Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIANGYU/0/3130332e3137352e3235352e302f32342d3234203d3e20313430323134.roa
File:                     3130332e3137352e3235352e302f32342d3234203d3e20313430323134.roa (raw, json)
Hash identifier:          U+U3TE1+aqEG2dNbLEwYnuusmfUHp3Crw3DZOdcMWq4=
Subject key identifier:   D6:71:F7:37:41:EB:FD:CD:A0:A3:DE:E0:0B:26:EA:0B:28:A4:4D:AB
Certificate issuer:       /CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F
Certificate serial:       367154416A20BC1649748D0D96ED993643080653
Authority key identifier: 1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIANGYU/0/3130332e3137352e3235352e302f32342d3234203d3e20313430323134.roa
Signing time:             Mon 11 May 2026 17:56:08 +0000
ROA not before:           Mon 11 May 2026 17:51:08 +0000
ROA not after:            Mon 10 May 2027 17:56:08 +0000
asID:                     140214
IP address blocks:        103.175.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl
                          rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:37:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:71:54:41:6a:20:bc:16:49:74:8d:0d:96:ed:99:36:43:08:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F8D4CE11E68D7B343F492770E897CADC2157E7F
        Validity
            Not Before: May 11 17:51:08 2026 GMT
            Not After : May 10 17:56:08 2027 GMT
        Subject: CN=D671F73741EBFDCDA0A3DEE00B26EA0B28A44DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:a9:37:87:23:2c:9a:7b:91:a8:17:b3:da:
                    44:69:8f:48:ea:d8:ce:c7:f9:de:7f:2e:b3:03:2c:
                    53:a2:99:6e:88:92:c5:c6:d8:38:3f:07:16:de:d5:
                    f7:72:bd:9a:09:50:49:a5:e4:88:96:59:c7:cc:50:
                    22:00:07:39:67:7f:25:0a:ec:0a:00:d7:0e:41:54:
                    ac:e4:a3:e5:ad:43:73:df:49:76:1f:71:87:2d:dc:
                    e1:28:a3:11:6f:ea:f3:4c:90:76:1a:fa:01:cf:5f:
                    65:36:e3:52:5c:0b:4e:4b:89:91:32:64:cd:69:f1:
                    d1:15:19:8b:fa:1e:3b:df:54:d9:fd:54:65:50:fc:
                    96:38:85:3a:db:5e:46:c4:4d:d4:94:52:34:f8:d6:
                    a3:06:be:63:68:bd:a1:22:a4:e4:c0:3b:65:f2:75:
                    aa:c7:0f:a3:95:67:ee:da:4e:f1:67:8b:e1:74:38:
                    f7:6c:4d:dc:41:95:61:ca:e1:37:05:3f:e2:46:aa:
                    1e:d1:32:d6:1e:09:83:45:fe:04:56:5a:18:31:3d:
                    49:39:88:ed:2d:f6:9d:4e:21:49:08:86:af:dd:72:
                    10:e5:86:53:b4:45:60:11:66:c2:82:1b:96:12:c1:
                    87:2d:5d:fa:31:e5:41:13:0a:f8:45:61:56:e4:99:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:71:F7:37:41:EB:FD:CD:A0:A3:DE:E0:0B:26:EA:0B:28:A4:4D:AB
            X509v3 Authority Key Identifier:
