Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa
File:                     3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          IfSDDsILyDRxAjm+/0ybBUR0UiUpBoakPK/0JXTDCfg=
Subject key identifier:   24:99:CE:71:DA:65:B4:49:9C:FC:7C:5E:A6:CF:AE:96:DD:4A:2C:64
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       5BE94535F2E5E20A4A287DB7D68CDAC9475AE193
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:36:34 +0000
ROA not before:           Mon 11 May 2026 17:31:34 +0000
ROA not after:            Mon 10 May 2027 17:36:34 +0000
asID:                     134823
IP address blocks:        103.208.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e9:45:35:f2:e5:e2:0a:4a:28:7d:b7:d6:8c:da:c9:47:5a:e1:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: May 11 17:31:34 2026 GMT
            Not After : May 10 17:36:34 2027 GMT
        Subject: CN=2499CE71DA65B4499CFC7C5EA6CFAE96DD4A2C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:91:f2:e1:ef:8d:5b:b2:1e:7b:24:65:bb:8a:
                    0a:e2:b7:02:6f:bb:7b:98:a9:42:4d:65:10:38:eb:
                    c3:31:66:39:07:6d:2a:13:ff:13:db:35:a2:6d:0a:
                    00:db:b9:9f:43:45:a7:f4:35:e1:10:33:82:2e:6f:
                    c9:41:94:3a:8e:31:a3:cf:e2:be:a4:44:79:a9:f9:
                    78:5a:bb:fa:3d:db:e0:59:6c:74:61:65:5c:30:53:
                    35:cb:5b:b2:c8:d8:a1:7a:62:72:3f:f7:fa:f4:fa:
                    b8:55:31:91:0a:10:a9:3e:9d:12:28:4a:13:92:e9:
                    5f:89:28:6e:a3:bf:be:40:f7:02:13:3f:72:9d:53:
                    3f:de:64:af:e7:62:00:8b:c6:b4:01:5c:37:3b:b9:
                    9e:29:a0:a7:1e:67:5c:46:e3:99:61:96:c0:76:c3:
                    0a:12:38:38:fb:49:1b:b2:8e:1b:1f:70:b0:2d:b3:
                    8b:aa:69:d3:44:33:ed:35:8c:5f:66:f4:75:3e:72:
                    89:a6:78:c8:5c:1e:cf:97:0f:2a:82:66:04:8b:ac:
                    9f:df:37:2e:b0:7e:25:79:fd:92:f8:c7:9a:57:67:
                    61:96:66:9c:44:cf:8c:4f:cc:52:46:f3:44:c7:f1:
                    62:2c:3d:60:55:a3:4a:43:ca:c3:7a:7f:e1:f9:26:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:99:CE:71:DA:65:B4:49:9C:FC:7C:5E:A6:CF:AE:96:DD:4A:2C:64
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3230382e3139362e302f32332d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:47:d0:e0:71:8b:3d:3c:5b:0c:c9:ba:8f:70:da:27:bb:
         7a:1a:66:a6:3a:e7:40:e9:d9:fa:90:d6:c9:9d:06:8b:df:4f:
         75:5a:fa:a2:76:6e:da:70:33:b1:d1:c0:d5:43:c0:11:24:70:
         0f:90:6c:16:83:0d:cc:c8:26:79:7d:91:78:d1:37:59:2c:07:
         5a:99:8c:52:74:dd:db:fd:95:27:73:64:3f:ec:19:9b:36:a3:
         1c:e8:da:47:5b:5d:4b:f2:8e:04:72:09:27:cf:d9:b0:64:e1:
         64:94:1f:92:f7:d1:8f:4a:ac:fa:64:69:50:d2:18:f0:7e:75:
         ba:a9:66:42:d4:4a:05:25:86:c3:73:01:f8:aa:98:11:38:57:
         60:da:99:b9:25:c0:ac:af:38:17:77:16:b7:c5:ff:8a:2a:89:
         65:1d:36:48:d0:76:78:84:80:c1:75:50:13:b6:06:b5:e0:24:
         f2:e6:0f:fb:36:f8:da:cb:6b:e8:e4:27:0b:18:6b:d7:df:3e:
         58:77:58:d8:1e:30:b9:37:d3:23:f0:1f:87:60:41:97:64:5c:
         59:c0:99:31:88:9e:72:9c:04:49:52:33:64:b9:fd:2e:80:29:
         d0:5d:5a:ef:3a:04:78:1d:93:4c:f3:98:70:1b:4c:2c:72:a8:
         02:5c:09:10
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUW+lFNfLl4gpKKH231ozayUda4ZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE
MTQ0RkVBRTAeFw0yNjA1MTExNzMxMzRaFw0yNzA1MTAxNzM2MzRaMDMxMTAvBgNV
BAMTKDI0OTlDRTcxREE2NUI0NDk5Q0ZDN0M1RUE2Q0ZBRTk2REQ0QTJDNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0kfLh741bsh57JGW7igritwJv
u3uYqUJNZRA468MxZjkHbSoT/xPbNaJtCgDbuZ9DRaf0NeEQM4Iub8lBlDqOMaPP
4r6kRHmp+Xhau/o92+BZbHRhZVwwUzXLW7LI2KF6YnI/9/r0+rhVMZEKEKk+nRIo
ShOS6V+JKG6jv75A9wITP3KdUz/eZK/nYgCLxrQBXDc7uZ4poKceZ1xG45lhlsB2
wwoSODj7SRuyjhsfcLAts4uqadNEM+01jF9m9HU+commeMhcHs+XDyqCZgSLrJ/f
Ny6wfiV5/ZL4x5pXZ2GWZpxEz4xPzFJG80TH8WIsPWBVo0pDysN6f+H5Jm0vAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUJJnOcdpltEmc/Hxeps+ult1KLGQwHwYDVR0j
BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1
QzQ5OUZEMTQ0RkVBRS5jZXIwgYEGCCsGAQUFBwELBHUwczBxBggrBgEFBQcwC4Zl
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRENMLVRXLzAvMzEzMDMzMmUz
MjMwMzgyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNDM4MzIz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWfQxDANBgkqhkiG9w0BAQsFAAOCAQEAQ31H0OBxiz08WwzJ
uo9w2ie7ehpmpjrnQOnZ+pDWyZ0Gi99PdVr6onZu2nAzsdHA1UPAESRwD5BsFoMN
zMgmeX2ReNE3WSwHWpmMUnTd2/2VJ3NkP+wZmzajHOjaR1tdS/KOBHIJJ8/ZsGTh
ZJQfkvfRj0qs+mRpUNIY8H51uqlmQtRKBSWGw3MB+KqYEThXYNqZuSXArK84F3cW
t8X/iiqJZR02SNB2eISAwXVQE7YGteAk8uYP+zb42str6OQnCxhr198+WHdY2B4w
uTfTI/Afh2BBl2RcWcCZMYiecpwESVIzZLn9LoAp0F1a7zoEeB2TTPOYcBtMLHKo
AlwJEA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:52:10 2026 by rpki-client