Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WISTRON/0/3130332e3230302e302e302f32322d3232203d3e20313331353939.roa
File:                     3130332e3230302e302e302f32322d3232203d3e20313331353939.roa (raw, json)
Hash identifier:          kmIeo2YGXZ8nK4daphs+mzR1kR0V5xQXFN8eaX6IpmQ=
Subject key identifier:   BB:D3:D8:4C:DE:5A:52:EA:F6:B9:A3:00:D6:4C:61:3B:DB:0C:41:E0
Certificate issuer:       /CN=C701A9F0608CB5B57D7C2422A64BBEBE06D789B9
Certificate serial:       0F9C30C8A0BF9E89DC480FE09BACE93864333D4B
Authority key identifier: C7:01:A9:F0:60:8C:B5:B5:7D:7C:24:22:A6:4B:BE:BE:06:D7:89:B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WISTRON/0/3130332e3230302e302e302f32322d3232203d3e20313331353939.roa
Signing time:             Mon 11 May 2026 17:36:11 +0000
ROA not before:           Mon 11 May 2026 17:31:11 +0000
ROA not after:            Mon 10 May 2027 17:36:11 +0000
asID:                     131599
IP address blocks:        103.200.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.crl
                          rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9c:30:c8:a0:bf:9e:89:dc:48:0f:e0:9b:ac:e9:38:64:33:3d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C701A9F0608CB5B57D7C2422A64BBEBE06D789B9
        Validity
            Not Before: May 11 17:31:11 2026 GMT
            Not After : May 10 17:36:11 2027 GMT
        Subject: CN=BBD3D84CDE5A52EAF6B9A300D64C613BDB0C41E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:ef:31:99:04:8f:a5:e5:d4:1f:c4:1a:b2:
                    d6:9d:f8:8a:69:d0:dc:4e:2b:06:90:d6:29:5f:00:
                    94:de:bd:66:97:b3:45:66:79:85:f2:c9:46:a3:63:
                    59:09:3d:04:48:2d:b5:84:b8:88:e0:8e:0d:6f:a8:
                    34:93:92:60:ff:e5:c5:4e:9c:bc:c4:5c:59:6e:2b:
                    f1:90:80:76:b6:43:ed:67:ab:ac:c8:43:29:b8:fe:
                    4f:20:02:2a:9c:d4:b9:3f:53:64:b1:0b:6d:66:d7:
                    51:96:81:4e:a5:5d:0b:61:ca:b8:0b:c5:9e:32:f3:
                    3c:10:2d:3c:5d:aa:dc:0c:44:24:ac:92:90:b5:ce:
                    be:78:08:8d:fe:a2:1d:2e:88:97:f1:ba:17:bd:b8:
                    d7:22:40:d7:ef:30:72:6e:da:21:ad:77:2b:94:37:
                    2c:96:40:fe:a2:bf:a8:0e:f4:3c:9e:01:39:91:0a:
                    60:26:8e:d6:11:c0:c8:7b:7d:2f:09:ac:9b:59:53:
                    0b:00:bc:4b:ae:3a:db:f0:d1:2e:86:0b:db:03:22:
                    95:12:a7:fb:33:b5:0d:b2:61:01:69:1b:f0:7a:b4:
                    1c:85:45:2a:73:45:f3:8c:34:a7:5e:c0:0d:0b:5f:
                    06:14:2a:a0:02:49:20:65:4b:73:c1:1a:49:b7:a9:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D3:D8:4C:DE:5A:52:EA:F6:B9:A3:00:D6:4C:61:3B:DB:0C:41:E0
            X509v3 Authority Key Identifier:
