Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3130332e322e3231362e302f32322d3234203d3e203234313538.roa
File:                     3130332e322e3231362e302f32322d3234203d3e203234313538.roa (raw, json)
Hash identifier:          yhnNzAVADrT8xJItQcA5B7Deuc+hTOjQI4d12zOsIsA=
Subject key identifier:   AC:A0:11:BD:57:CE:F4:1B:E5:D0:E2:10:01:D8:EC:0F:08:75:33:E9
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       3F7CA71E4F5F8EE0FD6380CAB64057C27AEB0E17
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3130332e322e3231362e302f32322d3234203d3e203234313538.roa
Signing time:             Mon 11 May 2026 16:13:43 +0000
ROA not before:           Mon 11 May 2026 16:08:43 +0000
ROA not after:            Mon 10 May 2027 16:13:43 +0000
asID:                     24158
IP address blocks:        103.2.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7c:a7:1e:4f:5f:8e:e0:fd:63:80:ca:b6:40:57:c2:7a:eb:0e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 16:08:43 2026 GMT
            Not After : May 10 16:13:43 2027 GMT
        Subject: CN=ACA011BD57CEF41BE5D0E21001D8EC0F087533E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:45:4b:2b:e3:aa:37:84:dc:32:2a:df:bc:
                    4b:0d:4b:db:a7:7a:36:2d:6e:a2:10:d3:73:55:ad:
                    4d:14:7e:33:aa:26:0e:6a:8f:11:9d:d1:64:86:2d:
                    6f:e4:10:f3:c3:10:a4:54:25:09:1f:b5:49:59:19:
                    b5:50:29:20:00:ec:18:b6:25:2c:a9:10:47:fa:82:
                    b1:b2:48:da:7e:9e:8b:a2:d9:54:cf:53:b5:13:71:
                    8d:81:e5:5e:13:dc:25:56:bc:dc:41:73:13:05:09:
                    3b:82:a5:84:d2:31:32:af:7c:7c:59:4c:d5:ed:92:
                    a9:e7:7d:99:86:49:60:1a:db:6b:4f:b2:fc:73:a8:
                    d7:ef:20:02:4e:58:25:ec:52:d5:90:83:d2:f2:0a:
                    38:0b:3f:7c:05:bd:b6:ce:a7:ef:67:a9:10:ab:bd:
                    d9:07:ee:c6:65:ba:47:b7:c8:9e:55:e7:7c:e9:83:
                    c6:28:4c:91:34:ec:52:dc:c5:75:cb:e7:d8:13:23:
                    86:64:f1:f5:29:ce:19:7d:17:4c:85:1e:7b:38:98:
                    e7:6a:4b:c3:6a:3f:eb:95:1a:93:65:9d:78:07:b5:
                    e3:41:b9:07:4b:ac:22:c7:87:b5:83:8e:97:2a:b1:
                    ab:a6:d7:cf:d6:c3:4f:b1:b6:b1:7c:ce:b4:b2:75:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:11:BD:57:CE:F4:1B:E5:D0:E2:10:01:D8:EC:0F:08:75:33:E9
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3130332e322e3231362e302f32322d3234203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:4a:dd:d7:7a:1c:45:86:1e:b5:8f:23:18:bf:a0:51:48:
         7c:c6:5c:de:f0:01:2c:66:13:f7:52:bc:4c:66:2e:dd:5c:40:
         4c:3e:01:e9:f3:dc:32:d6:be:45:76:c0:dc:46:9c:75:22:25:
         91:1c:27:84:9e:6b:17:cd:e9:93:55:3e:32:c1:18:9e:2b:53:
         83:60:b3:40:ca:3b:d3:f2:03:d0:92:b1:14:b6:ff:6d:4e:7b:
         0a:45:d7:d0:92:30:da:70:47:76:5a:66:4e:27:fd:09:87:52:
         26:41:7e:e5:d8:91:17:1d:85:48:56:95:6c:c1:70:80:8c:12:
         b4:a8:6c:0a:91:68:4a:8d:c6:1e:85:cc:4b:94:9d:8f:53:93:
         fb:71:4a:f3:13:ee:02:5e:9a:c3:be:d2:04:5f:08:cd:24:bb:
         ed:0c:59:75:6b:23:5b:32:d0:ad:bb:fd:5a:f4:40:51:91:d7:
         a4:79:97:85:d2:08:81:9b:60:b8:c2:87:fa:05:2b:a7:16:d9:
         55:6c:e8:3a:59:2f:0d:59:cd:ba:3f:4d:50:5f:c6:39:0f:d4:
         a8:95:49:90:2a:af:fe:17:8a:87:29:46:20:bd:ec:13:81:71:
         b9:ef:ad:f0:67:43:e2:73:a3:ad:18:56:67:bb:c6:d4:47:f0:
         b5:bb:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:07 2026 by rpki-client