Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa
File:                     3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa (raw, json)
Hash identifier:          nt3GnjyC68uevHd0pUpAVGqFmziCH3936csURlgKs7c=
Subject key identifier:   53:C2:16:68:D9:16:FF:A8:77:F6:E6:2D:0A:BC:69:B7:98:C5:85:E2
Certificate issuer:       /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
Certificate serial:       083FE93620ABAEE27DC9DBAA138B1E73C72ECC50
Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa
Signing time:             Mon 11 May 2026 17:57:11 +0000
ROA not before:           Mon 11 May 2026 17:52:11 +0000
ROA not after:            Mon 10 May 2027 17:57:11 +0000
asID:                     208932
IP address blocks:        103.127.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl
                          rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3f:e9:36:20:ab:ae:e2:7d:c9:db:aa:13:8b:1e:73:c7:2e:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
        Validity
            Not Before: May 11 17:52:11 2026 GMT
            Not After : May 10 17:57:11 2027 GMT
        Subject: CN=53C21668D916FFA877F6E62D0ABC69B798C585E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:92:68:ef:bb:44:6d:9d:f7:4d:8e:b1:d7:
                    96:3d:0d:f5:2f:83:16:5c:75:f0:91:ff:6b:c8:98:
                    9a:53:16:20:bc:93:17:df:4d:45:b1:88:1a:0a:fb:
                    0f:7e:cc:09:20:14:07:f5:b5:b3:7d:8d:7b:d5:d2:
                    f0:36:0d:a6:98:9f:cc:cc:10:57:fe:e8:87:48:46:
                    46:9f:d6:bf:00:61:cb:9a:dc:b5:17:00:ed:d1:bb:
                    5e:3d:1a:98:b6:ee:18:99:1c:0a:07:87:7d:da:52:
                    72:eb:9a:b4:48:ad:08:e0:9e:fc:13:28:a9:98:09:
                    48:e7:a6:7a:4c:13:25:67:6d:91:47:a1:83:a8:74:
                    7a:1c:26:55:e9:21:a0:85:63:ed:53:66:2a:fa:57:
                    0d:c1:9a:62:dd:9d:b3:91:02:c1:aa:15:ab:c4:cc:
                    ae:8f:fe:32:f2:a6:9a:11:98:3f:e5:2f:cc:02:90:
                    69:9e:a0:80:c5:73:a2:28:5b:4e:e8:28:b4:a8:cf:
                    a9:d8:a8:38:e6:ff:a2:69:bf:d1:2c:5c:e8:88:00:
                    a8:0d:7d:37:97:d0:42:94:c6:ef:e0:9e:0b:d6:d9:
                    7e:99:7a:a5:cf:bc:a7:08:c1:4e:a6:a2:a1:41:9b:
                    7f:4d:88:f4:d2:f9:b8:24:84:04:9e:c2:8f:e6:ba:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C2:16:68:D9:16:FF:A8:77:F6:E6:2D:0A:BC:69:B7:98:C5:85:E2
            X509v3 Authority Key Identifier:
                keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233382e302f32342d3234203d3e20323038393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:97:33:86:78:4e:9c:48:69:05:47:5d:13:42:86:71:5a:73:
         1d:d2:7c:2f:ad:dd:99:e8:1c:cb:54:48:4b:b7:70:de:80:7d:
         57:49:8b:32:0c:44:1b:52:e3:5e:6c:99:04:60:8a:78:69:61:
         d3:2c:ef:43:6c:ae:9b:10:a9:85:44:a6:62:48:c1:f7:05:7c:
         ac:6e:35:8a:09:67:5f:2a:27:ee:2e:9b:59:3c:2f:fd:21:21:
         9d:eb:f7:8e:06:a7:c2:9c:1d:93:06:cb:5f:cf:f8:d7:ff:b6:
         d6:49:ec:b2:30:98:34:41:7a:e3:d2:3d:85:3d:62:2b:d6:0c:
         fb:68:88:28:9c:ea:32:1f:7b:35:3d:86:76:e8:3e:ca:63:c5:
         cf:af:ba:a0:ed:a1:f3:5c:c9:ef:73:8d:0f:14:f7:8d:d1:80:
         23:2d:ea:14:07:6a:dd:ba:22:3e:dd:d8:00:78:4c:f2:85:51:
         2f:82:76:90:1a:ef:88:cc:40:37:11:55:da:28:f0:7d:8f:f2:
         09:e0:22:3b:a9:fe:bc:fa:63:9b:ed:49:81:cc:17:90:4d:37:
         f4:e5:30:fb:d6:03:79:f3:d4:c9:7c:b7:8f:5a:1e:3d:3c:5e:
         1b:0c:ac:38:cc:96:f9:a0:f7:3b:82:a3:2c:8a:56:34:bc:d5:
         99:da:9b:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:14:11 2026 by rpki-client