Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34372e302f32342d3234203d3e203234313638.roa
File:                     3130332e33302e34372e302f32342d3234203d3e203234313638.roa (raw, json)
Hash identifier:          m8OJhotAgBn2v43RTI0iHsMzv4b2OFNSNAEgOIL8VW4=
Subject key identifier:   C6:63:F1:61:F6:04:05:C2:24:5C:28:21:71:3F:AF:49:8F:D4:81:FA
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       2D3BCB177CD87B9C784C716DCD89AE9C238647A7
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34372e302f32342d3234203d3e203234313638.roa
Signing time:             Mon 11 May 2026 17:37:48 +0000
ROA not before:           Mon 11 May 2026 17:32:48 +0000
ROA not after:            Mon 10 May 2027 17:37:48 +0000
asID:                     24168
IP address blocks:        103.30.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3b:cb:17:7c:d8:7b:9c:78:4c:71:6d:cd:89:ae:9c:23:86:47:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 17:32:48 2026 GMT
            Not After : May 10 17:37:48 2027 GMT
        Subject: CN=C663F161F60405C2245C2821713FAF498FD481FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:7c:de:13:d0:c5:03:7c:2e:0f:66:ac:7d:
                    06:2c:f2:e2:c3:0e:59:29:a3:39:8a:47:89:09:40:
                    47:d1:5f:bf:5a:5b:f4:aa:0e:17:e1:39:bf:5c:4c:
                    f6:97:b5:7d:70:fe:55:3c:a8:7c:07:94:60:cb:29:
                    87:c6:d7:a4:a2:9c:05:ce:05:ac:d6:20:db:36:7e:
                    ee:26:77:9e:8b:52:2f:44:94:cf:7e:30:08:7e:8b:
                    4e:bf:38:f8:29:4e:bc:b2:3e:27:93:d0:e4:1b:91:
                    2d:cc:b6:5e:8f:c2:b2:b9:e5:cb:3f:58:b3:b0:e2:
                    ac:00:3f:37:53:92:0c:50:d9:5d:00:f5:17:36:00:
                    5a:49:56:9c:3b:44:71:61:10:ff:0f:c8:9f:38:83:
                    81:6e:15:bf:16:22:3c:9c:61:86:03:26:e3:f6:5a:
                    61:fa:1c:5a:ac:1d:a0:4a:72:89:96:9a:0d:1b:d2:
                    d0:67:6e:6c:fe:54:e3:3e:17:96:36:c8:1c:82:87:
                    a2:cc:86:9d:db:72:17:6d:88:14:84:c4:bd:91:13:
                    fd:12:84:d0:e1:93:16:d2:9a:10:1e:ec:0b:ab:f5:
                    c6:e1:d6:5f:68:17:dc:9c:f5:b6:bc:b1:cd:82:39:
                    84:17:32:b1:fd:70:df:7b:3d:e2:c1:94:3b:04:41:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:F1:61:F6:04:05:C2:24:5C:28:21:71:3F:AF:49:8F:D4:81:FA
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/3130332e33302e34372e302f32342d3234203d3e203234313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:40:44:ff:9a:aa:ab:ba:4b:49:e8:cc:d6:8d:ef:8e:c9:af:
         93:c3:b0:21:43:bf:d2:22:3d:1e:8d:26:97:70:3e:17:b6:36:
         ff:96:a6:62:53:24:e9:6a:d5:77:8d:0e:6f:66:48:4b:41:d9:
         11:3b:1d:50:48:08:65:44:7b:ef:63:a6:10:b9:d6:e1:cd:0e:
         46:22:87:fd:52:c9:9a:2c:b2:ad:6e:88:9e:63:7b:14:10:f1:
         52:53:3e:fc:93:a9:8b:ec:6a:9f:f6:47:1a:3f:91:5a:1a:00:
         e9:a1:8f:02:c4:4b:31:e3:e0:35:67:4b:1b:bf:a8:2e:8e:e9:
         67:ab:ef:ec:ea:34:ff:f0:39:8a:c0:68:f5:91:4b:cb:88:90:
         83:15:db:48:c7:8e:74:aa:f0:57:f4:25:52:43:ed:17:96:80:
         5a:97:d3:90:e9:8e:80:e1:c8:eb:8a:63:8b:d3:28:57:87:ab:
         f5:d9:19:57:c6:f3:32:0a:c3:e1:a3:08:14:24:4f:09:98:7c:
         a4:32:b5:a1:08:db:58:e8:6a:ab:1f:72:3c:94:bf:74:f7:e1:
         1e:e5:11:9f:bc:ee:2b:fb:9c:8e:3b:00:85:01:da:7c:76:d4:
         84:e4:7b:e5:49:c9:38:e1:b8:ab:4a:9b:7e:8e:1d:32:d5:46:
         2c:c4:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:49:58 2026 by rpki-client