Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e312e3232302e302f32322d3332203d3e20313331313439.roa
File:                     3130332e312e3232302e302f32322d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          rg3bnNQteoXQwroi6JW6o3A+bYuPDATWwHnIMd8oF1Y=
Subject key identifier:   99:CF:60:97:DD:82:42:32:C4:C0:98:57:CC:D8:23:45:11:E5:E2:C8
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       366448927036D3132AC28F2783847B07A30EEBAE
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e312e3232302e302f32322d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:32:29 +0000
ROA not before:           Mon 11 May 2026 17:27:29 +0000
ROA not after:            Mon 10 May 2027 17:32:29 +0000
asID:                     131149
IP address blocks:        103.1.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:64:48:92:70:36:d3:13:2a:c2:8f:27:83:84:7b:07:a3:0e:eb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:27:29 2026 GMT
            Not After : May 10 17:32:29 2027 GMT
        Subject: CN=99CF6097DD824232C4C09857CCD8234511E5E2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:a3:46:bc:62:9a:a5:c4:9b:14:34:da:9e:
                    73:56:21:7f:69:5b:32:ef:d0:d0:90:3b:91:e0:6b:
                    af:71:16:7d:31:41:74:6a:fc:f0:6e:7e:94:b7:97:
                    f5:3b:57:9c:9c:03:c9:2c:07:47:49:85:e9:77:48:
                    d9:25:ab:ec:8f:74:40:0f:cb:6f:c5:5c:13:96:94:
                    1d:4d:d8:0e:55:35:cb:0b:d3:43:10:41:a9:9c:98:
                    5a:85:6f:cc:86:d0:f5:55:97:41:e2:5d:b6:fe:e6:
                    fe:b2:99:33:ae:4e:ac:9f:22:d2:55:1a:fc:10:d1:
                    59:8f:ef:a5:94:bb:9a:27:cf:07:a8:56:93:52:07:
                    cb:4c:22:d9:30:17:3c:96:53:3f:5b:4e:27:c5:e2:
                    0c:90:a3:37:d0:85:38:c3:ff:35:52:fb:1f:d5:ca:
                    cf:40:60:b2:aa:da:fa:85:ed:b0:dc:19:6a:ad:bf:
                    9a:b4:d2:b2:ce:86:e7:e6:bd:54:90:1a:69:e0:17:
                    dd:b2:2d:c4:56:1f:f8:93:86:3e:64:f6:56:d9:aa:
                    04:46:2c:c9:7e:3a:fc:f8:7b:e5:18:d9:ce:48:45:
                    b6:9d:a6:f4:cd:1a:fa:ad:ff:90:5f:7f:62:54:4a:
                    cd:7d:5f:e6:5a:30:96:1a:53:60:7e:98:4f:36:65:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:60:97:DD:82:42:32:C4:C0:98:57:CC:D8:23:45:11:E5:E2:C8
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e312e3232302e302f32322d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:88:92:0f:8e:e0:09:b1:c6:8b:79:b6:c8:b4:b9:13:72:
         d9:84:8c:1e:77:38:98:da:e8:13:4d:ac:48:e4:3a:57:a1:44:
         0b:46:d4:4e:bb:fb:9e:b8:cf:a4:57:9c:20:07:e3:00:9a:13:
         a6:16:2c:0b:9c:aa:f6:0d:73:00:f4:41:37:fc:cb:b7:68:90:
         02:22:d3:73:8c:57:aa:7c:e4:24:37:c8:43:31:34:6a:32:57:
         dc:53:75:5e:00:05:98:0d:e5:74:6f:06:d0:d7:9c:da:f5:9d:
         1e:ee:12:d8:f8:a5:14:01:b2:65:80:67:89:03:17:44:e5:1f:
         b7:a5:80:c7:af:ba:65:19:41:48:26:22:a8:24:4d:0a:d1:db:
         92:11:a6:d3:18:a8:ba:53:14:b6:8d:b4:16:d3:ca:7d:3e:98:
         84:49:3c:95:0e:35:31:5a:05:83:a2:51:bc:8f:89:3c:4c:1f:
         01:8d:c9:bd:79:2c:a4:c6:bd:8f:75:70:13:22:c4:05:6b:66:
         8d:bc:5e:0e:bc:20:85:6c:17:e4:f1:d7:ac:6d:67:51:82:3c:
         ff:a1:dd:a4:55:00:f0:99:db:82:5d:c2:7f:55:e1:74:e8:7c:
         02:35:f1:d7:22:89:bf:5d:25:7b:2f:f2:5a:81:2c:ab:a4:36:
         08:77:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:16 2026 by rpki-client