Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YIMINGINFO/0/3130332e3133342e38302e302f32322d3330203d3e20313334383233.roa
File:                     3130332e3133342e38302e302f32322d3330203d3e20313334383233.roa (raw, json)
Hash identifier:          oeBWSyuYfrDP23x4TxeZXS8JO2DXKzjnVd9NZ/t+jK8=
Subject key identifier:   09:C5:A3:73:CB:FB:31:20:BF:D6:92:C0:BB:69:B0:D1:F5:43:25:BB
Certificate issuer:       /CN=C73C06A719AFA0176662300E34FEDFA83C9C157B
Certificate serial:       028A635163C603C1B5CE35DF5553865E80CC7FE1
Authority key identifier: C7:3C:06:A7:19:AF:A0:17:66:62:30:0E:34:FE:DF:A8:3C:9C:15:7B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C73C06A719AFA0176662300E34FEDFA83C9C157B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YIMINGINFO/0/3130332e3133342e38302e302f32322d3330203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:07:09 +0000
ROA not before:           Mon 11 May 2026 17:02:09 +0000
ROA not after:            Mon 10 May 2027 17:07:09 +0000
asID:                     134823
IP address blocks:        103.134.80.0/22 maxlen: 30
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YIMINGINFO/0/C73C06A719AFA0176662300E34FEDFA83C9C157B.crl
                          rsync://rpkica.twnic.tw/rpki/YIMINGINFO/0/C73C06A719AFA0176662300E34FEDFA83C9C157B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C73C06A719AFA0176662300E34FEDFA83C9C157B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8a:63:51:63:c6:03:c1:b5:ce:35:df:55:53:86:5e:80:cc:7f:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73C06A719AFA0176662300E34FEDFA83C9C157B
        Validity
            Not Before: May 11 17:02:09 2026 GMT
            Not After : May 10 17:07:09 2027 GMT
        Subject: CN=09C5A373CBFB3120BFD692C0BB69B0D1F54325BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:a3:e9:f2:0a:5e:20:e2:db:b8:d3:e3:15:
                    07:24:8a:c1:98:76:80:5e:de:10:a6:b7:58:c1:49:
                    d9:c4:24:bf:05:73:e5:f9:5d:37:45:93:00:9e:3a:
                    86:00:01:52:00:a4:5e:fa:73:1e:33:54:69:2e:c3:
                    68:2e:7b:fd:ca:50:3e:ce:c0:0f:e3:0e:45:b9:91:
                    8b:d3:5d:fb:72:21:3b:3d:48:f5:8f:64:4c:d5:3e:
                    c8:da:10:e9:97:35:80:da:a9:ce:b7:11:39:b5:9c:
                    87:ae:20:01:d0:ce:c1:4e:3b:83:9a:80:84:99:da:
                    58:05:36:0d:14:a9:5b:3a:f5:d0:9b:7c:4c:31:c2:
                    70:f5:74:86:71:37:2f:02:17:b0:06:5f:11:39:dc:
                    df:5c:aa:4c:34:83:b7:8a:ed:78:22:66:28:e0:02:
                    a0:46:bc:6e:b6:d4:f0:fd:8f:df:7d:26:07:43:1e:
                    b8:7b:7d:aa:db:35:b1:4f:d5:e9:06:d9:81:11:89:
                    85:37:5e:e9:18:dd:b2:97:ca:72:26:ca:89:cc:63:
                    6b:02:d7:ba:ee:86:ae:c6:d7:45:84:bb:1f:0f:5d:
                    11:c4:b1:2f:57:e6:87:67:ba:de:88:9a:91:9e:fe:
                    d8:16:41:c1:2e:1f:46:55:8a:81:55:78:e3:2e:98:
                    1e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:A3:73:CB:FB:31:20:BF:D6:92:C0:BB:69:B0:D1:F5:43:25:BB
            X509v3 Authority Key Identifier:
                keyid:C7:3C:06:A7:19:AF:A0:17:66:62:30:0E:34:FE:DF:A8:3C:9C:15:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YIMINGINFO/0/C73C06A719AFA0176662300E34FEDFA83C9C157B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C73C06A719AFA0176662300E34FEDFA83C9C157B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YIMINGINFO/0/3130332e3133342e38302e302f32322d3330203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:d1:89:77:7e:46:9d:f2:54:06:70:6b:e8:5c:8d:60:10:
         5b:86:6d:25:f0:1f:a1:49:2d:70:36:7e:1f:ee:21:5a:23:d0:
         ca:84:d4:8e:d7:0e:83:bf:ad:99:21:49:d3:0b:72:14:b8:11:
         78:d3:2d:0e:ff:75:a1:37:6e:89:15:6c:85:5e:a4:5b:78:cb:
         56:47:74:76:38:95:48:90:bd:25:5a:87:34:d0:bc:f3:62:e2:
         b0:c3:e9:10:a3:7e:23:b9:a9:0f:e5:ae:7f:fc:7d:64:00:0d:
         fb:d1:60:53:50:51:fa:d2:15:a5:17:d5:12:17:ab:aa:ee:83:
         96:41:39:36:7b:5a:61:f0:ad:c3:a2:39:5c:47:97:ec:88:4f:
         dc:13:45:cd:9b:37:4f:1f:88:a5:ad:0d:a8:e6:00:96:a4:ed:
         11:29:26:78:78:cf:07:19:73:33:32:1d:11:00:b8:01:a2:c2:
         f4:50:c5:dd:9f:c9:ef:a8:e9:19:51:a5:d8:97:e8:07:2e:59:
         ea:e3:0b:ca:a6:b7:25:6d:e2:59:97:d8:2f:7b:27:fa:3f:39:
         db:1b:ee:c1:cf:f2:04:8b:3d:16:fe:d4:36:29:8f:54:b7:0f:
         bd:81:0f:95:4a:36:95:51:39:99:82:7f:73:31:33:9b:21:f0:
         ce:22:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:57 2026 by rpki-client