Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233362e302f32342d3234203d3e20323038393332.roa
File:                     3130332e3132372e3233362e302f32342d3234203d3e20323038393332.roa (raw, json)
Hash identifier:          PjMg64NE+Q78U6AFltobRIybnP6K/mDHV61figZl/00=
Subject key identifier:   1D:32:10:CC:6D:1D:C4:37:FC:A1:A7:7A:5B:E9:6A:B1:38:57:5C:5C
Certificate issuer:       /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
Certificate serial:       1E26343D0BBD44FF389C09C13204B1C6509CE489
Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233362e302f32342d3234203d3e20323038393332.roa
Signing time:             Mon 11 May 2026 17:57:06 +0000
ROA not before:           Mon 11 May 2026 17:52:06 +0000
ROA not after:            Mon 10 May 2027 17:57:06 +0000
asID:                     208932
IP address blocks:        103.127.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl
                          rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:34:3d:0b:bd:44:ff:38:9c:09:c1:32:04:b1:c6:50:9c:e4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
        Validity
            Not Before: May 11 17:52:06 2026 GMT
            Not After : May 10 17:57:06 2027 GMT
        Subject: CN=1D3210CC6D1DC437FCA1A77A5BE96AB138575C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:f9:3a:ad:72:c6:47:e2:10:8d:48:f2:64:
                    6b:63:52:84:4b:a0:7f:5b:96:cd:e4:f4:35:d2:a2:
                    30:f9:47:c3:e5:80:93:0a:e6:69:ac:37:a9:5a:34:
                    05:09:d3:30:9d:98:74:74:52:92:98:e2:b4:19:51:
                    7f:7b:c9:84:50:92:fe:51:17:8e:21:90:fc:40:9e:
                    b0:26:86:2d:32:2f:3e:95:c0:8a:2c:76:10:7f:79:
                    a0:fe:0a:1b:b9:2b:2b:7a:3e:a9:39:85:34:97:94:
                    d1:3e:4b:49:4b:48:b0:da:8a:d7:e5:80:da:03:44:
                    40:c1:ad:6d:b1:52:9e:a9:b4:45:54:74:52:a4:d0:
                    cb:a9:c8:d4:d3:65:fc:24:f6:24:7c:4c:54:1d:c0:
                    3f:e2:28:fb:6c:95:ce:0d:91:e1:27:16:47:22:db:
                    a4:42:d0:1a:3a:4a:a4:29:8a:90:d5:51:9a:10:40:
                    90:c4:e0:04:d6:a9:a1:48:9a:54:a7:5a:0c:89:e9:
                    d8:f4:0a:b8:77:8e:a6:f7:cc:b6:df:77:41:bf:b0:
                    49:96:d5:17:b4:d3:33:cd:fa:e4:44:da:e2:8d:1f:
                    d2:8f:d0:61:e5:5f:f7:75:be:77:bc:92:11:50:af:
                    5c:84:70:66:9f:0d:eb:f7:f8:47:34:f2:a5:3f:54:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:32:10:CC:6D:1D:C4:37:FC:A1:A7:7A:5B:E9:6A:B1:38:57:5C:5C
            X509v3 Authority Key Identifier:
                keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233362e302f32342d3234203d3e20323038393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:4d:47:ef:51:84:83:f7:ef:7e:f0:25:ff:ed:cb:17:a3:5a:
         44:fd:e2:e6:ca:f1:08:fe:82:36:f3:37:c0:5d:97:79:f3:71:
         b5:3e:c5:ad:9f:a4:e5:f6:79:2e:d3:90:fc:0f:a4:42:f8:d0:
         5c:31:0d:62:20:2e:8a:9b:a2:3d:20:10:75:56:ae:da:04:43:
         dc:ad:90:7e:e9:8f:20:1c:54:63:14:17:8c:2a:cb:e5:10:1f:
         8e:43:91:a4:88:27:84:54:0f:f2:4b:40:8f:79:30:06:e5:73:
         da:b5:19:37:13:f5:18:6e:eb:27:57:20:31:b8:88:81:0b:d0:
         3f:cb:65:65:f7:83:66:c5:c8:f5:ad:d5:88:b1:f6:f7:ac:f3:
         77:c6:40:d9:1b:de:41:ef:fa:e0:06:4c:a4:00:b9:88:30:8a:
         f0:40:b4:68:31:85:30:3e:85:b4:15:dc:13:cc:a5:58:45:e8:
         a3:ad:a2:36:28:2d:89:46:f7:08:34:ab:42:7b:da:65:4f:3f:
         b5:d2:a3:4c:e3:11:8f:e6:75:43:eb:3b:a9:40:7f:b3:5a:6b:
         fb:3e:f0:59:e3:e1:0c:20:39:76:de:e4:15:81:4a:5f:20:d3:
         71:6f:33:eb:cc:aa:90:4c:d7:01:e1:b7:ee:f8:dc:7c:16:7f:
         d3:39:4a:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:32 2026 by rpki-client