Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32322d3332203d3e203435343734.roa
File:                     3130332e33302e34342e302f32322d3332203d3e203435343734.roa (raw, json)
Hash identifier:          8EYifRyvs+zE0e0n73Gj1SBLAaZvJdYTVM8GFNDGFmg=
Subject key identifier:   F3:B5:A4:A7:DC:60:98:1E:E8:AA:3B:14:18:ED:56:7F:1C:A8:09:92
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       02F1199251BD2083DD442390D68236421247DC4E
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32322d3332203d3e203435343734.roa
Signing time:             Thu 14 May 2026 10:34:06 +0000
ROA not before:           Thu 14 May 2026 10:29:06 +0000
ROA not after:            Thu 13 May 2027 10:34:06 +0000
asID:                     45474
IP address blocks:        103.30.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 11:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f1:19:92:51:bd:20:83:dd:44:23:90:d6:82:36:42:12:47:dc:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 14 10:29:06 2026 GMT
            Not After : May 13 10:34:06 2027 GMT
        Subject: CN=F3B5A4A7DC60981EE8AA3B1418ED567F1CA80992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:2e:6d:11:d5:fe:52:d7:4e:55:72:5b:4d:
                    b9:de:85:15:59:8c:3f:6e:d8:0b:a2:f5:fe:a6:e0:
                    13:8c:07:64:7e:81:74:45:c3:38:56:57:0c:81:19:
                    b7:b1:63:41:24:42:6c:32:c3:b3:bc:69:6c:86:f4:
                    37:79:75:fa:80:d4:de:a2:4d:f3:06:5c:88:74:fb:
                    bd:a7:13:db:7f:c4:09:7e:28:9a:c8:b5:1e:99:ec:
                    2b:6b:24:f4:a1:2c:17:f1:3c:dd:8e:9f:9c:58:60:
                    94:c9:30:05:39:83:ac:87:ad:cb:e3:56:6f:05:33:
                    bc:ab:e8:7e:d2:e0:77:fb:8e:0f:39:d3:48:54:f8:
                    4b:36:7e:bb:b6:93:c2:49:de:f8:d3:fa:5a:8d:54:
                    09:59:ab:d9:2f:b5:f5:a8:e9:82:b3:d1:33:44:ce:
                    e4:b3:6b:0b:e9:0a:bd:53:1d:8c:02:7d:ff:50:b4:
                    d8:b8:ff:7c:5d:e4:37:cd:83:f4:a2:b9:d4:03:37:
                    55:56:4d:06:c6:aa:20:5e:3e:61:dd:37:e3:59:a8:
                    53:17:c4:2a:7e:f5:2d:94:c1:89:de:b9:96:09:14:
                    12:74:b5:91:1f:b4:37:57:58:76:c5:0f:ca:57:e4:
                    09:27:f2:21:de:48:89:53:dd:0e:74:69:da:c3:23:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:A4:A7:DC:60:98:1E:E8:AA:3B:14:18:ED:56:7F:1C:A8:09:92
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32322d3332203d3e203435343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:29:2a:3b:cf:36:66:9a:10:65:74:c1:71:c4:80:09:0b:
         2c:e8:9b:08:44:09:3c:a4:9d:23:e2:78:91:18:0b:86:27:58:
         3d:d4:a1:ef:eb:57:cc:7b:c3:d5:93:42:50:e5:2e:1f:5c:5b:
         03:06:5f:d9:e4:8e:f5:c4:69:22:c1:34:b5:14:b0:49:0a:31:
         3b:f2:8d:91:43:c2:ed:5f:dd:ff:71:de:c9:d9:00:e8:a3:67:
         c2:94:ab:eb:3f:ba:7c:1f:91:a9:c6:49:da:c5:2f:3d:16:e0:
         d0:9f:bd:8f:c5:d6:75:3c:57:d9:2b:b4:4e:fb:b6:07:f1:f7:
         86:2c:4c:6a:2e:a9:ad:20:27:38:f6:28:df:7b:b1:94:c4:f5:
         35:5c:b1:b2:25:26:92:98:67:3b:3b:01:ac:95:27:49:5a:f8:
         88:7f:99:2e:94:d2:15:3c:f6:4d:fe:46:ba:ec:76:86:0c:58:
         ea:ce:f1:29:6c:f1:fc:df:44:2b:30:bc:bd:10:1e:e5:cb:7c:
         81:59:40:65:75:ce:42:25:2a:d4:8b:48:be:4b:32:27:31:64:
         78:83:33:b2:ff:33:30:15:dd:d0:55:38:72:53:25:5d:f1:93:
         3c:24:9f:bb:cf:8a:af:76:c5:35:0f:d0:d4:b3:5b:d3:bc:43:
         e0:0f:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:43 2026 by rpki-client