Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa
File:                     3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          TWQAxE4TuK638NNKsOzZRvFCTF3qf+yBP5Tq3YLqYEs=
Subject key identifier:   B7:BD:C2:92:13:65:15:4A:89:42:C4:EE:BD:6B:75:07:F6:CB:24:09
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       165183F8A31B82CAF1E4CA3772AD271A4BBBF1AF
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:37:45 +0000
ROA not before:           Mon 11 May 2026 17:32:45 +0000
ROA not after:            Mon 10 May 2027 17:37:45 +0000
asID:                     134823
IP address blocks:        103.123.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:51:83:f8:a3:1b:82:ca:f1:e4:ca:37:72:ad:27:1a:4b:bb:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: May 11 17:32:45 2026 GMT
            Not After : May 10 17:37:45 2027 GMT
        Subject: CN=B7BDC2921365154A8942C4EEBD6B7507F6CB2409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:8f:0a:5a:ce:d6:42:4b:b8:ae:6e:d1:4f:
                    83:86:39:46:f2:74:95:e4:09:a2:db:44:b7:79:9b:
                    16:8b:e3:01:34:d8:95:82:f0:43:32:52:3c:bf:5a:
                    87:9f:4f:cc:1a:bc:64:98:25:3c:ce:7b:d6:f3:29:
                    64:64:86:cd:5f:64:84:8e:38:e6:28:e6:d1:49:00:
                    c3:ea:be:b8:40:1a:7b:a7:0d:66:5c:39:15:40:32:
                    72:6b:92:39:cb:75:38:c9:65:06:45:77:f1:28:c0:
                    90:75:61:92:79:4d:29:e0:d8:9c:62:1e:f0:92:be:
                    2d:0d:d3:eb:e6:bd:61:0f:4d:ec:8c:83:ea:8f:8b:
                    5b:e4:78:3e:76:72:ee:e2:6a:0d:a6:3e:91:0c:3a:
                    a6:9e:3d:31:11:be:f4:db:76:1a:42:aa:e8:04:ab:
                    08:70:94:ed:d2:08:3b:77:b1:58:08:8f:5c:33:00:
                    80:8e:aa:e9:30:a4:a2:b6:16:5d:1c:b9:65:a3:2c:
                    d4:8c:4c:36:81:ee:e5:e9:3f:52:53:4e:59:2b:c5:
                    97:8e:26:4c:41:04:73:36:09:fa:b8:5a:29:17:6e:
                    90:0a:f9:fa:3d:76:85:36:1c:ad:ae:a0:34:81:36:
                    a2:25:fe:09:22:41:15:43:58:3a:8b:ad:b7:f8:54:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BD:C2:92:13:65:15:4A:89:42:C4:EE:BD:6B:75:07:F6:CB:24:09
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3132332e3133322e302f32322d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:86:7f:50:e3:31:e1:76:7b:5e:1c:d3:80:0a:b3:a8:f9:
         ae:e5:8a:12:1b:3e:94:5b:70:de:ec:34:16:c3:9e:b1:79:f0:
         c1:c2:f9:9e:f1:29:58:24:6e:3f:b6:9a:3b:ff:97:33:29:cc:
         bf:1b:76:29:e3:13:1f:a1:2a:95:6e:dc:db:66:69:81:88:1e:
         5c:56:e7:55:4c:45:12:3a:2b:e7:93:c9:bc:06:a0:b2:38:15:
         e2:04:cb:39:ed:23:f1:08:18:b1:73:a5:25:15:58:be:14:39:
         95:92:a9:8b:12:57:a6:94:ac:fd:07:3d:b0:65:99:ea:d0:99:
         98:46:48:30:be:d9:90:e6:cd:6b:cc:03:f1:b8:77:1d:02:e2:
         c7:d5:f6:dc:e2:84:ec:27:0d:bc:c0:38:a8:e8:3e:27:c5:72:
         16:39:fd:03:fd:24:6d:fd:5c:b2:29:0a:39:65:ac:dd:e0:69:
         a1:4a:6d:c8:43:16:5a:c3:fe:0d:01:a1:f7:57:6d:fa:c8:cd:
         64:05:ed:fc:5a:a1:b2:35:84:67:bb:a6:bd:48:05:1d:d7:a7:
         40:6f:88:39:55:84:33:e9:3e:cc:a7:be:93:c2:2a:e4:04:b9:
         6b:64:0f:1c:c3:68:6a:48:e8:10:98:6c:53:46:4a:35:c6:d1:
         b1:a5:79:94
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUFlGD+KMbgsrx5Mo3cq0nGku78a8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE
MTQ0RkVBRTAeFw0yNjA1MTExNzMyNDVaFw0yNzA1MTAxNzM3NDVaMDMxMTAvBgNV
BAMTKEI3QkRDMjkyMTM2NTE1NEE4OTQyQzRFRUJENkI3NTA3RjZDQjI0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrI8KWs7WQku4rm7RT4OGOUby
dJXkCaLbRLd5mxaL4wE02JWC8EMyUjy/WoefT8wavGSYJTzOe9bzKWRkhs1fZISO
OOYo5tFJAMPqvrhAGnunDWZcORVAMnJrkjnLdTjJZQZFd/EowJB1YZJ5TSng2Jxi
HvCSvi0N0+vmvWEPTeyMg+qPi1vkeD52cu7iag2mPpEMOqaePTERvvTbdhpCqugE
qwhwlO3SCDt3sVgIj1wzAICOqukwpKK2Fl0cuWWjLNSMTDaB7uXpP1JTTlkrxZeO
JkxBBHM2Cfq4WikXbpAK+fo9doU2HK2uoDSBNqIl/gkiQRVDWDqLrbf4VMrDAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUt73CkhNlFUqJQsTuvWt1B/bLJAkwHwYDVR0j
BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1
QzQ5OUZEMTQ0RkVBRS5jZXIwgYEGCCsGAQUFBwELBHUwczBxBggrBgEFBQcwC4Zl
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRENMLVRXLzAvMzEzMDMzMmUz
MTMyMzMyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzNDM4MzIz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmd7hDANBgkqhkiG9w0BAQsFAAOCAQEAJ26Gf1DjMeF2e14c
04AKs6j5ruWKEhs+lFtw3uw0FsOesXnwwcL5nvEpWCRuP7aaO/+XMynMvxt2KeMT
H6EqlW7c22ZpgYgeXFbnVUxFEjor55PJvAagsjgV4gTLOe0j8QgYsXOlJRVYvhQ5
lZKpixJXppSs/Qc9sGWZ6tCZmEZIML7ZkObNa8wD8bh3HQLix9X23OKE7CcNvMA4
qOg+J8VyFjn9A/0kbf1csikKOWWs3eBpoUptyEMWWsP+DQGh91dt+sjNZAXt/Fqh
sjWEZ7umvUgFHdenQG+IOVWEM+k+zKe+k8Iq5AS5a2QPHMNoakjoEJhsU0ZKNcbR
saV5lA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:52:00 2026 by rpki-client