Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa
File:                     3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (raw, json)
Hash identifier:          1kBvYL+a/jmHfnypB5Ww163N3nf1rnMp/4w09uNm9ug=
Subject key identifier:   49:23:AF:97:07:F4:83:9A:7D:03:A0:75:9E:6D:F2:70:96:6E:92:C6
Certificate issuer:       /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
Certificate serial:       41916C8807770B36B9C14521BC6221554099F0A9
Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa
Signing time:             Mon 11 May 2026 16:41:44 +0000
ROA not before:           Mon 11 May 2026 16:36:44 +0000
ROA not after:            Mon 10 May 2027 16:41:44 +0000
asID:                     18419
IP address blocks:        103.234.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:91:6c:88:07:77:0b:36:b9:c1:45:21:bc:62:21:55:40:99:f0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D
        Validity
            Not Before: May 11 16:36:44 2026 GMT
            Not After : May 10 16:41:44 2027 GMT
        Subject: CN=4923AF9707F4839A7D03A0759E6DF270966E92C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:58:e8:fb:f3:2d:70:4c:ac:d2:c6:d4:46:0a:
                    1c:05:e5:17:26:ff:f2:e6:7d:6c:f1:6d:66:d4:a5:
                    7d:16:cc:93:78:38:5e:e9:41:28:1f:48:1d:55:b5:
                    4d:7a:d9:74:c8:99:85:37:41:1c:58:48:aa:ab:39:
                    8a:65:43:70:17:cf:3c:b7:6a:a9:c8:77:1d:55:1d:
                    fc:af:23:da:5c:54:1d:e7:5d:1e:07:78:cd:5e:3b:
                    93:2b:0b:76:09:1d:9c:3d:f7:f0:80:c1:50:ee:d6:
                    da:42:35:d3:9b:11:34:0f:a4:0f:42:ae:75:71:27:
                    12:33:32:8d:48:50:70:ae:8b:dc:ec:e5:2c:16:29:
                    db:e0:7a:33:ff:d0:e7:6a:6e:5c:da:89:b7:43:14:
                    a4:bc:c8:90:a7:a9:fa:75:3b:df:ff:89:21:ec:90:
                    2f:06:e8:cd:84:6f:f7:d2:22:fe:61:c4:87:f4:5d:
                    e2:d0:01:40:0a:db:61:ef:27:88:e0:21:c8:7c:f9:
                    bf:25:4b:d6:65:08:57:fc:28:0e:73:34:d3:9e:c8:
                    59:5b:70:55:66:87:07:28:c6:99:36:cb:e3:11:29:
                    23:01:2b:f2:67:da:f9:4b:bd:55:16:ba:dc:40:6d:
                    49:c3:af:75:72:ae:99:ce:f7:04:c3:d4:f3:f4:26:
                    84:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:23:AF:97:07:F4:83:9A:7D:03:A0:75:9E:6D:F2:70:96:6E:92:C6
            X509v3 Authority Key Identifier:
                keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:04:9f:38:3a:02:ee:45:b0:7e:66:db:c9:e6:3b:5e:d7:11:
         90:7b:28:d1:34:ba:b9:16:cc:31:15:be:d0:48:d5:99:a8:76:
         7a:ad:38:97:60:b6:ad:bc:7d:b5:34:a9:65:31:78:92:9b:57:
         23:3f:26:48:34:a7:f3:cc:20:ec:cc:ab:84:b8:ee:9e:15:99:
         c8:66:d2:9a:8b:d9:f8:d6:a8:09:e0:e2:9b:35:34:8a:07:88:
         55:61:44:0d:7c:97:e3:19:4b:d3:1b:51:b1:c7:c4:47:58:a3:
         74:9c:4e:a8:7e:bf:6d:e0:dc:d3:f3:7c:1a:8b:f5:3c:15:9d:
         6c:0d:2e:6b:0c:31:53:3c:55:74:9d:53:3e:30:70:55:1f:1b:
         46:b0:b5:0d:10:a7:da:fb:b0:14:2c:b7:b6:ff:b2:0c:26:29:
         ff:76:14:be:a5:1c:1f:a1:67:0a:ab:18:14:bf:74:f6:6f:d6:
         b0:16:15:72:9f:8b:25:17:dc:8a:a8:95:57:a0:49:b5:9a:14:
         4a:d7:21:2e:3c:fc:86:96:d9:bc:29:9d:15:e4:3f:a2:e5:c2:
         78:3f:9d:c5:46:77:bc:05:46:e2:13:b9:64:88:f6:f9:62:cd:
         30:2e:10:28:9c:65:02:c1:6d:5b:d9:72:cc:bf:4c:99:10:91:
         69:cf:a6:67
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIUQZFsiAd3Cza5wUUhvGIhVUCZ8KkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFCOTBGREVDQzFERUE3Mzc1MjI2OEY5QTZEN0Y5RDlG
OEY4NzkzRDAeFw0yNjA1MTExNjM2NDRaFw0yNzA1MTAxNjQxNDRaMDMxMTAvBgNV
BAMTKDQ5MjNBRjk3MDdGNDgzOUE3RDAzQTA3NTlFNkRGMjcwOTY2RTkyQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWOj78y1wTKzSxtRGChwF5Rcm
//LmfWzxbWbUpX0WzJN4OF7pQSgfSB1VtU162XTImYU3QRxYSKqrOYplQ3AXzzy3
aqnIdx1VHfyvI9pcVB3nXR4HeM1eO5MrC3YJHZw99/CAwVDu1tpCNdObETQPpA9C
rnVxJxIzMo1IUHCui9zs5SwWKdvgejP/0OdqblzaibdDFKS8yJCnqfp1O9//iSHs
kC8G6M2Eb/fSIv5hxIf0XeLQAUAK22HvJ4jgIch8+b8lS9ZlCFf8KA5zNNOeyFlb
cFVmhwcoxpk2y+MRKSMBK/Jn2vlLvVUWutxAbUnDr3VyrpnO9wTD1PP0JoQDAgMB
AAGjggHjMIIB3zAdBgNVHQ4EFgQUSSOvlwf0g5p9A6B1nm3ycJZuksYwHwYDVR0j
BBgwFoAUYbkP3swd6nN1Imj5ptf52fj4eT0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv
MC82MUI5MEZERUNDMURFQTczNzUyMjY4RjlBNkQ3RjlEOUY4Rjg3OTNELmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzYxQjkwRkRFQ0MxREVBNzM3NTIyNjhGOUE2RDdG
OUQ5RjhGODc5M0QuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzAzMzJlMzIzMzM0
MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzQzMTM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCZ+rkMA0GCSqGSIb3DQEBCwUAA4IBAQCOBJ84OgLuRbB+ZtvJ5jte1xGQ
eyjRNLq5FswxFb7QSNWZqHZ6rTiXYLatvH21NKllMXiSm1cjPyZINKfzzCDszKuE
uO6eFZnIZtKai9n41qgJ4OKbNTSKB4hVYUQNfJfjGUvTG1Gxx8RHWKN0nE6ofr9t
4NzT83wai/U8FZ1sDS5rDDFTPFV0nVM+MHBVHxtGsLUNEKfa+7AULLe2/7IMJin/
dhS+pRwfoWcKqxgUv3T2b9awFhVyn4slF9yKqJVXoEm1mhRK1yEuPPyGltm8KZ0V
5D+i5cJ4P53FRne8BUbiE7lkiPb5Ys0wLhAonGUCwW1b2XLMv0yZEJFpz6Zn
-----END CERTIFICATE-----
Generated at Wed May 13 21:16:30 2026 by rpki-client