Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa
File:                     3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa (raw, json)
Hash identifier:          uFajU2b2waTlSxMDI+/JBL3cx222mORnPfMwxN2souI=
Subject key identifier:   C9:B1:8F:68:E2:D4:69:03:92:27:0E:FB:E5:56:EA:39:3C:34:2B:9A
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       70EB9D450C407355DA7E0A106214456A9932939D
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa
Signing time:             Mon 11 May 2026 17:57:38 +0000
ROA not before:           Mon 11 May 2026 17:52:38 +0000
ROA not after:            Mon 10 May 2027 17:57:38 +0000
asID:                     131151
IP address blocks:        103.246.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:eb:9d:45:0c:40:73:55:da:7e:0a:10:62:14:45:6a:99:32:93:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: May 11 17:52:38 2026 GMT
            Not After : May 10 17:57:38 2027 GMT
        Subject: CN=C9B18F68E2D4690392270EFBE556EA393C342B9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a1:fc:a9:15:cf:64:4e:4d:53:a1:12:42:b8:
                    23:99:c5:8a:f2:ca:90:b9:1f:50:78:6c:9c:55:4e:
                    1f:b5:4d:2f:54:16:20:e6:60:2a:29:49:eb:b1:2e:
                    ea:d4:39:90:ce:9e:8c:47:49:60:df:87:74:ad:6e:
                    47:1f:95:1c:c9:16:6a:2a:93:d0:6f:f2:c6:e9:2a:
                    1f:7c:be:1e:5a:92:b0:44:f4:62:a3:4b:a8:5a:d6:
                    c5:9c:1e:29:bf:50:ba:1f:c2:35:2b:e4:ce:d1:35:
                    7e:fa:00:27:e9:ba:78:33:de:63:b5:05:b2:02:9f:
                    f0:d0:58:2f:c8:8a:27:71:2f:34:85:59:a1:a0:69:
                    c9:d0:44:7a:6e:fc:0d:2e:7a:f4:d6:f0:13:8c:5e:
                    84:8b:ce:2a:15:8f:d1:79:24:51:eb:d8:43:60:41:
                    3b:27:de:fc:d8:85:0a:b5:f5:e4:97:9c:fc:80:8a:
                    4a:42:01:e1:0a:cd:b7:e2:6c:80:e9:a2:5f:53:de:
                    51:0d:b7:a0:8d:28:63:b0:73:92:0a:43:4e:88:47:
                    b2:5d:99:fd:af:0e:8f:8c:e6:22:65:82:8a:4a:e7:
                    7d:c4:47:13:ea:ef:59:24:62:f5:6c:32:44:18:30:
                    06:90:0e:df:42:55:0c:b3:bb:cf:fa:6c:2e:32:bc:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:8F:68:E2:D4:69:03:92:27:0E:FB:E5:56:EA:39:3C:34:2B:9A
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3234362e3231382e302f32332d3234203d3e20313331313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:dd:bf:4e:e2:c4:b9:a8:69:4c:24:a0:67:a8:0a:f9:a8:
         71:23:cb:0c:ea:31:80:0e:a3:d2:72:8f:92:b9:21:59:83:0f:
         31:8d:2d:20:e8:bc:5e:f2:e4:c8:ff:67:1c:af:50:07:11:97:
         a6:75:b9:71:bc:79:ba:0a:f7:7c:78:0d:3a:f6:bd:08:d8:4a:
         63:65:40:bc:39:d4:22:f7:28:13:d8:0c:a7:4e:fa:db:d8:6c:
         d9:14:49:90:91:82:1c:30:b6:81:4d:1f:f1:49:dd:99:48:b7:
         8b:86:61:ac:b0:61:c5:cc:17:9e:28:5d:26:ef:67:3c:6f:44:
         15:55:4f:24:51:81:8d:c1:ad:7c:d4:59:65:55:20:78:77:e3:
         cd:10:15:ee:09:25:97:0e:37:29:96:2d:0d:34:ea:c5:e5:ac:
         ad:74:56:e7:a2:f0:92:99:5b:44:96:43:65:7d:f9:9f:5a:1e:
         6d:bf:2f:00:66:6a:e3:d3:47:64:6b:e4:e4:f6:b6:fe:4a:da:
         8a:79:a0:6b:a7:c1:78:0c:87:ac:64:61:39:64:a6:28:a4:db:
         a4:cb:62:3d:61:2c:03:1c:9a:37:95:e5:0b:ed:74:52:4f:ed:
         e9:8f:94:89:2f:b5:a2:b5:66:b4:da:f7:b9:50:52:45:5c:75:
         f5:ef:27:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:06 2026 by rpki-client