Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32342d3234203d3e203234313638.roa
File:                     3130332e33302e34342e302f32342d3234203d3e203234313638.roa (raw, json)
Hash identifier:          2XYwaKZMRqva9ocml/2Zw8Eg1XW7s6jPWKee1schoiI=
Subject key identifier:   C7:43:67:96:57:4C:5F:0A:FD:ED:FF:FD:18:4A:95:5B:07:64:22:70
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       151A1EB8EDF31F09C508FD1A0CB215BADA72389A
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32342d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 17:37:47 +0000
ROA not before:           Mon 11 May 2026 17:32:47 +0000
ROA not after:            Mon 10 May 2027 17:37:47 +0000
asID:                     24168
IP address blocks:        103.30.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1a:1e:b8:ed:f3:1f:09:c5:08:fd:1a:0c:b2:15:ba:da:72:38:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:32:47 2026 GMT
            Not After : May 10 17:37:47 2027 GMT
        Subject: CN=C7436796574C5F0AFDEDFFFD184A955B07642270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:5d:3b:18:ab:79:db:7b:bb:da:e0:e1:93:
                    7e:a4:4f:aa:ce:4f:ed:fe:cd:88:94:81:23:ac:2e:
                    5b:cb:54:50:8d:dd:ee:89:b8:58:97:38:f0:fd:3e:
                    4d:de:79:33:b2:7d:3c:9d:3c:0b:11:50:cf:a2:65:
                    67:8c:10:e7:5d:e1:24:a4:1f:1b:28:8c:3c:0e:37:
                    a2:86:8a:b9:26:f7:4f:ca:14:7d:24:45:24:b1:15:
                    2c:3d:22:05:6f:e4:41:85:48:c7:ba:80:f3:e8:ed:
                    79:e0:dc:73:66:7a:5f:f4:76:df:d9:93:ae:f7:61:
                    5a:c6:5b:71:76:db:ee:b1:a5:62:10:86:cb:a5:e2:
                    1f:33:25:52:ef:35:1d:27:9d:fc:f9:a0:2b:1e:12:
                    00:e6:38:0d:fd:1a:5a:4d:36:13:52:6b:20:b5:80:
                    cf:3d:e8:ce:e6:22:bf:43:99:0b:9e:55:26:42:78:
                    a6:52:21:2d:2f:f1:0e:51:be:ef:b0:ad:7f:be:be:
                    81:c3:5e:63:fe:d1:8e:14:78:a8:4a:04:db:25:e0:
                    97:36:e4:ba:fb:1a:e7:db:83:d9:47:c8:f8:ea:71:
                    5b:90:b9:77:a0:94:17:96:e1:28:c4:43:b8:92:03:
                    8e:44:cf:f8:ff:12:cc:fe:bf:66:61:cf:20:32:af:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:43:67:96:57:4C:5F:0A:FD:ED:FF:FD:18:4A:95:5B:07:64:22:70
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34342e302f32342d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:53:ff:1e:dc:e9:a7:93:bc:2b:10:c2:16:62:b5:3b:ac:58:
         fe:46:b2:fb:fc:ed:43:39:29:65:5a:2b:63:e6:4d:cd:e2:3c:
         d0:52:e2:30:50:ea:e3:3c:18:c3:1b:2e:6a:46:bb:90:68:09:
         36:18:41:8e:9c:00:1d:5d:ad:a3:09:98:f5:7a:77:9b:a0:a4:
         a6:c6:f1:ec:ec:23:99:65:65:3f:fb:c4:0c:f0:db:b1:67:71:
         1c:28:06:04:38:aa:aa:36:dd:0e:94:1c:2b:b1:e1:e8:f3:a5:
         97:a5:8e:07:b9:31:f5:ba:b4:8b:09:ee:0f:ea:ad:61:e5:e2:
         12:f0:86:56:ef:9f:c3:3a:15:2f:dd:1e:dc:09:f5:6f:13:f5:
         7c:20:cf:79:1e:ba:b0:c8:f8:39:1d:1c:54:f7:7b:68:e5:e4:
         c3:fe:0f:f8:59:c1:e7:1f:22:2c:73:a5:a0:6d:a1:c1:b6:67:
         b4:8f:67:44:18:46:02:7a:40:91:93:be:d9:45:1a:7a:37:92:
         c2:16:6b:30:8c:dd:64:8c:d4:41:a9:64:f8:b5:35:df:bb:95:
         b2:ff:1c:a9:de:e7:62:54:fd:99:97:cf:45:07:96:2b:4a:0e:
         b6:06:d0:ef:7f:c5:68:bb:b5:73:83:ef:68:59:b4:00:8e:4c:
         0f:71:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:26 2026 by rpki-client