Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130312e3130312e302f32342d3234203d3e20313331363231.roa
File:                     3130312e3130312e3130312e302f32342d3234203d3e20313331363231.roa (raw, json)
Hash identifier:          sIvqKi+mFMBX4t3sG2x03OONT6nMLJEw/9NSus8bO3I=
Subject key identifier:   D2:FA:16:BE:D3:70:DA:52:40:03:43:30:F4:4F:00:1D:66:3F:83:73
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       76EF1490FD7B37F33A36EC959320DE9FD6658586
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130312e3130312e302f32342d3234203d3e20313331363231.roa
Signing time:             Mon 11 May 2026 17:20:05 +0000
ROA not before:           Mon 11 May 2026 17:15:05 +0000
ROA not after:            Mon 10 May 2027 17:20:05 +0000
asID:                     131621
IP address blocks:        101.101.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ef:14:90:fd:7b:37:f3:3a:36:ec:95:93:20:de:9f:d6:65:85:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:15:05 2026 GMT
            Not After : May 10 17:20:05 2027 GMT
        Subject: CN=D2FA16BED370DA5240034330F44F001D663F8373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:db:21:82:a8:8e:dc:76:2b:86:9c:38:06:
                    df:38:dd:bc:69:db:4f:db:4e:cb:95:00:54:0c:04:
                    aa:1b:83:3d:4a:97:5d:be:6d:c6:2f:d2:64:db:bf:
                    0e:3a:ab:01:38:81:94:b5:3e:da:7b:b3:8d:dd:b0:
                    ff:1c:c6:70:b5:54:38:4a:89:fc:6a:08:39:1b:b4:
                    99:9c:f2:7b:5b:7e:06:01:f2:75:2d:e1:e0:1a:b8:
                    f1:e1:4d:0e:77:9d:ec:5c:b3:54:79:51:8a:96:fe:
                    23:3a:5d:1d:af:72:48:82:78:9e:7f:5b:fa:e8:24:
                    f7:a1:e1:27:30:f3:ad:0b:ac:5b:6d:cb:b7:e0:2d:
                    33:af:db:f6:3a:28:e2:11:5b:6d:07:22:af:81:a2:
                    32:08:64:5d:19:d6:0d:93:c8:e3:50:69:bb:14:ac:
                    92:c4:1b:1c:9c:98:a5:08:41:06:20:a9:00:04:51:
                    a2:b0:f3:cd:ab:1b:be:92:0f:52:30:b1:04:e1:8f:
                    c2:61:2e:01:6e:77:bc:43:43:c9:68:4b:e0:a7:3b:
                    1c:23:7a:97:f7:9e:66:0f:2a:b8:7f:bd:ea:70:37:
                    eb:8d:69:02:fa:e5:a5:9c:29:77:48:c4:fc:15:2a:
                    6d:18:54:48:e8:2e:de:41:8b:5d:87:69:03:83:15:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:16:BE:D3:70:DA:52:40:03:43:30:F4:4F:00:1D:66:3F:83:73
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130312e3130312e302f32342d3234203d3e20313331363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.101.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:bc:ce:5a:0e:72:71:6a:bf:7e:f0:6d:cc:97:6c:f1:37:ec:
         9c:12:99:2f:d3:3e:b3:98:59:a8:71:a1:65:d6:e6:64:58:cd:
         cb:f9:24:1d:62:6e:86:1c:7c:e4:d4:b7:63:8d:e7:0c:d4:98:
         ce:94:fa:97:18:31:b0:e2:bd:2b:3e:65:f0:f0:d6:21:a9:c3:
         27:34:36:c7:6b:50:bf:eb:fb:f7:2b:f9:82:61:28:c4:9d:22:
         53:61:b6:70:a4:8e:ec:44:15:57:c8:e2:fa:01:62:fb:ea:a3:
         bc:b2:f7:3a:b1:0f:42:6a:91:b1:15:7f:d7:fd:6c:bb:61:26:
         8a:86:e5:e2:a2:e5:43:84:c3:54:20:74:fc:57:6b:fe:fd:6b:
         3f:72:ff:54:93:ea:76:81:7b:97:f1:68:ab:24:c0:16:c4:ed:
         7c:12:e5:7f:0a:65:5e:95:f2:5c:08:cd:ec:45:0b:c8:d7:28:
         6d:90:fe:99:ae:0a:ae:53:ce:35:3c:56:91:e1:a8:e7:c9:e5:
         e6:3d:75:5d:e4:72:8e:fc:b8:5a:55:84:7d:5d:df:bc:eb:a8:
         5b:a1:a0:ec:90:f0:da:d0:29:6a:1c:11:dc:3a:e6:22:a1:39:
         85:e9:0a:2a:dd:31:58:f1:b9:55:93:bc:55:4a:eb:c8:70:d0:
         20:6a:4a:e7
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUdu8UkP17N/M6NuyVkyDen9ZlhYYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1NzQ2QkIxMzdDRTczMEZCMENBQTI4QUFFNTdENEVE
RTBBMUU5OTAeFw0yNjA1MTExNzE1MDVaFw0yNzA1MTAxNzIwMDVaMDMxMTAvBgNV
BAMTKEQyRkExNkJFRDM3MERBNTI0MDAzNDMzMEY0NEYwMDFENjYzRjgzNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVudshgqiO3HYrhpw4Bt843bxp
20/bTsuVAFQMBKobgz1Kl12+bcYv0mTbvw46qwE4gZS1Ptp7s43dsP8cxnC1VDhK
ifxqCDkbtJmc8ntbfgYB8nUt4eAauPHhTQ53nexcs1R5UYqW/iM6XR2vckiCeJ5/
W/roJPeh4Scw860LrFtty7fgLTOv2/Y6KOIRW20HIq+BojIIZF0Z1g2TyONQabsU
rJLEGxycmKUIQQYgqQAEUaKw882rG76SD1IwsQThj8JhLgFud7xDQ8loS+CnOxwj
epf3nmYPKrh/vepwN+uNaQL65aWcKXdIxPwVKm0YVEjoLt5Bi12HaQODFY7bAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQU0voWvtNw2lJAA0Mw9E8AHWY/g3MwHwYDVR0j
BBgwFoAUJ1dGuxN85zD7DKooquV9Tt4KHpkwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUMv
MC8yNzU3NDZCQjEzN0NFNzMwRkIwQ0FBMjhBQUU1N0Q0RURFMEExRTk5LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzI3NTc0NkJCMTM3Q0U3MzBGQjBDQUEyOEFBRTU3
RDRFREUwQTFFOTkuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQy8wLzMxMzAzMTJlMzEzMDMx
MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNjMyMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABlZWUwDQYJKoZIhvcNAQELBQADggEBADW8zloOcnFqv37wbcyXbPE3
7JwSmS/TPrOYWahxoWXW5mRYzcv5JB1iboYcfOTUt2ON5wzUmM6U+pcYMbDivSs+
ZfDw1iGpwyc0NsdrUL/r+/cr+YJhKMSdIlNhtnCkjuxEFVfI4voBYvvqo7yy9zqx
D0JqkbEVf9f9bLthJoqG5eKi5UOEw1QgdPxXa/79az9y/1ST6naBe5fxaKskwBbE
7XwS5X8KZV6V8lwIzexFC8jXKG2Q/pmuCq5TzjU8VpHhqOfJ5eY9dV3kco78uFpV
hH1d37zrqFuhoOyQ8NrQKWocEdw65iKhOYXpCirdMVjxuVWTvFVK68hw0CBqSuc=
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:32 2026 by rpki-client