Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e203138313738.roa
File:                     3130332e32332e3130382e302f32332d3332203d3e203138313738.roa (raw, json)
Hash identifier:          UFS/Hr7FRpvvD37ViC5Fa6JcMEvAh98z7iSjnL//iSs=
Subject key identifier:   44:7F:05:EB:8E:A5:CF:B2:37:C0:A1:8D:66:1E:EF:E5:E4:37:8E:35
Certificate issuer:       /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial:       772BF1AAEF115D9A9FEF1343B3074EFB724D495B
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e203138313738.roa
Signing time:             Thu 20 Aug 2026 09:04:01 +0000
ROA not before:           Thu 20 Aug 2026 08:59:01 +0000
ROA not after:            Thu 19 Aug 2027 09:04:01 +0000
asID:                     18178
IP address blocks:        103.23.108.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl
                          rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 02:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:2b:f1:aa:ef:11:5d:9a:9f:ef:13:43:b3:07:4e:fb:72:4d:49:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
        Validity
            Not Before: Aug 20 08:59:01 2026 GMT
            Not After : Aug 19 09:04:01 2027 GMT
        Subject: CN=447F05EB8EA5CFB237C0A18D661EEFE5E4378E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:fb:81:27:6a:7f:2b:b6:a1:aa:a1:a0:f2:
                    30:59:94:be:13:a9:fc:1e:51:75:67:31:7f:e0:75:
                    50:5b:6e:88:aa:62:8f:22:c2:e4:ab:1d:7a:77:5b:
                    e2:f4:36:e2:a4:1d:1f:98:59:ec:5d:e5:a3:66:d3:
                    0f:2f:f1:6f:ec:42:96:22:96:94:79:92:d1:69:c2:
                    d1:c8:92:f4:ae:17:22:37:ce:5e:46:71:67:f7:b3:
                    81:1e:60:d9:fe:79:94:0f:8c:1b:bf:0c:0d:cc:71:
                    11:b3:17:5f:c7:7a:dd:25:a9:22:c8:11:ad:db:5f:
                    1a:99:0b:54:18:e0:9a:e8:3b:6d:49:11:1f:c5:6b:
                    c7:8e:02:41:52:1a:82:c9:53:f8:5c:50:19:fd:fa:
                    ca:40:a2:b4:15:46:31:cb:1c:f7:63:78:8b:24:88:
                    e2:bd:1d:bb:15:f4:ed:d6:b3:08:84:74:ce:a1:75:
                    56:24:4e:cd:e0:58:2e:5e:80:10:dd:2c:5c:71:73:
                    1c:09:c4:3f:a6:af:36:79:a8:42:b8:55:f8:c5:f1:
                    c6:d6:a0:e5:1c:92:96:0b:e4:a7:3d:f3:6c:9e:20:
                    eb:02:22:17:60:f9:77:a3:74:43:2a:33:47:e7:06:
                    91:5c:cf:74:91:dc:38:1b:2c:1f:35:33:26:94:30:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7F:05:EB:8E:A5:CF:B2:37:C0:A1:8D:66:1E:EF:E5:E4:37:8E:35
            X509v3 Authority Key Identifier:
                keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e203138313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:bf:50:1d:93:63:1c:95:6c:e8:a6:a9:b2:68:7e:03:69:
         90:f6:ed:a9:fb:c4:1a:32:74:d0:ee:1e:47:9a:42:e1:e2:42:
         21:31:c4:40:cc:3e:1d:85:23:a0:95:d7:8d:15:ca:6c:71:43:
         b4:68:ec:14:0f:a3:fc:4a:81:c5:e6:06:67:79:46:47:f0:4d:
         9f:1a:8b:04:5a:71:e9:8b:e6:af:c9:7b:12:b5:e1:e3:71:c2:
         8a:74:e8:94:df:95:2b:1f:3c:62:5d:d5:7a:96:68:82:d7:4a:
         2d:0c:b3:73:98:28:59:de:a3:ae:47:e1:d4:2e:e3:80:fd:2f:
         98:8d:45:69:2c:cb:7b:1b:61:ac:13:df:f9:4e:25:99:4b:ad:
         16:eb:50:20:3a:de:3e:b4:4a:85:f9:a1:f1:cb:5f:9c:5c:58:
         75:ff:62:3f:a0:97:cd:aa:dd:78:2c:b5:92:4b:e6:ce:50:7d:
         c9:f1:12:9c:97:6f:2f:85:b2:a2:3a:79:e6:db:d0:25:65:3e:
         df:64:36:93:7d:87:d7:22:64:4e:f3:e0:e5:35:9d:fe:1e:3f:
         98:a0:3d:ce:e8:c2:e2:a9:39:3d:95:3e:48:30:3f:5b:53:f3:
         48:86:48:13:1d:e4:d5:ea:07:f1:d3:84:1c:44:f9:61:f9:b0:
         18:9c:2b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:23:28 2026 by rpki-client