Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34352e302f32342d3234203d3e203234313638.roa
File:                     3130332e33302e34352e302f32342d3234203d3e203234313638.roa (raw, json)
Hash identifier:          jfuVfRc66f5YzpHsO8YMGvsjzW7fUtb/Uxg5Gm2IBzc=
Subject key identifier:   B3:2C:66:14:6A:BD:36:8B:6C:31:0A:D4:DD:8A:8D:45:B7:36:01:A1
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       4A35570E27EBC730709B67441640866CF97F557A
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34352e302f32342d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 17:37:47 +0000
ROA not before:           Mon 11 May 2026 17:32:47 +0000
ROA not after:            Mon 10 May 2027 17:37:47 +0000
asID:                     24168
IP address blocks:        103.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:35:57:0e:27:eb:c7:30:70:9b:67:44:16:40:86:6c:f9:7f:55:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:32:47 2026 GMT
            Not After : May 10 17:37:47 2027 GMT
        Subject: CN=B32C66146ABD368B6C310AD4DD8A8D45B73601A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:3e:c4:2a:ee:65:82:28:0d:05:80:c7:ad:
                    ca:fb:82:16:54:72:19:ac:e8:7a:76:d5:aa:26:46:
                    77:8a:a5:fe:14:a3:ba:c8:09:76:55:9c:12:93:67:
                    ba:42:e7:43:e2:3a:cf:0b:e4:2d:e8:c8:44:54:ce:
                    a9:3c:50:1c:c0:c1:39:fd:ea:26:a3:ff:c0:8e:8b:
                    51:d6:eb:83:ea:57:05:2c:40:3f:b6:a9:b1:5e:74:
                    2d:6c:f6:b0:69:c8:2a:5b:39:fb:bb:08:77:84:c9:
                    89:92:ec:53:20:63:87:d9:55:c1:f2:32:4b:60:28:
                    69:19:37:fb:a6:6e:f6:58:43:d2:d6:4d:9c:41:91:
                    9a:ca:b3:57:7b:f3:80:83:c4:5a:61:40:c9:2d:a5:
                    fc:6b:47:46:81:10:5d:ab:f9:45:62:b2:fa:0e:ff:
                    b9:63:bc:78:db:c0:3b:75:08:e6:bd:96:2e:bf:46:
                    a0:c8:80:d0:79:e2:a2:2d:da:aa:13:eb:ca:17:58:
                    b3:ad:d8:84:bd:50:fd:9b:fa:49:3a:4f:79:b6:ae:
                    73:e7:68:e4:47:6c:a3:9a:02:1d:d0:ee:0a:a4:98:
                    2d:81:36:ef:a9:c3:ba:16:3c:f3:a8:39:01:a8:6c:
                    29:12:bb:70:9b:a9:c3:9c:96:13:a5:37:05:07:b5:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2C:66:14:6A:BD:36:8B:6C:31:0A:D4:DD:8A:8D:45:B7:36:01:A1
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34352e302f32342d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:32:df:b8:e3:85:07:65:77:cf:55:eb:6c:b1:d7:39:5a:f0:
         1a:b1:81:ea:67:4b:bf:39:96:a1:bf:0b:72:3f:17:c0:6e:22:
         19:64:cf:0b:24:8f:17:c6:ac:b6:1c:38:1f:51:51:27:ee:8c:
         75:68:67:28:b7:09:a9:1b:a2:b7:e7:04:ea:5e:d7:c4:b2:2c:
         95:19:67:f0:38:a4:21:f9:36:fb:45:b5:9a:da:21:fc:79:c1:
         4b:70:8b:95:37:6d:9f:32:3d:59:78:42:88:2b:ff:1c:21:f8:
         46:28:b4:15:70:6f:b8:a8:0d:73:d4:a8:1e:ec:f4:ae:30:97:
         f7:11:14:c7:9f:d7:d1:e4:49:4d:53:49:d8:00:01:c8:a0:8c:
         aa:91:be:7b:4f:ab:ba:51:8d:ac:ff:4f:78:1f:97:20:05:a4:
         9f:49:0f:36:3c:22:27:ae:8f:47:60:56:d4:43:43:d4:bc:9b:
         aa:10:df:90:36:9c:83:ea:a6:d0:03:58:cf:e8:20:ed:c0:62:
         d7:fe:57:db:0e:28:5e:0f:4f:03:cd:c8:63:d2:91:39:60:7f:
         08:0c:36:ad:f4:b8:15:48:4d:9a:cd:46:1b:84:d0:32:38:d1:
         49:6a:21:ca:7b:c6:c2:61:65:b6:7e:f0:62:21:48:53:52:36:
         a5:87:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:09:26 2026 by rpki-client