Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa
File:                     3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa (raw, json)
Hash identifier:          7hhipyt4Di6KylqpdZkFLgokgRg/ZHGamIeaZ0lFOO0=
Subject key identifier:   B9:50:4D:9B:07:5D:5E:1F:E8:9B:42:F7:25:86:CE:95:C3:AC:AB:39
Certificate issuer:       /CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
Certificate serial:       17E223FEE83EA3D0D8564DBFE1E8DE74BD6D4B2F
Authority key identifier: E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa
Signing time:             Mon 11 May 2026 17:04:46 +0000
ROA not before:           Mon 11 May 2026 16:59:46 +0000
ROA not after:            Mon 10 May 2027 17:04:46 +0000
asID:                     17408
IP address blocks:        103.138.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl
                          rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e2:23:fe:e8:3e:a3:d0:d8:56:4d:bf:e1:e8:de:74:bd:6d:4b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2FEF6929D00129C0EC91DE25524363E78F319D7
        Validity
            Not Before: May 11 16:59:46 2026 GMT
            Not After : May 10 17:04:46 2027 GMT
        Subject: CN=B9504D9B075D5E1FE89B42F72586CE95C3ACAB39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:02:fa:4b:f9:f7:76:bc:64:68:13:45:b8:
                    1c:86:0b:31:1c:3e:e1:cf:34:4f:01:8c:fa:5b:0b:
                    fe:57:83:ab:44:3e:9f:2a:35:50:31:2d:df:34:b2:
                    20:2d:35:5d:4a:61:00:2b:60:77:8d:fd:12:e7:c7:
                    e0:51:19:16:c4:7d:74:c7:b0:9c:81:86:ee:81:84:
                    4c:08:30:fe:32:55:f7:2a:21:9c:1e:27:36:21:9d:
                    dc:90:08:2b:13:12:12:34:30:19:be:c7:b6:1b:69:
                    16:9c:32:49:59:81:e7:91:82:0a:31:39:d3:52:cb:
                    60:d6:7f:ef:f3:0f:28:95:f9:45:79:6c:ec:91:62:
                    3a:68:6f:81:56:8d:e6:18:28:10:e0:d5:9a:1b:5c:
                    60:c4:0d:87:16:a0:56:14:b9:8c:2e:f9:23:b1:35:
                    d5:bc:11:cb:3a:4c:9d:1b:de:dd:4b:9c:57:b9:8a:
                    40:89:4e:09:7f:ba:c2:85:f1:30:40:25:b2:e3:b1:
                    ca:bf:08:83:a7:ba:04:dc:e3:0b:6e:78:84:e0:56:
                    ec:b3:2f:14:6a:e6:e3:e1:32:97:46:d2:cc:4b:42:
                    ed:66:ea:75:2f:37:fc:1a:7a:12:8d:56:59:7d:e9:
                    ac:df:be:d3:cc:91:fd:c3:c3:9c:6d:ca:15:54:bb:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:4D:9B:07:5D:5E:1F:E8:9B:42:F7:25:86:CE:95:C3:AC:AB:39
            X509v3 Authority Key Identifier:
                keyid:E2:FE:F6:92:9D:00:12:9C:0E:C9:1D:E2:55:24:36:3E:78:F3:19:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/E2FEF6929D00129C0EC91DE25524363E78F319D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E2FEF6929D00129C0EC91DE25524363E78F319D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WANTEASY/0/3130332e3133382e3130362e302f32342d3234203d3e203137343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:7a:df:a7:86:ab:f4:43:79:f8:91:f0:85:aa:ba:fc:15:
         8b:54:72:95:cf:3f:35:27:99:f9:75:f2:75:37:a4:56:3d:9e:
         c4:68:56:52:99:18:3b:c9:ec:c6:de:53:27:b0:e7:00:9a:be:
         11:36:34:a6:ed:56:73:69:56:15:ff:22:bc:da:e0:19:7e:ef:
         65:af:52:dc:d2:2d:f7:7b:c1:cb:56:02:28:0c:07:0d:3d:3d:
         99:cb:05:22:bf:39:65:2b:65:c8:dc:b5:c3:1a:1d:d8:64:1b:
         c0:83:86:ad:29:a6:e2:3c:3d:31:d2:8d:4e:eb:4c:c3:2e:d6:
         76:fd:46:c6:d3:b1:e8:7b:fd:6d:42:d6:bc:71:96:81:2c:76:
         b5:cd:47:da:76:cb:69:ed:38:37:78:a8:93:55:24:b8:f3:d0:
         09:a7:1d:51:b6:11:a8:54:27:3c:4c:44:b9:63:60:0a:da:54:
         4b:a4:8d:41:ab:bf:c3:40:3a:d6:d4:69:81:b8:19:bf:da:14:
         bd:f8:69:c4:3b:f7:ef:be:a4:28:97:9b:07:82:95:d9:67:60:
         29:3a:e7:2e:76:ad:54:c2:07:ab:6c:ac:4b:e0:6a:92:5c:ee:
         41:24:6e:fa:ef:0f:db:83:4b:d5:2e:09:df:b0:3d:4e:6f:b9:
         a2:b1:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:39 2026 by rpki-client