                keyid:1F:8D:4C:E1:1E:68:D7:B3:43:F4:92:77:0E:89:7C:AD:C2:15:7E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/1F8D4CE11E68D7B343F492770E897CADC2157E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1F8D4CE11E68D7B343F492770E897CADC2157E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIANGYU/0/3130332e3137352e3235352e302f32342d3234203d3e20313430323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:38:56:7a:5a:bd:59:e6:94:65:cb:a7:7f:ef:50:32:5a:
         21:13:b3:dd:13:1f:a8:23:16:a0:41:0c:9a:00:62:95:30:47:
         9c:43:4c:59:08:9d:a4:0f:9c:e6:9c:76:d7:90:2a:11:47:35:
         08:9a:0d:88:e1:b4:56:0d:d9:40:b4:6c:7e:c9:57:58:43:46:
         e5:ca:5c:f5:47:7e:2a:c5:2e:b7:99:84:cf:fd:d2:c4:57:74:
         46:b7:ae:a4:15:4f:ae:c9:c7:9c:c4:43:26:87:d7:e8:85:6e:
         77:e3:6e:f8:6f:85:2f:c0:08:54:bb:80:96:65:79:66:bc:aa:
         23:3c:a1:a4:1a:9d:69:52:7d:7b:5b:00:66:7e:d4:69:5d:1b:
         c8:7b:e2:bc:8a:8c:bb:e8:b3:3a:42:da:5d:9f:81:b5:3c:49:
         bb:8a:ad:0e:8b:94:26:df:fc:7e:15:ef:22:ef:b8:e4:2b:bb:
         f6:7d:29:c9:ab:e2:65:44:9c:ef:ea:26:3c:bc:15:f2:c5:aa:
         9b:7e:b9:03:4d:b5:8d:cf:20:f5:e6:cb:f2:e7:ae:3a:55:8f:
         2a:47:48:de:33:38:3a:e1:45:eb:7b:a2:76:1e:f7:aa:9c:3d:
         1d:b7:67:ad:1a:3a:31:be:da:d2:2a:e0:8f:48:ec:64:6a:f3:
         2c:6f:41:ea
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUNnFUQWogvBZJdI0Nlu2ZNkMIBlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY4RDRDRTExRTY4RDdCMzQzRjQ5Mjc3MEU4OTdDQURD
MjE1N0U3RjAeFw0yNjA1MTExNzUxMDhaFw0yNzA1MTAxNzU2MDhaMDMxMTAvBgNV
BAMTKEQ2NzFGNzM3NDFFQkZEQ0RBMEEzREVFMDBCMjZFQTBCMjhBNDREQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+6k3hyMsmnuRqBez2kRpj0jq
2M7H+d5/LrMDLFOimW6IksXG2Dg/Bxbe1fdyvZoJUEml5IiWWcfMUCIABzlnfyUK
7AoA1w5BVKzko+WtQ3PfSXYfcYct3OEooxFv6vNMkHYa+gHPX2U241JcC05LiZEy
ZM1p8dEVGYv6HjvfVNn9VGVQ/JY4hTrbXkbETdSUUjT41qMGvmNovaEipOTAO2Xy
darHD6OVZ+7aTvFni+F0OPdsTdxBlWHK4TcFP+JGqh7RMtYeCYNF/gRWWhgxPUk5
iO0t9p1OIUkIhq/dchDlhlO0RWARZsKCG5YSwYctXfox5UETCvhFYVbkmdpHAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU1nH3N0Hr/c2go97gCybqCyikTaswHwYDVR0j
BBgwFoAUH41M4R5o17ND9JJ3Dol8rcIVfn8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lBTkdZ
VS8wLzFGOEQ0Q0UxMUU2OEQ3QjM0M0Y0OTI3NzBFODk3Q0FEQzIxNTdFN0YuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMUY4RDRDRTExRTY4RDdCMzQzRjQ5Mjc3MEU4
OTdDQURDMjE1N0U3Ri5jZXIwgYEGCCsGAQUFBwELBHUwczBxBggrBgEFBQcwC4Zl
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUFOR1lVLzAvMzEzMDMzMmUz
MTM3MzUyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDMyMzEz
NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGev/zANBgkqhkiG9w0BAQsFAAOCAQEAEcs4VnpavVnmlGXL
p3/vUDJaIROz3RMfqCMWoEEMmgBilTBHnENMWQidpA+c5px215AqEUc1CJoNiOG0
Vg3ZQLRsfslXWENG5cpc9Ud+KsUut5mEz/3SxFd0RreupBVPrsnHnMRDJofX6IVu
d+Nu+G+FL8AIVLuAlmV5ZryqIzyhpBqdaVJ9e1sAZn7UaV0byHvivIqMu+izOkLa
XZ+BtTxJu4qtDouUJt/8fhXvIu+45Cu79n0pyaviZUSc7+omPLwV8sWqm365A021
jc8g9ebL8ueuOlWPKkdI3jM4OuFF63uidh73qpw9HbdnrRo6Mb7a0irgj0jsZGrz
LG9B6g==
-----END CERTIFICATE-----
Generated at Wed May 13 21:15:14 2026 by rpki-client