Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3130332e352e33322e302f32322d3234203d3e203234313537.roa
File:                     3130332e352e33322e302f32322d3234203d3e203234313537.roa (raw, json)
Hash identifier:          5rQJ7Te0cN6d9Djdb4ZaLJzgXUq6n7s44Ghn9R+nJm4=
Subject key identifier:   C7:DD:47:F1:4A:BE:A0:5C:6C:BB:99:35:38:D4:47:EE:D1:75:33:29
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       7FD2DB497A7AF1934BC8AFA49AB230875B68D6E5
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3130332e352e33322e302f32322d3234203d3e203234313537.roa
Signing time:             Mon 11 May 2026 17:32:55 +0000
ROA not before:           Mon 11 May 2026 17:27:55 +0000
ROA not after:            Mon 10 May 2027 17:32:55 +0000
asID:                     24157
IP address blocks:        103.5.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d2:db:49:7a:7a:f1:93:4b:c8:af:a4:9a:b2:30:87:5b:68:d6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:27:55 2026 GMT
            Not After : May 10 17:32:55 2027 GMT
        Subject: CN=C7DD47F14ABEA05C6CBB993538D447EED1753329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:c5:70:d7:cc:b6:bd:6d:70:7e:28:b0:43:
                    51:5a:82:84:ef:23:19:d5:df:ae:9a:cf:61:78:db:
                    a5:fe:b4:9a:df:dc:5e:43:88:f6:b2:be:a0:72:ca:
                    d4:74:65:47:ad:cd:ee:21:0c:7d:14:59:a4:32:9b:
                    cf:99:0c:68:80:a7:63:d0:1f:c8:fc:db:83:bf:d1:
                    7a:de:7f:63:7f:ba:65:44:bd:aa:46:33:2f:a6:fc:
                    fc:5a:0b:13:9a:d1:df:22:d9:5f:40:6e:ce:e1:28:
                    37:7d:91:ce:fb:d7:fa:04:42:bf:77:4c:6e:fa:d3:
                    42:ae:8e:b4:e1:18:09:d7:10:a4:9d:25:63:6a:ae:
                    41:48:e9:5a:81:23:32:99:d0:75:74:e0:1c:c3:5a:
                    ac:9f:ea:3c:c9:62:b1:3b:21:b0:0d:55:f4:5b:3d:
                    58:13:3d:bd:72:60:83:13:ff:f0:7c:5a:75:e4:e3:
                    fc:a4:11:fd:1f:5c:7d:b7:af:51:84:79:29:ff:2d:
                    07:be:f9:f2:f0:19:81:71:67:a3:0f:80:f3:24:e9:
                    e4:5f:17:68:b6:01:99:a4:91:de:79:e2:d6:0e:fb:
                    4f:c1:0d:65:49:94:34:44:a0:fb:ff:79:62:1a:98:
                    ac:0e:c0:87:06:e7:a2:16:85:dc:ca:92:79:dc:a2:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DD:47:F1:4A:BE:A0:5C:6C:BB:99:35:38:D4:47:EE:D1:75:33:29
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/3130332e352e33322e302f32322d3234203d3e203234313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:45:f6:7e:8c:c0:fb:d3:50:b8:df:7f:c0:a8:68:66:8b:
         65:86:56:11:6c:a4:5c:a7:a8:55:31:3c:95:a8:e1:24:c1:4f:
         39:50:d2:e9:01:7c:67:79:d9:6a:0c:b2:c4:b0:9d:0f:c3:1c:
         c1:14:2b:75:0d:a6:6e:7c:54:1e:fe:91:f7:58:ef:48:23:6e:
         ce:91:b4:96:46:6a:34:09:51:88:d0:68:c6:19:24:69:10:0e:
         64:1d:a9:de:2a:f3:9c:23:d6:55:c2:31:d9:62:ee:38:f2:36:
         24:e7:53:a6:ed:9d:e2:fd:72:10:aa:92:5d:ff:8d:68:0a:97:
         e4:20:28:09:da:2e:ab:cf:5c:4b:f0:fa:48:5f:02:7a:7f:50:
         43:11:a0:17:49:89:e7:a0:fb:8c:dd:65:fb:04:b3:f2:42:b5:
         6f:21:2d:06:59:35:76:6c:d4:9c:12:7e:7a:5e:72:fd:e9:97:
         ee:84:4d:8e:6b:96:13:79:e8:ab:b2:fe:cf:78:60:54:0a:51:
         e3:e7:ff:d3:bf:35:44:37:3c:93:a0:b5:b4:d0:73:e2:e1:fd:
         9e:cc:d9:48:e8:4e:19:18:ea:62:3a:13:f5:48:79:d1:b6:0a:
         b3:9c:de:47:3f:da:35:1e:43:f0:ab:77:38:08:e3:6b:f7:be:
         bc:85:53:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:54 2026 by rpki-client