Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TOPCHINA/0/3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa
File:                     3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa (raw, json)
Hash identifier:          UJYSu7Fa6tnrzCGk1PLG8hNTofa+kMNC0fV9KXzBeyU=
Subject key identifier:   48:E9:01:E8:A4:44:52:A3:67:43:7A:D1:B4:B9:D3:DB:F2:88:FE:72
Certificate issuer:       /CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
Certificate serial:       1D09B0052F5FCBF927090C1D0FDA92E8503D7D21
Authority key identifier: EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa
Signing time:             Mon 11 May 2026 17:09:45 +0000
ROA not before:           Mon 11 May 2026 17:04:45 +0000
ROA not after:            Mon 10 May 2027 17:09:45 +0000
asID:                     131659
IP address blocks:        103.124.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl
                          rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:b0:05:2f:5f:cb:f9:27:09:0c:1d:0f:da:92:e8:50:3d:7d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1DB3CB7CE6162748BA2956BC1706446561D664
        Validity
            Not Before: May 11 17:04:45 2026 GMT
            Not After : May 10 17:09:45 2027 GMT
        Subject: CN=48E901E8A44452A367437AD1B4B9D3DBF288FE72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7b:ed:4a:63:01:e3:a2:46:fd:e9:34:70:eb:
                    08:20:d9:cf:df:77:ac:3b:ce:6a:fe:bd:d3:cf:78:
                    60:bd:0c:0f:da:94:de:5e:ea:46:ec:43:6b:29:e5:
                    99:2f:9d:9d:15:7c:05:9e:74:0c:51:7f:e4:fd:8a:
                    43:98:05:cf:77:c0:d1:12:42:ca:7e:3a:ae:58:62:
                    b5:4a:45:7b:61:ff:d0:e4:47:5a:12:57:c2:10:08:
                    21:79:bf:1a:e1:df:2e:e9:b5:ef:fa:6f:65:a2:94:
                    cf:ff:73:51:a4:09:c4:f5:38:5b:7e:c6:45:2d:5c:
                    1e:0f:3a:c3:fd:cb:49:cb:a4:28:90:fa:ec:2e:88:
                    8a:61:fd:0b:19:a7:62:7e:f9:ae:00:67:5f:31:0c:
                    4e:f5:1e:78:93:ef:38:8b:cb:76:43:eb:60:06:94:
                    14:44:f9:55:d3:db:a2:62:e1:f5:91:7f:1b:4f:f0:
                    08:d2:24:ee:53:7c:a3:38:3a:f4:7b:96:1b:ab:b5:
                    03:e3:f2:40:fd:10:9f:1d:93:42:2e:db:06:5c:c9:
                    be:45:2f:ee:18:e2:61:c1:7f:cd:32:79:f8:74:b9:
                    e0:44:14:6d:e7:da:82:02:8f:53:03:50:13:de:8d:
                    08:c6:5b:bc:01:80:ae:34:cf:f9:5a:73:06:92:ac:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:01:E8:A4:44:52:A3:67:43:7A:D1:B4:B9:D3:DB:F2:88:FE:72
            X509v3 Authority Key Identifier:
                keyid:EC:1D:B3:CB:7C:E6:16:27:48:BA:29:56:BC:17:06:44:65:61:D6:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/EC1DB3CB7CE6162748BA2956BC1706446561D664.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EC1DB3CB7CE6162748BA2956BC1706446561D664.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TOPCHINA/0/3130332e3132342e3235322e302f32322d3234203d3e20313331363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:7d:e7:f2:f1:e6:76:da:95:da:b6:12:7b:ce:14:1c:e8:c5:
