Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3130382e302f32322d3234203d3e20313331363237.roa
File:                     3130312e332e3130382e302f32322d3234203d3e20313331363237.roa (raw, json)
Hash identifier:          iW3JlIN5A995EIlO+TBTE4xqC/yg0mSkN0wLA/nSzJk=
Subject key identifier:   64:A3:DE:47:A6:33:79:0F:85:6E:DF:6D:7F:51:5E:36:00:67:CD:9C
Certificate issuer:       /CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
Certificate serial:       7F9CDC0D693501205F95288D54EC5323A8203D75
Authority key identifier: E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3130382e302f32322d3234203d3e20313331363237.roa
Signing time:             Mon 11 May 2026 17:19:48 +0000
ROA not before:           Mon 11 May 2026 17:14:48 +0000
ROA not after:            Mon 10 May 2027 17:19:48 +0000
asID:                     131627
IP address blocks:        101.3.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9c:dc:0d:69:35:01:20:5f:95:28:8d:54:ec:53:23:a8:20:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B
        Validity
            Not Before: May 11 17:14:48 2026 GMT
            Not After : May 10 17:19:48 2027 GMT
        Subject: CN=64A3DE47A633790F856EDF6D7F515E360067CD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:f5:fe:91:6d:2d:f5:81:22:48:a8:96:30:
                    b2:3b:74:73:bf:96:aa:10:0d:f8:c4:ad:09:8d:79:
                    60:01:c6:50:3e:46:d5:ae:00:26:3f:22:83:6b:35:
                    f0:08:66:4c:36:4a:6e:9b:a2:ae:e7:80:83:4a:b2:
                    b0:d8:de:6b:78:9d:2a:bb:86:6f:8f:6a:e8:21:1f:
                    52:d9:c7:63:8b:4a:18:c1:3c:18:9c:3f:d7:2c:fc:
                    ec:21:34:ea:c4:c1:20:84:27:9b:42:58:80:2a:7f:
                    27:e9:1e:31:4f:b2:04:7d:9a:37:99:a4:57:ec:dc:
                    9f:64:36:57:52:e9:26:27:c4:a1:1f:df:49:cd:b6:
                    d8:7d:67:17:d3:47:82:4d:f9:18:cf:ef:ef:ff:7f:
                    1a:d8:0c:40:38:49:30:02:9d:5c:6d:77:df:7d:d3:
                    2b:14:44:68:5d:af:a8:5b:80:66:08:03:02:a1:4a:
                    2a:4f:2d:a0:d5:cb:e2:f6:d2:4f:42:a1:83:5b:56:
                    6a:18:8f:02:b6:f3:fa:67:64:4c:17:41:5e:33:b0:
                    34:0a:c8:fa:93:22:c2:84:12:89:3a:04:03:4f:f4:
                    39:ab:10:6f:55:18:76:0a:f5:49:b4:82:6b:b8:0c:
                    a3:4b:d8:e6:20:31:82:6d:23:58:29:09:64:2c:93:
                    5d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:DE:47:A6:33:79:0F:85:6E:DF:6D:7F:51:5E:36:00:67:CD:9C
            X509v3 Authority Key Identifier:
                keyid:E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3130382e302f32322d3234203d3e20313331363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.3.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:36:2f:41:ca:2e:8e:9c:bb:cb:28:3b:58:e4:50:e4:88:f2:
         3a:0c:5d:61:d3:83:91:1a:c7:89:ad:23:24:42:d7:02:06:30:
         25:ac:01:bf:4c:5b:a8:77:19:0b:2f:86:fe:32:4e:88:a4:5c:
         14:90:32:5e:5e:06:b2:3e:74:36:2a:af:98:aa:cc:88:24:cb:
         31:99:53:1f:53:05:20:43:06:4c:14:3f:a4:24:9c:9f:d2:7f:
         77:43:8b:0c:e5:5a:30:36:69:2c:3a:b6:f1:ab:71:f5:bb:36:
         65:76:e3:dd:fe:02:e7:9c:dc:d8:b7:4e:c6:09:9b:04:36:7f:
         ad:a5:18:ca:97:1f:0c:58:49:d4:15:50:e8:39:30:3e:4f:14:
         db:50:4b:7f:d6:09:4f:d1:ce:34:3d:c3:0f:fd:37:c6:af:6a:
         e3:56:90:33:19:1c:d2:39:a1:9a:c9:6f:16:0f:03:4d:98:b8:
         19:9b:e2:de:b3:4c:38:a6:9a:3e:89:e4:4b:e1:df:22:ff:f8:
         48:1b:90:fb:a9:e3:1f:c2:53:a7:11:47:c4:31:5a:3f:e6:cf:
         4a:2a:16:6d:9a:39:3a:59:f6:71:ca:99:58:fe:65:ef:74:c6:
         5f:b6:f7:c0:5a:3c:16:6b:e5:d1:03:5e:77:27:d4:eb:5c:20:
         0d:f2:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:51 2026 by rpki-client