Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa
File:                     3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa (raw, json)
Hash identifier:          FraePq7gvqKVgRVRs1hOCUPexz3gSr4BPRhnGrHTV3o=
Subject key identifier:   57:BF:B2:B7:52:03:E6:AC:CA:80:45:8B:D9:BA:4C:D6:76:AA:D1:C0
Certificate issuer:       /CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
Certificate serial:       5BF20C652B4AB8B03BFD87880DE2EA5E170A8192
Authority key identifier: 10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa
Signing time:             Mon 11 May 2026 17:15:44 +0000
ROA not before:           Mon 11 May 2026 17:10:44 +0000
ROA not after:            Mon 10 May 2027 17:15:44 +0000
asID:                     131636
IP address blocks:        103.130.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl
                          rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f2:0c:65:2b:4a:b8:b0:3b:fd:87:88:0d:e2:ea:5e:17:0a:81:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101B0A7F90D58731E9618DC432438C8BFDB28AF4
        Validity
            Not Before: May 11 17:10:44 2026 GMT
            Not After : May 10 17:15:44 2027 GMT
        Subject: CN=57BFB2B75203E6ACCA80458BD9BA4CD676AAD1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:c4:7d:3b:79:8f:9d:eb:46:7e:04:2a:46:
                    28:ff:be:af:af:62:b6:92:49:be:b3:1d:cf:09:34:
                    84:98:d4:c1:a1:c5:15:81:41:be:b6:1f:19:d7:45:
                    ac:af:ea:9b:10:97:26:ef:5f:66:ac:66:a3:7c:1a:
                    fc:18:08:0e:3b:87:02:af:52:fa:d9:2b:0f:cd:54:
                    d8:2f:43:75:a8:ea:56:58:67:cd:3c:29:d8:41:ba:
                    8a:4f:97:6f:0b:b9:72:7a:f8:27:01:5d:92:c5:98:
                    46:58:2d:fc:b8:60:91:47:9f:ed:dc:bc:f9:5e:ed:
                    42:70:04:ff:1e:70:83:56:37:c1:d3:4a:40:dc:bc:
                    6b:92:f1:f9:5e:3f:8a:e7:e4:b4:4d:df:8a:f3:b0:
                    3a:bd:c0:7d:2e:e2:d4:fa:75:38:57:46:5b:89:97:
                    2f:64:55:5b:f4:4b:0e:1c:c8:24:19:b9:b1:e3:70:
                    a5:24:b0:c5:e5:f3:1a:1d:0a:e3:27:7c:be:cb:1e:
                    d2:d7:16:38:59:d8:b1:8e:73:b6:8a:3d:8c:f5:0c:
                    2a:15:83:93:d0:8b:6b:bb:f7:18:3f:28:ff:c2:4c:
                    9b:a3:9c:02:80:fc:23:df:01:58:bb:9d:e0:2b:25:
                    ee:6a:3a:1b:2d:85:dd:3a:66:3e:1d:5e:aa:8f:19:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BF:B2:B7:52:03:E6:AC:CA:80:45:8B:D9:BA:4C:D6:76:AA:D1:C0
            X509v3 Authority Key Identifier:
                keyid:10:1B:0A:7F:90:D5:87:31:E9:61:8D:C4:32:43:8C:8B:FD:B2:8A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/101B0A7F90D58731E9618DC432438C8BFDB28AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/101B0A7F90D58731E9618DC432438C8BFDB28AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANIN/0/3130332e3133302e3132352e302f32342d3234203d3e20313331363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:82:95:fa:65:48:28:0b:be:fb:a9:1d:95:4f:31:da:5f:b8:
         ed:a5:70:92:61:d2:7c:24:94:1c:c9:8d:e2:3e:a6:73:87:2f:
         6a:ce:6b:69:18:58:dd:fc:67:8c:f6:e4:96:ed:41:fe:cb:eb:
         09:7f:fb:d7:2c:84:42:ee:12:ec:20:33:22:dc:fd:88:f7:2d:
         99:96:9c:18:0a:a2:f0:72:80:84:63:84:25:4b:5c:8c:c0:0c:
         07:26:57:eb:55:c3:fe:a4:a7:66:f6:1a:5f:ba:8e:74:ad:e5:
         11:5e:ff:84:92:9a:ef:eb:73:8b:1a:1f:89:7a:c5:da:54:76:
         2b:a5:b6:b9:8a:db:28:88:8e:45:4b:16:2c:f8:ea:f4:d6:a7:
         bd:a1:3f:1d:9b:b3:78:d7:b7:fe:6a:74:04:6a:a7:e7:25:00:
         d5:22:91:5b:e3:cf:64:93:dc:d7:1d:6c:4d:b9:af:ac:38:68:
         1f:5c:cc:ae:6f:d8:7d:fd:7b:ff:47:44:06:94:48:f3:1b:21:
         00:d7:e9:8f:8f:41:6d:03:fd:26:5e:24:ee:f9:21:2f:55:8a:
         ab:c8:83:e1:61:99:46:ed:fa:e1:34:4f:fb:7b:8a:e0:d4:ab:
         f8:a9:24:aa:db:8f:ab:73:57:e5:0c:6c:5b:ca:3b:5e:ac:66:
         47:1e:5c:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:09:45 2026 by rpki-client