Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363334.roa
File:                     3130332e3131372e342e302f32322d3234203d3e20313331363334.roa (raw, json)
Hash identifier:          jhLjBnMm1fhbsjRhkAAaIjaX4J41EYic1BnBWo6KESI=
Subject key identifier:   5C:CE:1E:02:7E:C6:A0:8C:F7:70:06:16:E4:54:AB:EB:26:55:99:F7
Certificate issuer:       /CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
Certificate serial:       19AD8D82E9D141813824835E1DEA18B087CA5C0D
Authority key identifier: 87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363334.roa
Signing time:             Mon 11 May 2026 17:09:21 +0000
ROA not before:           Mon 11 May 2026 17:04:21 +0000
ROA not after:            Mon 10 May 2027 17:09:21 +0000
asID:                     131634
IP address blocks:        103.117.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl
                          rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ad:8d:82:e9:d1:41:81:38:24:83:5e:1d:ea:18:b0:87:ca:5c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871300497118DBA75FA9B46DE2D7D39663DBDE52
        Validity
            Not Before: May 11 17:04:21 2026 GMT
            Not After : May 10 17:09:21 2027 GMT
        Subject: CN=5CCE1E027EC6A08CF7700616E454ABEB265599F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:da:83:47:00:ca:34:c8:31:13:7b:4c:22:
                    03:ad:23:5a:e1:86:bc:33:2b:ad:c8:f4:e2:a9:8a:
                    09:07:f7:d9:9b:eb:89:c5:8f:51:c4:35:76:62:5c:
                    05:22:84:ba:86:2d:77:80:c8:4c:47:a8:b4:aa:1f:
                    14:c1:8a:25:b2:5e:d2:bc:3d:bd:80:49:f6:28:81:
                    60:a8:8e:2c:64:c4:d3:ab:bb:f2:de:f1:45:d8:7b:
                    33:62:87:b8:22:2d:c0:d0:ea:9d:49:35:f1:20:79:
                    15:4e:a0:ab:92:2a:2f:2c:77:10:7a:76:5e:9e:81:
                    fa:4f:6b:e9:71:73:f9:07:b2:02:c2:c8:03:d7:8d:
                    cf:ec:97:b2:fe:26:b0:42:c2:22:a3:7b:9d:3b:20:
                    08:41:c0:c4:de:58:9d:08:06:f5:b8:52:32:48:34:
                    a2:b0:57:9c:5a:98:e2:e5:b7:50:a4:13:4d:a2:95:
                    ab:ea:06:e3:84:75:45:1d:c9:ca:8b:3f:0d:c4:d9:
                    4a:6b:c5:56:7e:24:99:e0:e6:90:a1:3b:c7:3d:68:
                    42:74:4e:04:0b:e5:b8:23:1b:01:bd:02:cc:b4:8c:
                    cc:30:52:7a:b1:2c:2c:46:3a:47:ba:35:23:97:ff:
                    3e:79:79:75:45:ef:99:64:5d:42:b7:9c:4b:fc:70:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:1E:02:7E:C6:A0:8C:F7:70:06:16:E4:54:AB:EB:26:55:99:F7
            X509v3 Authority Key Identifier:
                keyid:87:13:00:49:71:18:DB:A7:5F:A9:B4:6D:E2:D7:D3:96:63:DB:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/871300497118DBA75FA9B46DE2D7D39663DBDE52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/871300497118DBA75FA9B46DE2D7D39663DBDE52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SPETW/0/3130332e3131372e342e302f32322d3234203d3e20313331363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:80:87:80:df:8f:44:c6:cc:bf:79:5b:cf:89:46:91:be:
         77:d9:ae:b2:ae:c8:5f:bf:3e:a9:55:b7:37:bc:a1:dd:e5:8f:
         fa:87:b6:8b:64:34:ae:78:2d:ea:7e:3c:f7:e7:6b:aa:22:ef:
         ac:f0:ab:b2:06:ff:28:72:e2:94:4c:73:25:98:cb:49:62:16:
         29:4c:e3:f0:a2:cc:67:42:ed:39:54:c0:13:61:25:d3:14:30:
         0a:2e:89:aa:06:8c:73:50:2b:21:ec:e7:9a:7c:b8:e8:4d:e6:
         60:68:75:06:fc:fc:d6:55:c4:d8:83:ac:de:40:0f:b2:ea:ef:
         e3:6e:43:eb:f6:f3:6e:e3:54:ec:eb:28:27:d4:2b:51:ee:7b:
         4b:df:75:c4:11:15:a3:72:42:b8:85:a6:f7:0a:77:de:21:b4:
         d0:28:7e:20:bc:7e:1d:e2:cc:cf:04:2a:48:5f:cb:2e:a1:1c:
         ca:67:e1:70:1a:5e:d4:45:81:7c:b0:7b:63:09:04:b7:bc:16:
         28:c6:c9:34:d1:43:ab:2b:66:65:1a:b5:db:60:6a:f4:28:ff:
         26:40:ee:84:ef:a5:df:a6:5e:94:d6:8e:aa:b7:18:d3:c1:b4:
         c9:3c:bb:2b:96:15:9c:b8:b6:c7:07:34:31:ff:cc:59:b3:20:
         56:b2:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:26 2026 by rpki-client