Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34352e302f32342d3234203d3e203138343234.roa
File:                     3130332e33302e34352e302f32342d3234203d3e203138343234.roa (raw, json)
Hash identifier:          xv7xQ1GIX616zHyXcWFa2CZyLF0O9+bPL4u2acX5ICE=
Subject key identifier:   06:B3:B7:2D:00:6E:A1:FC:AF:EE:DE:F6:06:0C:54:AA:48:C5:9A:4E
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       70FB8D90F93E962F1DFAE4572F3CBF35EAF2662E
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34352e302f32342d3234203d3e203138343234.roa
Signing time:             Mon 11 May 2026 17:07:14 +0000
ROA not before:           Mon 11 May 2026 17:02:14 +0000
ROA not after:            Mon 10 May 2027 17:07:14 +0000
asID:                     18424
IP address blocks:        103.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fb:8d:90:f9:3e:96:2f:1d:fa:e4:57:2f:3c:bf:35:ea:f2:66:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:02:14 2026 GMT
            Not After : May 10 17:07:14 2027 GMT
        Subject: CN=06B3B72D006EA1FCAFEEDEF6060C54AA48C59A4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2f:39:98:79:a0:8b:ca:fd:85:34:d6:a0:d5:
                    d3:58:8b:20:a7:7f:e0:f6:26:98:2a:96:41:53:27:
                    07:69:3e:6f:8e:5b:8e:8b:d2:d0:a4:26:02:39:e5:
                    79:30:f1:3c:ee:91:7a:a9:c4:ab:e5:3b:e4:a5:56:
                    f3:a5:a1:57:7e:d2:c0:05:be:aa:bf:22:60:25:26:
                    60:5d:a5:32:5d:00:43:e6:f3:d4:7d:b0:75:f3:ac:
                    93:35:bb:3e:20:2f:a9:d1:1c:64:6b:00:92:2b:0c:
                    e8:b4:a6:37:37:bb:41:a7:e9:60:75:22:bf:69:26:
                    cf:a6:38:63:e1:fb:9a:d6:51:72:37:0b:37:2a:59:
                    0f:46:b6:d8:ed:43:4f:65:40:41:cd:79:f5:10:73:
                    5f:e4:47:65:0c:bd:88:95:12:f8:ce:1e:37:2e:66:
                    e3:e7:ba:5d:00:eb:6e:10:4d:4f:8b:8d:0b:4a:e5:
                    63:c9:71:dc:17:66:2f:1f:69:ee:65:1c:46:77:a5:
                    25:b3:6a:d2:c9:30:3e:6a:c1:9e:6e:73:ea:a7:18:
                    41:7b:a8:66:0e:42:a3:0d:c5:a4:d5:b1:ae:d2:3c:
                    c3:7f:9c:7f:fc:75:0d:77:21:c4:dd:b6:f8:74:8d:
                    cf:04:29:78:d1:37:6c:b7:78:e5:cc:36:8e:f7:5e:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B3:B7:2D:00:6E:A1:FC:AF:EE:DE:F6:06:0C:54:AA:48:C5:9A:4E
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34352e302f32342d3234203d3e203138343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:1e:aa:d0:13:82:6d:c5:ca:24:c6:4f:02:65:33:03:48:fc:
         cf:87:7d:e6:92:38:5f:8d:ce:82:b9:8d:a3:cc:98:df:42:c3:
         1d:e2:e4:be:0a:6c:da:6c:d1:66:32:43:eb:99:e1:7c:22:59:
         e2:84:ea:04:58:87:e2:56:c5:38:b7:52:01:2c:f1:fb:ac:df:
         d1:71:ed:01:c7:1f:c7:db:37:63:ce:af:da:92:ca:54:58:7c:
         75:9e:ac:e9:3a:82:82:0a:07:c3:32:09:51:50:f7:7c:e7:26:
         62:20:d1:5d:10:51:0c:31:f4:b9:f5:b0:7e:c3:ee:69:7c:e1:
         01:b8:a0:8f:1d:da:f1:a3:35:c2:d2:a2:d7:f8:2a:52:36:52:
         ca:8e:be:98:b8:85:9e:12:1c:4b:68:40:4d:e2:4b:29:4e:78:
         0d:42:be:6f:32:8a:30:6a:9e:7b:31:b3:e7:12:2e:7e:ff:4d:
         7f:e9:b7:17:b8:01:d6:99:3d:50:17:71:77:fd:aa:a9:4b:77:
         40:35:eb:22:b1:2d:6b:a4:d5:77:d4:99:2c:45:7f:1b:67:33:
         fd:75:f5:9e:10:3b:14:82:86:b5:48:f6:2a:df:20:6c:3f:ca:
         25:8e:27:91:99:05:6c:84:40:7e:8b:f7:d5:0b:8a:a2:44:7a:
         32:6b:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:26 2026 by rpki-client