         db:ca:2b:7d:a5:d4:8c:13:73:d0:09:71:ca:4d:3d:ab:26:55:
         73:fd:d9:74:64:32:3f:77:52:f2:6c:ce:e1:75:64:25:00:ce:
         43:3a:d5:bb:2b:bd:08:be:41:be:b0:5f:ab:9a:f5:a3:c5:74:
         7f:e7:8a:85:7d:b3:6d:03:bd:7d:62:a9:fa:9a:90:48:c2:0e:
         db:a1:7e:c3:29:40:f0:09:bb:01:04:ee:ec:80:c7:e6:00:15:
         e1:b1:df:4d:24:8e:77:d9:ad:71:f7:85:0b:c8:5a:68:3a:8d:
         c9:6c:bf:08:19:0b:61:9e:2d:dc:8f:1c:db:49:8c:02:91:55:
         cd:db:ad:ab:81:4d:15:02:84:05:ce:80:5d:56:cd:0b:ef:a6:
         3f:08:4c:25:8a:c5:96:f5:a5:a5:a0:10:7d:7b:8a:81:72:6b:
         bf:7d:f2:ef:e3:c1:a3:68:01:de:01:6a:4f:23:73:e3:f6:7a:
         bc:c1:11:16:2f:f4:e8:e4:06:d6:71:d5:61:98:46:60:76:37:
         6b:03:6f:b9:75:3f:58:3d:89:35:0c:40:ad:1f:b9:0f:54:96:
         21:73:f5:25:b9:73:e3:db:62:a5:34:ae:5a:e1:cb:a0:0a:3c:
         b3:9b:3e:09
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUHQmwBS9fy/knCQwdD9qS6FA9fSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMxREIzQ0I3Q0U2MTYyNzQ4QkEyOTU2QkMxNzA2NDQ2
NTYxRDY2NDAeFw0yNjA1MTExNzA0NDVaFw0yNzA1MTAxNzA5NDVaMDMxMTAvBgNV
BAMTKDQ4RTkwMUU4QTQ0NDUyQTM2NzQzN0FEMUI0QjlEM0RCRjI4OEZFNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqe+1KYwHjokb96TRw6wgg2c/f
d6w7zmr+vdPPeGC9DA/alN5e6kbsQ2sp5ZkvnZ0VfAWedAxRf+T9ikOYBc93wNES
Qsp+Oq5YYrVKRXth/9DkR1oSV8IQCCF5vxrh3y7pte/6b2WilM//c1GkCcT1OFt+
xkUtXB4POsP9y0nLpCiQ+uwuiIph/QsZp2J++a4AZ18xDE71HniT7ziLy3ZD62AG
lBRE+VXT26Ji4fWRfxtP8AjSJO5TfKM4OvR7lhurtQPj8kD9EJ8dk0Iu2wZcyb5F
L+4Y4mHBf80yefh0ueBEFG3n2oICj1MDUBPejQjGW7wBgK40z/lacwaSrKM7AgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUSOkB6KREUqNnQ3rRtLnT2/KI/nIwHwYDVR0j
BBgwFoAU7B2zy3zmFidIuilWvBcGRGVh1mQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVE9QQ0hJ
TkEvMC9FQzFEQjNDQjdDRTYxNjI3NDhCQTI5NTZCQzE3MDY0NDY1NjFENjY0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0VDMURCM0NCN0NFNjE2Mjc0OEJBMjk1NkJD
MTcwNjQ0NjU2MUQ2NjQuY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG
ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVE9QQ0hJTkEvMC8zMTMwMzMy
ZTMxMzIzNDJlMzIzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzMzMxMzYz
NTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCZ3z8MA0GCSqGSIb3DQEBCwUAA4IBAQAYfefy8eZ22pXa
thJ7zhQc6MXbyit9pdSME3PQCXHKTT2rJlVz/dl0ZDI/d1LybM7hdWQlAM5DOtW7
K70IvkG+sF+rmvWjxXR/54qFfbNtA719Yqn6mpBIwg7boX7DKUDwCbsBBO7sgMfm
ABXhsd9NJI532a1x94ULyFpoOo3JbL8IGQthni3cjxzbSYwCkVXN262rgU0VAoQF
zoBdVs0L76Y/CEwlisWW9aWloBB9e4qBcmu/ffLv48GjaAHeAWpPI3Pj9nq8wREW
L/To5AbWcdVhmEZgdjdrA2+5dT9YPYk1DECtH7kPVJYhc/UluXPj22KlNK5a4cug
Cjyzmz4J
-----END CERTIFICATE-----
Generated at Wed May 13 21:48:45 2026 by rpki-client