Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TSMC/0/3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa
File:                     3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa (raw, json)
Hash identifier:          O4tFAGNoujrjTe1QFIiUNSL1btHs7X9nG4rNOC2WBrk=
Subject key identifier:   07:E8:88:4E:E3:DE:99:16:7C:E1:0A:9D:BE:6A:A0:F8:20:98:49:FB
Certificate issuer:       /CN=BD49467776DCA7472F88470782DAD5722E5AFE49
Certificate serial:       4BC34B79AFE273041C6D39D2F66DC7AA81A45EF6
Authority key identifier: BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TSMC/0/3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa
Signing time:             Mon 11 May 2026 17:27:35 +0000
ROA not before:           Mon 11 May 2026 17:22:35 +0000
ROA not after:            Mon 10 May 2027 17:27:35 +0000
asID:                     23675
IP address blocks:        103.132.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl
                          rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c3:4b:79:af:e2:73:04:1c:6d:39:d2:f6:6d:c7:aa:81:a4:5e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD49467776DCA7472F88470782DAD5722E5AFE49
        Validity
            Not Before: May 11 17:22:35 2026 GMT
            Not After : May 10 17:27:35 2027 GMT
        Subject: CN=07E8884EE3DE99167CE10A9DBE6AA0F8209849FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:cf:be:88:ea:f1:44:34:9c:27:05:1d:a3:
                    de:ea:d9:33:c9:d6:9f:c3:ef:20:0d:89:28:62:bf:
                    22:42:05:9a:9f:d8:2d:89:5a:a9:98:e4:7f:69:01:
                    1a:47:ba:b4:f1:74:c0:07:40:e4:a6:5c:c2:33:0f:
                    76:45:ce:6f:f7:94:60:bd:59:52:a5:d3:7c:d2:1b:
                    19:7a:1c:79:8b:a8:06:ec:d2:5d:e7:0e:13:f1:bd:
                    19:18:ca:75:68:21:ff:a8:0c:71:0e:55:a5:26:84:
                    ce:01:f1:e5:42:3b:c0:72:88:ca:cf:83:d7:6e:1c:
                    40:1d:e5:79:4d:87:05:c6:11:76:e0:98:b4:45:4f:
                    e3:19:97:b8:89:01:ff:93:60:00:d2:0f:05:f0:80:
                    29:9b:62:46:98:40:f7:5b:d2:3a:21:4f:c7:bc:43:
                    c1:7d:00:a9:26:38:99:34:19:91:54:19:20:9a:17:
                    16:e6:34:a3:36:85:c9:d9:2b:29:5b:4a:c4:9f:4d:
                    05:02:a3:b5:89:b8:98:12:bd:3a:61:12:eb:0d:c9:
                    4f:27:85:84:56:a8:cc:00:ff:74:72:3e:5c:38:6c:
                    14:a7:79:78:41:6c:2d:da:bf:5b:be:3d:93:6d:a4:
                    f8:dd:38:e3:1a:70:55:eb:df:e6:af:67:40:52:34:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:88:4E:E3:DE:99:16:7C:E1:0A:9D:BE:6A:A0:F8:20:98:49:FB
            X509v3 Authority Key Identifier:
                keyid:BD:49:46:77:76:DC:A7:47:2F:88:47:07:82:DA:D5:72:2E:5A:FE:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/BD49467776DCA7472F88470782DAD5722E5AFE49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD49467776DCA7472F88470782DAD5722E5AFE49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TSMC/0/3130332e3133322e3135362e302f32322d3234203d3e203233363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:58:8d:41:50:24:1d:3f:df:03:8c:1f:04:44:d4:80:a5:a6:
         ec:e1:b8:8d:f6:ad:49:cf:4c:aa:15:b1:f6:6d:ba:13:8a:b3:
         5c:f5:bc:2b:bf:6e:c9:ae:33:9e:6f:86:7d:f9:1d:ca:e9:1b:
         6f:df:ee:87:e6:73:13:f7:80:ec:86:5b:67:e2:24:71:6b:47:
         8a:6f:a3:c3:3f:5e:7e:ea:a4:ad:7a:25:72:bd:d6:6d:67:e7:
         0a:49:9b:19:80:ee:82:56:f8:3b:3d:13:0c:bf:02:c7:65:49:
         32:55:28:34:ac:72:a6:9a:a8:6c:e3:78:8b:72:78:4e:f4:ff:
         e8:c1:6c:b7:c7:8d:84:d6:f7:2b:d4:0d:c1:f4:f8:bf:80:40:
         8d:96:6e:56:f4:b7:39:45:96:a2:63:81:fa:ba:c7:58:25:3b:
         44:58:fb:e9:f1:98:d6:d4:7f:1b:c2:eb:38:40:69:34:3b:d2:
         98:d8:8c:81:8f:63:37:44:75:f5:89:0f:b1:2f:79:87:d1:40:
         ea:ce:a9:a7:53:fb:81:d7:3b:2c:e8:89:4e:4a:a7:17:1c:16:
         3d:f7:24:b3:d1:e1:d1:b9:f5:eb:45:80:a3:c6:cb:2e:cf:32:
         ba:8d:4d:19:28:26:2a:9c:7a:8b:0f:ea:f5:22:73:ba:a1:26:
         27:b4:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:05 2026 by rpki-client