Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/3130332e3233352e38392e302f32342d3234203d3e20313331363434.roa
File:                     3130332e3233352e38392e302f32342d3234203d3e20313331363434.roa (raw, json)
Hash identifier:          XWABkVZizym26j9UV1O9Mf/H9x7fJtQx35Y2Dn8exw0=
Subject key identifier:   E8:E2:AA:4F:18:BA:21:9D:C0:40:68:13:28:00:67:ED:25:C7:4A:29
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       6B30784A9FEF9627B46F72324AC3D1A32BD508D7
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130332e3233352e38392e302f32342d3234203d3e20313331363434.roa
Signing time:             Mon 11 May 2026 17:52:38 +0000
ROA not before:           Mon 11 May 2026 17:47:38 +0000
ROA not after:            Mon 10 May 2027 17:52:38 +0000
asID:                     131644
IP address blocks:        103.235.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:30:78:4a:9f:ef:96:27:b4:6f:72:32:4a:c3:d1:a3:2b:d5:08:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:47:38 2026 GMT
            Not After : May 10 17:52:38 2027 GMT
        Subject: CN=E8E2AA4F18BA219DC0406813280067ED25C74A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:25:37:a0:72:e7:96:f8:8e:13:ea:42:ac:
                    f6:8f:e1:ff:58:64:10:ca:91:04:27:4e:47:3f:85:
                    f4:98:67:2a:15:69:c9:ba:db:4b:eb:47:d2:49:7a:
                    d1:57:8a:47:09:ae:25:e0:6a:10:33:75:4f:c4:70:
                    81:65:7c:4e:7c:05:01:06:06:94:f2:8e:ee:86:ec:
                    95:7d:cf:62:ed:8b:3c:7b:8c:93:63:aa:bb:76:cb:
                    e2:6e:06:7e:4f:3f:34:6b:f1:30:07:ae:5e:65:7d:
                    bd:29:bc:ec:a8:77:ed:ab:12:e6:2b:a5:7d:47:90:
                    f3:e3:ec:5e:8e:13:2a:6f:f2:31:58:87:86:ff:ab:
                    1f:ea:c4:d4:46:29:0f:0f:7f:e6:75:62:a3:f4:73:
                    69:59:02:62:69:9c:30:ee:34:00:a8:0a:30:54:09:
                    b4:da:e4:3c:21:f2:66:16:99:da:14:d0:cd:5b:91:
                    e3:30:82:d7:86:ed:a1:68:51:d4:a7:b0:b2:6d:00:
                    95:1a:7a:73:27:56:a7:df:bd:54:e2:1b:3b:d2:48:
                    73:48:2b:d9:db:ed:a2:b0:da:f3:e5:f3:5b:c5:a2:
                    1a:8a:54:0b:3e:37:bb:2d:6a:08:25:da:43:ac:af:
                    09:dd:19:df:36:29:e3:6a:66:10:60:b0:36:9e:79:
                    b7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E2:AA:4F:18:BA:21:9D:C0:40:68:13:28:00:67:ED:25:C7:4A:29
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/3130332e3233352e38392e302f32342d3234203d3e20313331363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ad:2c:74:50:36:a3:b2:de:3d:55:a1:54:63:97:65:5c:27:
         e3:78:4d:b2:91:60:25:5f:9a:60:8d:ca:2f:05:68:e9:bd:46:
         a1:a4:f7:c8:09:46:8e:c7:ed:f2:6f:63:d0:29:f9:fd:ff:14:
         12:11:be:33:79:0e:0e:94:b5:d4:05:0c:59:8c:a3:89:37:45:
         cf:e6:a7:10:e7:2e:01:a5:b2:46:f9:fa:8d:a3:1b:9a:79:c6:
         ff:5d:ad:20:f5:07:59:8f:73:64:92:b1:22:e7:40:de:0e:64:
         1c:d6:ca:27:2d:43:d3:87:54:d8:8a:6e:72:0f:74:10:20:04:
         74:2e:19:fb:2a:9f:b9:2f:37:6d:0f:4f:05:9d:ba:cf:38:66:
         bc:78:3a:bf:40:fd:f7:bb:f1:bb:0c:46:c1:4b:c0:f4:a1:ce:
         48:30:bd:fd:25:f9:59:4a:2c:c3:52:72:b4:a3:81:64:39:89:
         ab:d4:fd:78:07:73:49:32:8e:67:03:67:9a:09:ca:af:dc:8e:
         ae:42:c0:e9:2c:b7:51:97:9b:f3:2b:70:4c:31:ce:07:13:87:
         85:62:2c:5a:33:6d:22:57:44:ca:88:57:11:9a:3b:fd:9d:cd:
         1e:52:f8:d6:7f:cf:20:22:63:ad:72:f6:11:45:86:77:8e:1e:
         d1:62:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:35 2026 by rpki-client