Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKIPTECH/0/3130332e3139362e3137352e302f32342d3234203d3e203136353039.roa
File:                     3130332e3139362e3137352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          T7QapEwKqLSVFLH1exkEhjBPxu0cGVP3piAhRdv+dCs=
Subject key identifier:   82:01:2C:96:2A:1D:32:21:EB:25:7D:1F:56:3A:82:7F:61:2C:A1:57
Certificate issuer:       /CN=B67E34D8538AB361BC35DAA6BB862938B7074CF5
Certificate serial:       40FA45A4BB00B258DD7807C1724BACB80F82DD97
Authority key identifier: B6:7E:34:D8:53:8A:B3:61:BC:35:DA:A6:BB:86:29:38:B7:07:4C:F5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/3130332e3139362e3137352e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 11 May 2026 17:56:16 +0000
ROA not before:           Mon 11 May 2026 17:51:16 +0000
ROA not after:            Mon 10 May 2027 17:56:16 +0000
asID:                     16509
IP address blocks:        103.196.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl
                          rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fa:45:a4:bb:00:b2:58:dd:78:07:c1:72:4b:ac:b8:0f:82:dd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67E34D8538AB361BC35DAA6BB862938B7074CF5
        Validity
            Not Before: May 11 17:51:16 2026 GMT
            Not After : May 10 17:56:16 2027 GMT
        Subject: CN=82012C962A1D3221EB257D1F563A827F612CA157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:de:b6:ce:6a:27:ea:e2:09:1e:9b:63:7b:
                    a2:0d:88:04:c3:bb:14:29:12:98:03:75:ee:69:93:
                    90:af:7e:a6:56:04:01:52:55:bb:de:73:c6:3a:ad:
                    f5:8d:bb:78:35:96:b9:0b:25:83:03:39:67:bf:3c:
                    1b:60:20:a9:6e:2a:d0:80:6f:77:3f:f5:86:99:14:
                    36:5e:32:b6:90:e7:27:2c:cf:f7:9a:25:dd:6d:5c:
                    4b:23:ed:83:47:f6:fc:f2:63:30:fd:16:05:51:04:
                    33:20:63:32:7e:2c:9c:8a:21:1c:98:28:fd:1b:db:
                    6d:69:a9:ad:39:40:e6:f4:f2:0e:23:7b:7a:6d:a4:
                    8a:b9:06:ac:eb:d6:bb:a8:cd:98:2a:cc:9e:9f:6c:
                    2f:d9:b6:33:df:ba:1e:88:d1:33:37:43:d2:20:27:
                    ad:d5:c8:e1:ca:af:4e:d7:7a:60:f9:01:9b:15:a3:
                    71:d3:c9:52:8b:12:ec:c7:98:74:2b:53:7d:2c:e8:
                    6b:48:f8:57:7f:25:f9:bd:00:87:07:92:e7:6b:fc:
                    96:b5:9d:84:c5:6e:32:c1:da:9a:82:26:fb:64:2a:
                    58:00:10:d6:42:f2:28:ae:b8:03:21:f8:32:5d:56:
                    02:64:0c:54:06:2f:a2:d2:06:ab:0a:64:85:57:1f:
                    09:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:01:2C:96:2A:1D:32:21:EB:25:7D:1F:56:3A:82:7F:61:2C:A1:57
            X509v3 Authority Key Identifier:
                keyid:B6:7E:34:D8:53:8A:B3:61:BC:35:DA:A6:BB:86:29:38:B7:07:4C:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/B67E34D8538AB361BC35DAA6BB862938B7074CF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B67E34D8538AB361BC35DAA6BB862938B7074CF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKIPTECH/0/3130332e3139362e3137352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:59:8c:34:30:78:a4:6d:7a:fa:b5:8f:28:31:93:f1:94:
         6e:33:17:bf:c2:75:51:d4:36:c4:68:91:2f:73:37:81:50:62:
         af:03:4a:d2:17:31:42:5b:5b:36:88:b6:8c:78:ba:53:dd:cd:
         5a:ce:ca:2e:5d:c4:78:d5:30:95:2b:1f:96:7e:88:91:b9:5a:
         8c:28:e4:5d:99:08:1e:a7:3c:8a:35:62:71:43:e4:6f:ef:58:
         c0:50:c4:59:ab:d2:f3:05:94:64:4c:1d:61:e0:d9:7d:46:5d:
         5d:61:31:d5:3b:99:f3:46:66:22:0b:a1:7e:ea:2d:ab:8d:e2:
         58:93:42:c2:e1:27:2f:fd:13:e6:b8:39:17:49:97:ac:0e:72:
         31:2d:cf:78:b8:5f:08:0b:84:93:75:2a:eb:e8:6a:a6:ad:3f:
         2e:08:a2:0d:15:3c:92:7c:ad:f7:0f:c1:83:cc:6f:79:b3:e1:
         e4:fb:4c:86:b9:35:a4:ca:7d:00:fe:ca:b2:54:6a:fb:60:7b:
         c0:de:9c:2d:e6:bb:dc:09:9b:79:57:1a:3d:fb:fe:f1:be:7b:
         c4:df:ca:55:08:42:b5:51:db:bc:cc:68:f0:6d:1d:dc:3c:6c:
         06:fa:e2:3c:34:4c:a7:e1:c8:a8:45:0a:2f:07:8c:7a:73:bf:
         ea:93:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:07 2026 by rpki-client