                keyid:C7:01:A9:F0:60:8C:B5:B5:7D:7C:24:22:A6:4B:BE:BE:06:D7:89:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WISTRON/0/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C701A9F0608CB5B57D7C2422A64BBEBE06D789B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WISTRON/0/3130332e3230302e302e302f32322d3232203d3e20313331353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:d4:91:98:c4:19:a2:03:62:9f:c3:bf:47:b9:2f:c0:7d:b1:
         bf:73:5e:6a:36:fe:35:bf:e6:fb:79:91:76:d8:bd:14:c8:4e:
         b3:f8:21:71:43:aa:04:48:ec:93:8a:90:3c:4c:db:16:f5:f3:
         9e:b9:22:1b:70:1d:1a:94:b2:96:3e:58:43:0e:29:76:2f:88:
         44:52:58:d1:c2:9f:a5:41:0a:1c:02:85:f6:fa:6c:ef:84:60:
         e5:68:ef:fc:db:18:c7:5f:ea:ed:16:d8:5a:e0:6e:9e:7d:09:
         de:8d:00:f4:71:8e:8b:16:d8:c1:34:fa:d1:a5:2e:e7:71:4f:
         56:c2:fc:1b:e9:93:d8:a9:49:0f:35:d1:fc:fa:0d:fb:45:69:
         8a:61:fa:1d:28:bb:41:8b:86:37:c4:41:74:d6:70:84:a1:0d:
         a1:69:c9:92:ae:38:ca:19:d3:2b:b0:19:b2:f3:c8:5f:31:92:
         69:65:12:ce:38:1a:42:e0:4a:ec:36:5e:1b:19:e7:ad:2e:77:
         d9:c4:63:e0:7f:7d:95:98:e9:c9:14:1c:6d:24:e1:8b:09:67:
         70:3c:fd:98:14:d6:e8:ed:2d:dd:bd:1f:e8:d1:71:9d:80:36:
         c0:b0:1d:cd:87:3b:31:f4:bf:1b:38:d8:5f:77:65:75:d8:fa:
         76:9f:e7:5e
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUD5wwyKC/noncSA/gm6zpOGQzPUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwMUE5RjA2MDhDQjVCNTdEN0MyNDIyQTY0QkJFQkUw
NkQ3ODlCOTAeFw0yNjA1MTExNzMxMTFaFw0yNzA1MTAxNzM2MTFaMDMxMTAvBgNV
BAMTKEJCRDNEODRDREU1QTUyRUFGNkI5QTMwMEQ2NEM2MTNCREIwQzQxRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTz+8xmQSPpeXUH8Qastad+Ipp
0NxOKwaQ1ilfAJTevWaXs0VmeYXyyUajY1kJPQRILbWEuIjgjg1vqDSTkmD/5cVO
nLzEXFluK/GQgHa2Q+1nq6zIQym4/k8gAiqc1Lk/U2SxC21m11GWgU6lXQthyrgL
xZ4y8zwQLTxdqtwMRCSskpC1zr54CI3+oh0uiJfxuhe9uNciQNfvMHJu2iGtdyuU
NyyWQP6iv6gO9DyeATmRCmAmjtYRwMh7fS8JrJtZUwsAvEuuOtvw0S6GC9sDIpUS
p/sztQ2yYQFpG/B6tByFRSpzRfOMNKdewA0LXwYUKqACSSBlS3PBGkm3qekjAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUu9PYTN5aUur2uaMA1kxhO9sMQeAwHwYDVR0j
BBgwFoAUxwGp8GCMtbV9fCQipku+vgbXibkwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0lTVFJP
Ti8wL0M3MDFBOUYwNjA4Q0I1QjU3RDdDMjQyMkE2NEJCRUJFMDZENzg5QjkuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQzcwMUE5RjA2MDhDQjVCNTdEN0MyNDIyQTY0
QkJFQkUwNkQ3ODlCOS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1dJU1RST04vMC8zMTMwMzMyZTMy
MzAzMDJlMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTMzMzEzNTM5Mzkucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnyAAwDQYJKoZIhvcNAQELBQADggEBAJbUkZjEGaIDYp/Dv0e5L8B9
sb9zXmo2/jW/5vt5kXbYvRTITrP4IXFDqgRI7JOKkDxM2xb18565IhtwHRqUspY+
WEMOKXYviERSWNHCn6VBChwChfb6bO+EYOVo7/zbGMdf6u0W2Frgbp59Cd6NAPRx
josW2ME0+tGlLudxT1bC/Bvpk9ipSQ810fz6DftFaYph+h0ou0GLhjfEQXTWcISh
DaFpyZKuOMoZ0yuwGbLzyF8xkmllEs44GkLgSuw2XhsZ560ud9nEY+B/fZWY6ckU
HG0k4YsJZ3A8/ZgU1ujtLd29H+jRcZ2ANsCwHc2HOzH0vxs42F93ZXXY+naf514=
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:22 2026 by rpki-client