Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/3130332e3137382e33372e302f32342d3234203d3e203633383937.roa
File:                     3130332e3137382e33372e302f32342d3234203d3e203633383937.roa (raw, json)
Hash identifier:          dBLtMtWolWPZlDBlQNEYLj3mkdf7gjz7o7zCR6CwyI8=
Subject key identifier:   95:9C:98:B3:0C:EF:05:F9:83:3C:2F:40:99:4C:50:3B:19:97:46:84
Certificate issuer:       /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
Certificate serial:       3DC97ABF55A8D6219F6B187FC06F97D65AC16F3F
Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3137382e33372e302f32342d3234203d3e203633383937.roa
Signing time:             Mon 11 May 2026 17:31:30 +0000
ROA not before:           Mon 11 May 2026 17:26:30 +0000
ROA not after:            Mon 10 May 2027 17:31:30 +0000
asID:                     63897
IP address blocks:        103.178.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl
                          rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c9:7a:bf:55:a8:d6:21:9f:6b:18:7f:c0:6f:97:d6:5a:c1:6f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
        Validity
            Not Before: May 11 17:26:30 2026 GMT
            Not After : May 10 17:31:30 2027 GMT
        Subject: CN=959C98B30CEF05F9833C2F40994C503B19974684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:df:c7:a0:d3:dd:8c:d0:f8:2f:61:78:25:
                    b9:c6:51:e5:04:9a:91:45:64:93:51:ce:5e:ff:0b:
                    dc:cb:4e:9b:b6:d0:cb:ea:77:2b:72:ee:25:cb:6e:
                    65:3a:01:bc:bb:15:57:4e:e7:b7:1e:c2:af:42:f4:
                    bf:2c:37:13:5f:b3:ec:b3:9d:bf:4b:20:18:64:e9:
                    38:6c:fe:33:e4:76:b8:25:05:b0:21:3b:18:fe:4b:
                    9b:50:7e:f6:37:f5:85:d2:46:d3:7c:0a:cd:a6:23:
                    c0:0d:c6:ca:d5:a1:1f:ab:9e:e0:ae:8d:40:59:d6:
                    2b:e6:66:01:23:e1:ad:63:38:d5:eb:09:a6:ea:e7:
                    55:6e:9c:82:04:23:f5:b3:ae:67:ed:9c:2e:9b:83:
                    2d:a7:e5:b9:1c:cb:ab:3a:c4:f3:9a:50:81:86:74:
                    92:c8:bf:b8:2b:5f:7b:d4:32:1f:bc:5c:63:a4:95:
                    6b:36:f6:36:7e:c0:e1:ab:25:78:9a:72:02:e9:ad:
                    63:73:a3:35:65:e1:15:2b:39:87:59:f1:fb:4c:33:
                    da:e8:03:dc:01:f9:f8:1e:87:37:83:33:33:a5:b6:
                    1e:cc:5f:e2:aa:52:09:4a:3b:b7:c7:81:73:69:a7:
                    11:ec:6a:58:cd:15:90:c3:c6:44:51:7a:87:5b:81:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:98:B3:0C:EF:05:F9:83:3C:2F:40:99:4C:50:3B:19:97:46:84
            X509v3 Authority Key Identifier:
                keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3137382e33372e302f32342d3234203d3e203633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:38:14:0b:37:98:5e:cc:6f:cb:4a:dc:32:e3:e4:a3:82:81:
         77:b5:38:12:66:d6:2e:33:41:e0:8f:ca:5a:05:10:00:1d:19:
         e8:21:fb:dc:f7:4f:19:1f:f0:b4:18:ad:28:0c:36:fc:fd:92:
         d7:0a:ce:ce:53:e6:9e:c4:00:5e:34:72:80:5e:4b:fd:74:08:
         7b:aa:ad:1f:9b:b9:82:97:ee:1b:d8:5f:42:2a:59:15:45:a0:
         3a:65:ba:4c:38:b0:ea:b7:78:51:dc:f0:be:fb:b3:c3:06:3c:
         19:7d:ec:4d:1e:69:5f:81:ac:99:7e:3c:6e:51:e6:e6:78:9f:
         5a:3c:99:64:e8:fb:a9:fb:35:ac:4e:65:1c:4d:09:9d:08:01:
         17:13:4f:74:01:bd:83:cf:d9:46:3a:23:ba:c4:c6:97:6b:9d:
         d9:f2:e7:99:b0:0e:80:ee:bb:9f:21:3d:8d:d9:1c:e7:c2:e5:
         c0:8e:be:34:20:e2:5a:4b:87:bd:bf:d3:64:7c:e7:bb:57:85:
         f4:bb:3e:e5:d5:4d:c3:60:6b:7c:fb:35:af:52:43:88:55:91:
         1a:f6:2b:66:63:6b:6a:e0:44:96:03:1c:d4:73:19:51:8b:2f:
         1d:1e:b8:fa:22:a5:c7:22:72:e8:03:38:6f:48:bd:40:6a:4b:
         bf:d8:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:34 2026 by rpki-client