b0:82:3c:33:cd:ee:99:b4:95:40:6b:
                    fa:ba:1b:cf:2c:ad:8a:01:12:5f:ed:d7:0b:c2:8e:
                    92:71:da:8d:f4:78:d0:d6:a1:d5:1d:91:0f:6c:00:
                    89:a9:df:6a:6b:15:0f:9d:1e:59:29:07:b4:2b:22:
                    6a:fd:ea:b8:1e:ec:a2:09:a6:aa:26:50:f2:68:de:
                    95:ce:0c:d1:59:dc:11:20:10:9c:7f:71:b4:82:d5:
                    f5:d5:33:c4:b4:e5:ca:10:f7:8a:54:a6:bc:77:0e:
                    f0:47:b0:70:ce:26:1a:a7:df:9e:3a:0a:4a:e0:ea:
                    31:39:56:d8:71:ff:80:81:4a:33:c7:4b:e2:f5:44:
                    ef:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:08:F7:66:EA:E5:A5:E6:9F:8D:A5:D4:57:7C:50:BA:CC:15:EA
            X509v3 Authority Key Identifier:
                keyid:E0:7C:D9:30:6D:C7:52:AC:CC:75:31:CF:5F:B2:DF:A9:B2:8D:60:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E07CD9306DC752ACCC7531CF5FB2DFA9B28D6050.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PEGATRON/0/3130332e34322e3134382e302f32342d3234203d3e20313331353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:fe:3b:26:86:70:99:91:b9:97:7c:e3:f5:39:21:b9:99:
         8d:02:d8:50:0e:c0:e1:c8:6e:0c:36:a9:6c:29:9e:3b:b6:23:
         e0:de:3f:4e:6b:ab:cd:39:29:b3:f2:84:99:85:05:d0:c6:23:
         67:07:ff:8c:e9:36:79:84:1e:81:90:d4:b5:3a:1b:a3:9b:44:
         fb:d7:cc:33:e4:77:a1:12:6c:e6:38:f0:f3:d2:fd:2f:84:c8:
         72:fd:a1:77:99:70:94:3d:dd:5a:b5:66:2b:ed:1f:4f:94:96:
         4f:8b:6d:93:ef:f0:78:ba:0d:a2:6f:a8:1e:84:93:04:d2:14:
         2f:94:d2:33:61:cc:09:3a:68:f7:4b:e0:72:4e:50:8f:11:57:
         bd:bc:48:a0:07:a7:f1:8c:a5:d0:9e:d4:00:be:39:1c:e3:f5:
         5d:95:e5:ac:de:36:29:19:cc:5c:60:00:b8:cf:c9:7f:5d:2e:
         7d:28:c8:a6:26:b9:09:53:ad:a0:47:22:bd:d9:82:6d:f4:19:
         ec:c6:ef:56:7c:e8:47:a3:c8:a3:d7:ae:18:55:68:8e:95:79:
         72:d1:51:29:79:a4:a2:5e:e4:59:90:34:47:33:f0:7e:18:a7:
         f5:ee:56:09:fa:32:a0:c6:9c:44:74:9d:06:3b:f6:56:ad:92:
         14:2b:63:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:49:43 2026 by rpki-client