Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWDS/0/3130332e3134372e32322e302f32332d3234203d3e203138303431.roa
File:                     3130332e3134372e32322e302f32332d3234203d3e203138303431.roa (raw, json)
Hash identifier:          B4DWL17lSxBYMT/SKD6UY6D7iduYtyLTzr7HPcix8dk=
Subject key identifier:   D3:E6:29:4C:33:97:E3:AF:E3:C0:11:C8:25:CC:47:3A:2A:B4:11:B9
Certificate issuer:       /CN=432734F40920205CA6443A3B99308DD718E70D42
Certificate serial:       5D9AD020197526BD2737494083FF339AA621F3BC
Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWDS/0/3130332e3134372e32322e302f32332d3234203d3e203138303431.roa
Signing time:             Mon 11 May 2026 17:08:12 +0000
ROA not before:           Mon 11 May 2026 17:03:12 +0000
ROA not after:            Mon 10 May 2027 17:08:12 +0000
asID:                     18041
IP address blocks:        103.147.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl
                          rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:9a:d0:20:19:75:26:bd:27:37:49:40:83:ff:33:9a:a6:21:f3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42
        Validity
            Not Before: May 11 17:03:12 2026 GMT
            Not After : May 10 17:08:12 2027 GMT
        Subject: CN=D3E6294C3397E3AFE3C011C825CC473A2AB411B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:36:ec:10:39:60:b9:e2:f8:8f:8a:5b:1c:
                    fd:dc:4d:eb:97:2f:28:d0:ad:b5:13:03:e1:7e:e6:
                    43:12:ba:17:27:7c:b5:a1:0d:92:9b:0b:a7:5b:d1:
                    4b:5c:72:31:77:5f:fa:79:2e:a9:65:ab:e5:89:51:
                    38:51:93:8d:9a:c0:a8:09:41:8b:a5:7e:ee:c0:4b:
                    5a:8d:93:fc:8e:95:5a:95:92:9c:12:16:30:40:ad:
                    0c:08:ee:01:91:30:c7:8b:c7:09:17:01:d9:fb:5d:
                    cb:93:98:ec:25:2d:97:ed:b6:d1:9d:8b:f4:95:a2:
                    63:e8:9e:7f:5e:7a:e4:68:99:54:fc:79:98:7b:88:
                    bc:5a:e9:93:82:38:2a:26:d0:1d:e4:12:a8:08:4d:
                    d9:60:75:5b:73:85:82:f8:5b:9c:45:2c:f2:39:41:
                    0b:e9:eb:59:90:db:49:dc:8f:76:bb:a0:d0:59:3b:
                    98:75:21:3b:84:2b:c2:ae:a6:de:3d:aa:ab:fa:43:
                    15:ab:4e:56:ef:dd:4c:05:26:37:1e:c8:0b:c8:b8:
                    57:b5:93:50:d9:20:f2:4a:e9:af:8d:36:92:af:04:
                    68:14:7f:ca:60:d5:6e:ce:01:04:5b:a6:a1:31:07:
                    22:07:0f:75:95:ff:83:35:a9:52:99:60:a5:dd:e7:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E6:29:4C:33:97:E3:AF:E3:C0:11:C8:25:CC:47:3A:2A:B4:11:B9
            X509v3 Authority Key Identifier:
                keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/3130332e3134372e32322e302f32332d3234203d3e203138303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:dd:25:dd:cb:ab:bf:21:cd:47:6c:dc:d9:5f:fc:5b:f3:
         e0:31:b4:fa:79:a4:de:65:ac:5a:93:df:c2:53:16:42:71:dd:
         26:48:1b:af:4d:0c:bf:dc:2a:f3:24:4a:bd:28:59:2a:ee:5a:
         61:52:dd:75:77:df:94:92:96:e7:22:c4:58:ec:08:85:42:5b:
         21:4b:42:50:17:a8:1e:9b:b8:03:c8:33:dc:3c:7c:70:c5:87:
         89:30:a4:d1:a0:4f:49:c9:46:3b:8a:b8:d1:c0:30:4b:1b:6e:
         18:0b:71:ef:89:a8:79:20:6d:00:1d:9f:dd:19:68:c5:da:8d:
         9b:14:ba:ba:b1:8b:8e:ed:15:79:07:d7:d8:d7:fe:9b:de:41:
         13:7e:61:5e:05:ed:16:0f:13:f6:f9:66:f2:05:f4:13:2f:03:
         3d:62:84:9b:31:ed:ff:91:24:f7:57:82:26:88:7d:61:80:84:
         34:65:8b:66:73:a3:3e:2b:f1:72:ef:de:82:64:c3:e0:36:66:
         1b:0a:d6:a6:d2:78:55:dd:3a:c6:8c:d0:87:d8:9a:7b:7e:df:
         a5:4f:92:49:9a:a9:a6:2c:26:ab:82:b3:05:33:1c:8d:99:a4:
         1e:96:73:f9:54:b7:de:86:0d:8b:2b:15:e2:cc:6e:06:93:4f:
         f7:17:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:20 2026 by rpki-client