Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3133302e302e302f32322d3234203d3e203137343038.roa
File:                     3130332e3133302e302e302f32322d3234203d3e203137343038.roa (raw, json)
Hash identifier:          MqUpOjYcs+DThs4PEdfgWe16ib+Pm8Uun845j7bvpQE=
Subject key identifier:   CD:CF:11:D1:76:09:F1:D8:53:58:84:16:5E:07:27:2F:C9:FE:F4:9B
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       41D664F8E3F4AF7C7011F42931999933F085EBE4
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3133302e302e302f32322d3234203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:38:16 +0000
ROA not before:           Mon 11 May 2026 17:33:16 +0000
ROA not after:            Mon 10 May 2027 17:38:16 +0000
asID:                     17408
IP address blocks:        103.130.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d6:64:f8:e3:f4:af:7c:70:11:f4:29:31:99:99:33:f0:85:eb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: May 11 17:33:16 2026 GMT
            Not After : May 10 17:38:16 2027 GMT
        Subject: CN=CDCF11D17609F1D8535884165E07272FC9FEF49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:9c:02:a1:a3:0d:9c:32:59:b1:1c:2d:a8:
                    b0:d6:58:d2:14:e3:41:9d:81:e6:8d:fe:02:de:26:
                    cd:78:3d:ef:68:d9:42:0a:e2:33:c4:38:8f:9c:c0:
                    e4:f0:90:54:ca:cd:e7:e2:e8:8f:38:d1:74:14:f8:
                    b3:a5:5f:1b:56:75:7f:7f:21:ed:43:3c:38:a6:b4:
                    31:4c:82:ec:ad:b2:a0:f7:92:ae:f8:68:ea:6d:77:
                    b3:ad:fb:6a:70:81:c8:77:b9:03:21:dd:8b:e1:74:
                    19:44:50:db:4c:62:41:e1:fd:92:b2:27:c5:b6:f6:
                    08:2b:fb:72:b3:b3:35:40:6e:32:4d:d4:42:19:0e:
                    9f:ce:69:60:45:38:6a:cb:e3:ac:f3:87:e2:c2:4e:
                    a5:ac:91:4e:ea:9b:41:26:32:6f:17:28:2d:25:7b:
                    b8:08:93:62:3c:6b:c5:f2:9b:1f:9e:df:41:25:2c:
                    97:0e:db:1f:a1:6f:3f:2d:4e:8b:81:7d:7e:f4:a1:
                    fb:23:fb:cd:3d:ed:06:8a:5a:95:32:10:b2:0e:24:
                    22:98:5b:85:e5:7e:e3:f2:01:de:bf:60:a3:c6:d1:
                    96:02:23:c6:9f:ff:cd:fd:9f:f4:39:96:64:ac:fe:
                    b8:b8:12:f6:30:33:3e:7e:c9:70:c1:70:82:c4:2b:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:11:D1:76:09:F1:D8:53:58:84:16:5E:07:27:2F:C9:FE:F4:9B
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3133302e302e302f32322d3234203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:ef:ed:34:cb:d7:d8:31:d7:ac:17:d0:df:5c:89:da:fc:
         68:1c:49:88:92:2e:59:54:e6:13:8c:96:3c:3c:3b:64:bb:c0:
         1f:4c:45:b9:24:9b:f9:5c:43:93:5a:3c:cd:a9:ae:1f:fc:fe:
         35:b6:0b:96:b6:58:6c:f8:c5:15:29:8f:a8:f0:a0:03:e3:9b:
         b3:0c:5a:3e:42:44:66:58:0a:88:ff:bc:ea:62:ec:d5:30:f4:
         af:22:71:7a:4c:75:f8:c1:6f:60:42:9c:e8:35:d3:45:b1:e7:
         d5:76:f6:91:cb:88:12:e8:8d:5b:4c:81:53:23:ca:c6:03:e9:
         07:58:82:ae:82:62:66:7a:89:23:e3:71:90:48:d3:0a:6a:16:
         a4:f4:49:b8:17:7c:65:57:d1:aa:c3:9b:4c:07:15:e7:e0:b8:
         ea:0d:51:c1:7e:0f:47:b4:87:38:18:ee:4e:02:6e:b9:4e:9f:
         6b:a8:21:6b:06:69:17:b4:bd:86:d3:cf:19:ce:8c:b8:17:51:
         e6:a5:e3:05:8b:64:0c:7a:e9:ff:c8:60:2c:7e:66:9c:7e:b3:
         0a:3d:bb:fc:a7:a0:aa:34:5b:cc:0f:b3:d9:a7:6e:c4:d7:4a:
         8e:81:b1:77:f0:bf:f7:7b:1a:11:f3:15:d8:2c:b5:3f:bb:6c:
         89:ef:f7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:46 2026 by rpki-client