Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32322d3234203d3e203138343234.roa
File:                     3130332e33302e34342e302f32322d3234203d3e203138343234.roa (raw, json)
Hash identifier:          0T4aH8F1idIZL1J88JIgPeIEfRlCxSalEyEW3m2E2sM=
Subject key identifier:   62:79:09:A9:CD:67:BB:7B:67:88:6F:B1:85:60:69:03:E6:BB:B8:A3
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       71F54D7F030D2B41F22E8B0947B9A309C7C783DD
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32322d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:09:22 +0000
ROA not before:           Mon 11 May 2026 17:04:22 +0000
ROA not after:            Mon 10 May 2027 17:09:22 +0000
asID:                     18424
IP address blocks:        103.30.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f5:4d:7f:03:0d:2b:41:f2:2e:8b:09:47:b9:a3:09:c7:c7:83:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:04:22 2026 GMT
            Not After : May 10 17:09:22 2027 GMT
        Subject: CN=627909A9CD67BB7B67886FB185606903E6BBB8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:41:f0:f3:86:15:79:6e:01:bd:2a:90:27:
                    01:c3:e3:1e:7c:96:2e:c0:12:6a:bf:aa:50:b2:fe:
                    12:29:5e:b0:b7:fd:cb:9f:fe:55:1f:d1:a1:38:30:
                    12:44:d5:15:e7:65:a9:26:0e:3d:a9:ad:eb:61:66:
                    6f:99:7b:75:17:e4:ef:e1:ba:5e:9a:22:31:36:b8:
                    4d:7d:5c:5b:ef:c4:e0:89:95:28:7f:49:9c:1e:e6:
                    d4:9b:12:92:ff:3b:b0:a4:f8:fb:d6:ed:f8:e6:63:
                    e2:c1:af:60:ae:3a:2e:3a:6a:f0:c2:01:04:0c:69:
                    26:38:59:d0:27:b9:6a:5e:c8:b6:25:2e:a1:4f:2c:
                    db:4d:65:c7:ee:3f:05:3a:1b:48:15:36:d0:6b:81:
                    b4:54:d2:00:68:96:c7:7a:cf:0c:93:06:79:0a:f7:
                    5f:7d:ec:cb:89:99:6d:a9:00:df:82:99:75:48:a3:
                    c8:87:f4:29:53:f9:b1:17:1e:7c:88:7a:61:f5:08:
                    53:c0:f1:39:6c:16:a8:04:66:60:47:d5:39:8b:b0:
                    90:f6:95:5a:c3:9f:86:37:ee:d3:59:cb:46:e8:e8:
                    45:88:94:38:66:4b:91:33:a0:82:81:42:fe:d7:ca:
                    39:2d:b4:26:ba:4e:d3:a2:9f:26:00:f5:f0:7f:fa:
                    24:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:79:09:A9:CD:67:BB:7B:67:88:6F:B1:85:60:69:03:E6:BB:B8:A3
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32322d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:35:00:b8:55:fe:80:c3:c2:19:48:6b:34:65:2a:e1:9f:c7:
         3e:2b:06:4b:a6:45:de:33:79:0c:3d:93:b5:d7:32:00:00:72:
         c7:cc:52:d7:6d:e9:b6:4e:32:c2:c6:df:9a:29:2f:13:b5:1b:
         4b:32:26:4b:dd:48:91:67:df:29:87:72:79:e8:2e:de:2d:2d:
         56:b2:6d:c3:e8:75:10:cc:c5:30:11:65:4e:72:d1:53:d2:52:
         9e:25:7b:88:92:e3:2c:f2:2f:46:ac:ac:bf:8e:f6:a6:f2:6f:
         93:9d:50:4c:e0:f6:21:b2:54:01:1e:7e:02:8e:fe:7d:c5:f4:
         e5:e0:6d:d2:c5:c2:9a:d3:e0:cf:bb:01:be:d2:23:a8:63:53:
         41:cb:04:b7:30:91:de:e9:26:44:47:fe:56:ae:61:51:1b:4d:
         9b:91:05:d8:93:20:aa:30:50:10:f0:bf:f0:07:6f:6b:9e:29:
         93:42:a2:4f:5b:b7:f6:ea:14:52:df:c6:51:84:72:b5:96:e9:
         d8:45:0f:54:32:c1:3e:29:f4:67:f4:57:6c:1e:61:96:16:66:
         51:00:b6:5a:4f:e0:54:1c:d9:b4:34:61:51:1d:2f:63:99:85:
         a7:81:f9:26:f0:3d:ff:04:a2:f2:25:92:f1:43:6f:30:41:dd:
         92:8d:d5:25
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUcfVNfwMNK0HyLosJR7mjCcfHg90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2
NjVGRUY2NzAeFw0yNjA1MTExNzA0MjJaFw0yNzA1MTAxNzA5MjJaMDMxMTAvBgNV
BAMTKDYyNzkwOUE5Q0Q2N0JCN0I2Nzg4NkZCMTg1NjA2OTAzRTZCQkI4QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQfUHw84YVeW4BvSqQJwHD4x58
li7AEmq/qlCy/hIpXrC3/cuf/lUf0aE4MBJE1RXnZakmDj2prethZm+Ze3UX5O/h
ul6aIjE2uE19XFvvxOCJlSh/SZwe5tSbEpL/O7Ck+PvW7fjmY+LBr2CuOi46avDC
AQQMaSY4WdAnuWpeyLYlLqFPLNtNZcfuPwU6G0gVNtBrgbRU0gBolsd6zwyTBnkK
91997MuJmW2pAN+CmXVIo8iH9ClT+bEXHnyIemH1CFPA8TlsFqgEZmBH1TmLsJD2
lVrDn4Y37tNZy0bo6EWIlDhmS5EzoIKBQv7XyjkttCa6TtOinyYA9fB/+iR9AgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUYnkJqc1nu3tniG+xhWBpA+a7uKMwHwYDVR0j
BBgwFoAU+Oz3ZyMCp/q1KIUirWTSF2Zf72cwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VCVEFJ
V0FOLzAvRjhFQ0Y3NjcyMzAyQTdGQUI1Mjg4NTIyQUQ2NEQyMTc2NjVGRUY2Ny5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GOEVDRjc2NzIzMDJBN0ZBQjUyODg1MjJB
RDY0RDIxNzY2NUZFRjY3LmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG
YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VCVEFJV0FOLzAvMzEzMDMz
MmUzMzMwMmUzNDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODM0MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmceLDANBgkqhkiG9w0BAQsFAAOCAQEAkDUAuFX+gMPCGUhrNGUq
4Z/HPisGS6ZF3jN5DD2TtdcyAAByx8xS123ptk4ywsbfmikvE7UbSzImS91IkWff
KYdyeegu3i0tVrJtw+h1EMzFMBFlTnLRU9JSniV7iJLjLPIvRqysv472pvJvk51Q
TOD2IbJUAR5+Ao7+fcX05eBt0sXCmtPgz7sBvtIjqGNTQcsEtzCR3ukmREf+Vq5h
URtNm5EF2JMgqjBQEPC/8Adva54pk0KiT1u39uoUUt/GUYRytZbp2EUPVDLBPin0
Z/RXbB5hlhZmUQC2Wk/gVBzZtDRhUR0vY5mFp4H5JvA9/wSi8iWS8UNvMEHdko3V
JQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:09:24 2026 by rpki-client