Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363233.roa
File:                     3130332e3131372e342e302f32322d3234203d3e20313331363233.roa (raw, json)
Hash identifier:          Tln46/ulM0jeOxnleoQfL0KZfR8c6xYxi9yDZm65GwA=
Subject key identifier:   8B:34:83:ED:E6:3B:3F:D6:99:1E:C4:71:6A:F5:3D:F1:B2:9A:15:8C
Certificate issuer:       /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial:       26D5D51ADDEA60BE3066817E63F1852C212ACFEF
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363233.roa
Signing time:             Mon 11 May 2026 17:05:10 +0000
ROA not before:           Mon 11 May 2026 17:00:10 +0000
ROA not after:            Mon 10 May 2027 17:05:10 +0000
asID:                     131623
IP address blocks:        103.117.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
                          rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d5:d5:1a:dd:ea:60:be:30:66:81:7e:63:f1:85:2c:21:2a:cf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
        Validity
            Not Before: May 11 17:00:10 2026 GMT
            Not After : May 10 17:05:10 2027 GMT
        Subject: CN=8B3483EDE63B3FD6991EC4716AF53DF1B29A158C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:71:16:78:33:50:00:e1:69:16:90:9d:a6:
                    76:ce:00:31:ac:12:6a:5b:cf:8c:25:1c:35:a8:94:
                    0a:89:cb:b7:ec:9c:61:1c:23:a4:0c:d7:f1:80:3f:
                    52:c1:03:78:af:8e:28:25:af:42:6e:d9:1a:1a:76:
                    31:a5:cf:8f:5e:57:12:98:f7:62:9d:bc:27:c7:d6:
                    67:9f:e9:1e:91:62:e5:81:b5:fc:14:6e:92:c6:14:
                    25:75:c5:7e:9d:91:86:e0:28:cc:43:e0:94:05:94:
                    bf:b8:d2:e2:fd:a3:79:fb:a1:ae:df:ec:29:57:29:
                    85:88:fc:50:47:2e:41:58:79:d8:3d:72:29:0c:d3:
                    b9:83:20:d2:2d:74:f9:81:a6:05:9c:ca:5d:3d:db:
                    60:7a:c3:26:d0:bd:6f:11:94:5c:97:98:8e:11:18:
                    c3:6a:c6:a2:b6:64:a4:0d:75:3e:24:fb:d0:dc:ec:
                    a5:8d:86:d0:c8:59:1b:fe:43:a6:08:1f:3d:d8:35:
                    70:57:e5:91:92:d5:9b:c8:d3:ea:a6:fa:7e:d7:5d:
                    6a:dd:ef:90:71:df:69:17:6c:cb:8b:d5:37:fa:c0:
                    13:ae:3d:0e:b1:46:91:33:49:16:7e:f1:0c:e9:15:
                    05:d2:38:0d:fa:b5:26:c4:08:de:73:53:db:d6:23:
                    08:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:34:83:ED:E6:3B:3F:D6:99:1E:C4:71:6A:F5:3D:F1:B2:9A:15:8C
            X509v3 Authority Key Identifier:
                keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:30:a8:9e:1d:83:60:42:8a:39:b4:b3:dc:b1:ca:d3:fd:
         4b:e7:d3:c7:0e:cb:78:3c:59:61:0f:c4:4d:57:db:42:7f:80:
         c8:45:ae:8e:70:f8:ef:25:55:eb:e2:7a:a3:0c:a8:e4:b0:2d:
         21:9b:e0:68:11:af:8b:1b:36:71:f7:1a:a7:82:76:b3:dc:c3:
         07:cf:a4:cb:b8:8e:77:da:ca:25:5d:88:04:fb:72:85:20:ef:
         3b:f7:64:49:6d:db:fc:63:7e:3d:2c:89:15:8b:87:d6:e6:a7:
         4e:92:85:01:75:35:95:6c:f3:6c:8c:ae:ce:ff:ea:57:d9:ae:
         56:80:d1:60:62:e0:1e:0f:de:00:d4:0f:30:a1:db:2b:96:3f:
         f6:f9:9e:41:83:e3:76:50:9a:d0:9b:ac:1e:08:15:74:98:7c:
         2a:3b:2b:b7:e7:7e:1b:f9:3d:d0:97:de:8d:68:43:3f:1b:72:
         c6:00:cd:77:e1:99:78:de:bc:00:be:9c:81:35:33:df:32:8d:
         1c:e5:d3:b3:97:2d:eb:f5:b3:74:55:c1:e5:91:be:46:4e:54:
         28:0e:5e:93:23:83:c8:8e:2e:71:1f:89:2b:d7:d0:2d:b5:3d:
         89:ed:b3:e6:f5:aa:8e:08:01:2d:56:af:4f:ec:0a:9c:69:cb:
         f5:46:43:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:20 2026 by rpki-client