Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa
File:                     3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa (raw, json)
Hash identifier:          7MNXU7sfreKdDoH2cxg35XbGCH5NeuOsP993lyzfqsc=
Subject key identifier:   60:53:95:74:A7:65:B6:82:A6:74:F0:93:AF:F7:A8:7B:41:6D:D8:57
Certificate issuer:       /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial:       75F91C0BFE715A06AAF249E807C7C2B61595FCE3
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa
Signing time:             Mon 11 May 2026 17:04:58 +0000
ROA not before:           Mon 11 May 2026 16:59:58 +0000
ROA not after:            Mon 10 May 2027 17:04:58 +0000
asID:                     131636
IP address blocks:        103.130.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
                          rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f9:1c:0b:fe:71:5a:06:aa:f2:49:e8:07:c7:c2:b6:15:95:fc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
        Validity
            Not Before: May 11 16:59:58 2026 GMT
            Not After : May 10 17:04:58 2027 GMT
        Subject: CN=60539574A765B682A674F093AFF7A87B416DD857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:56:61:cf:bb:e2:e8:2a:19:ba:bf:54:1f:
                    46:91:84:e0:81:f1:d9:73:93:34:b7:4f:e9:db:1b:
                    4c:2a:95:c7:0e:e1:32:43:9b:37:88:82:55:53:7c:
                    8c:e5:fb:4a:7d:6e:ff:84:c6:63:89:1f:40:90:f6:
                    09:04:a2:8f:76:5a:f1:eb:60:19:cf:10:ab:0f:79:
                    25:a7:07:4b:b5:01:76:46:ee:66:b3:d5:7a:4f:44:
                    32:3b:0c:40:42:31:18:78:3f:2b:2e:d4:3b:81:28:
                    04:20:09:db:88:36:3a:b8:5a:74:63:88:8c:d7:be:
                    68:24:48:14:7b:48:ff:31:6d:81:55:4c:e7:66:b5:
                    bc:2b:40:10:e8:df:63:c9:32:d3:82:20:ed:b7:04:
                    b4:56:b5:5d:c3:96:cc:49:f6:27:00:08:d0:ca:d9:
                    43:46:35:ea:1c:ad:02:54:94:39:5b:1a:77:8b:05:
                    a7:71:b9:d7:83:49:8b:33:8d:34:79:e5:e3:8c:0a:
                    01:ba:fe:18:80:62:34:8a:e8:09:84:2a:99:8b:bd:
                    d5:c1:90:03:1e:2a:e3:44:69:73:9b:66:bc:55:d7:
                    cc:a0:52:04:ca:ed:fe:32:68:9e:60:8e:30:cf:56:
                    60:5c:96:67:fe:e4:97:59:2d:81:5f:0b:1c:33:20:
                    6c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:95:74:A7:65:B6:82:A6:74:F0:93:AF:F7:A8:7B:41:6D:D8:57
            X509v3 Authority Key Identifier:
                keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132342e302f32322d3234203d3e20313331363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:c1:54:ca:d7:d3:fd:38:04:11:49:e5:1f:05:c6:8a:1e:57:
         cb:0c:1e:93:9d:e2:53:79:bb:83:01:f1:5f:11:e3:ee:fb:18:
         e7:b5:00:08:0e:49:e2:8b:00:0f:be:ab:a8:78:10:57:eb:e6:
         db:bc:f0:88:05:52:69:da:fc:b9:be:9c:85:c8:0e:8b:a5:20:
         30:a1:58:07:2a:cd:ec:82:f3:d4:df:9a:96:68:58:e7:14:2e:
         db:59:17:d1:ff:d1:13:92:06:b3:9e:50:78:56:ee:57:9f:df:
         90:0c:80:47:84:86:28:d7:7c:6d:6e:76:c6:7e:a5:f7:9a:f2:
         35:12:0a:d4:7b:29:ad:00:e9:01:32:6d:bb:4e:7c:38:8b:31:
         e4:8d:f6:a6:1d:42:e9:47:0e:1d:83:7f:d9:fc:c6:ad:f3:51:
         77:de:03:d6:47:a9:19:cc:78:19:47:c1:4b:4c:0e:32:f8:a3:
         28:89:4c:f7:6f:86:2e:d2:0d:bc:00:97:ee:41:9a:b6:52:50:
         fb:06:f0:bc:f8:c4:8e:9f:03:e2:b3:62:74:b7:d8:20:3b:85:
         58:7e:65:6b:dc:c3:6e:fd:5c:fd:16:b4:57:8e:2f:89:50:b9:
         6f:74:76:a2:86:09:a6:6f:99:54:54:54:12:03:cc:c9:31:12:
         c6:31:2d:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:09:09 2026 by rpki-client