Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e20313331363434.roa
File:                     3130312e3130322e3130332e302f32342d3234203d3e20313331363434.roa (raw, json)
Hash identifier:          NIsU5I8ldlfwDLgK/zeWzpPgpZmSvTZ6qt/uITpwqDk=
Subject key identifier:   0B:43:F6:6F:C8:7C:DB:9F:7D:A6:CF:43:6C:AC:32:FC:1A:DB:F5:59
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       30CA8D45C09662FD69BACFE6F6C5CBEB73BA0F2E
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e20313331363434.roa
Signing time:             Mon 11 May 2026 17:40:15 +0000
ROA not before:           Mon 11 May 2026 17:35:15 +0000
ROA not after:            Mon 10 May 2027 17:40:15 +0000
asID:                     131644
IP address blocks:        101.102.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ca:8d:45:c0:96:62:fd:69:ba:cf:e6:f6:c5:cb:eb:73:ba:0f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:35:15 2026 GMT
            Not After : May 10 17:40:15 2027 GMT
        Subject: CN=0B43F66FC87CDB9F7DA6CF436CAC32FC1ADBF559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:bd:6e:0b:d9:58:bd:e4:8f:7f:35:fe:a6:
                    cb:fc:f0:b4:99:80:55:55:8d:3c:b8:96:94:8b:a8:
                    5a:75:5b:7b:73:71:ad:03:89:b4:95:ab:c5:50:2b:
                    1f:e9:ea:f4:bf:03:b6:cc:13:71:82:4d:e8:55:1b:
                    09:18:a0:f5:cc:fe:c9:ae:27:0b:11:ef:83:e9:2b:
                    d9:ed:cd:32:2b:05:54:2e:50:85:6f:33:d5:c2:8b:
                    df:b2:32:c9:67:f0:84:95:dd:c8:75:72:67:bc:ed:
                    88:03:c7:d4:bb:07:29:73:89:f5:d5:9c:40:10:70:
                    2a:e9:2f:e6:ce:b0:f0:08:7f:77:54:4f:42:36:24:
                    a1:0c:89:0f:20:69:0e:c1:98:8e:c1:b3:40:87:5a:
                    3e:25:7e:fc:d3:2d:35:eb:54:15:96:f2:98:f2:a6:
                    77:6d:ec:2e:9c:5e:1e:3e:21:85:a3:ac:03:29:b3:
                    3a:63:d5:e9:1f:5c:e6:06:04:eb:d1:33:a8:04:b4:
                    82:45:67:42:d5:a5:9d:05:82:83:4e:5e:db:fa:98:
                    dd:6b:fd:76:57:9b:89:2f:88:61:6a:97:11:dd:1c:
                    2a:6f:d9:a2:31:6a:27:bc:fb:fe:e7:fb:bb:37:20:
                    cd:6b:31:48:48:d5:d0:52:fa:17:e7:94:c6:73:a4:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:F6:6F:C8:7C:DB:9F:7D:A6:CF:43:6C:AC:32:FC:1A:DB:F5:59
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130312e3130322e3130332e302f32342d3234203d3e20313331363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.102.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:94:aa:45:e3:fb:01:2a:1f:c3:59:95:06:be:ab:b0:c7:14:
         83:e1:8a:26:11:96:f6:a5:b5:fd:fc:13:4b:3d:0e:e9:aa:c8:
         b1:37:a4:b1:38:b9:fb:f9:f6:ee:ad:b3:be:ec:0a:b4:be:47:
         53:8a:2c:b8:fc:16:6e:50:1d:30:01:83:6d:e1:7a:7c:f5:aa:
         bd:65:be:f7:18:7f:96:b8:89:fe:3a:1d:ba:50:7f:af:5b:1b:
         af:5b:da:ca:2e:e4:b4:d5:c3:5c:45:8d:a7:06:b7:8d:04:50:
         8e:00:78:c0:6d:ae:bc:00:bc:15:54:27:e0:5a:8e:e0:a1:8e:
         72:ad:be:69:4a:b2:20:0b:5f:98:3b:6e:ff:6d:b6:fc:99:ec:
         92:90:82:9e:d2:63:9e:c7:82:3c:67:77:4b:5b:5f:fa:54:8e:
         51:ca:49:aa:81:94:2f:39:3a:4a:66:66:06:24:2c:04:da:a2:
         ba:ed:34:13:2b:e6:b3:8f:95:77:a2:f6:ec:e6:15:ec:65:83:
         d0:1a:d1:77:cb:8a:c8:29:f3:df:5f:5c:68:6d:69:bd:27:47:
         c0:8a:19:70:9b:e5:f5:95:8d:53:b6:66:6c:f5:42:8e:f7:5e:
         0b:84:92:aa:73:89:00:f6:0c:5d:b2:a2:e8:4b:b4:f6:fc:32:
         fb:6f:0d:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:08 2026 by rpki-client