Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132332e3234322e302f32332d3234203d3e203231383539.roa
File:                     3130332e3132332e3234322e302f32332d3234203d3e203231383539.roa (raw, json)
Hash identifier:          8mzMixfzYIVmtJF1WfXduAuFjPjSvfM1GtN9oUTn6Eg=
Subject key identifier:   6D:61:0D:4C:EC:D3:2C:D5:89:4E:22:0F:7C:AE:BD:A0:FC:16:6D:C6
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       21124110EC71F81C485B9F31F125C42F4F12C9C9
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132332e3234322e302f32332d3234203d3e203231383539.roa
Signing time:             Mon 11 May 2026 17:32:17 +0000
ROA not before:           Mon 11 May 2026 17:27:17 +0000
ROA not after:            Mon 10 May 2027 17:32:17 +0000
asID:                     21859
IP address blocks:        103.123.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:12:41:10:ec:71:f8:1c:48:5b:9f:31:f1:25:c4:2f:4f:12:c9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:27:17 2026 GMT
            Not After : May 10 17:32:17 2027 GMT
        Subject: CN=6D610D4CECD32CD5894E220F7CAEBDA0FC166DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:18:1d:e3:0e:75:2b:5a:65:2e:19:b4:eb:
                    9d:4e:b1:77:bf:5e:8e:45:84:45:82:7e:2e:d7:fa:
                    a4:ca:b2:3c:ce:68:c1:f5:d5:50:a3:c6:ce:33:5a:
                    d5:1b:cc:3f:c3:12:85:14:36:c6:28:8e:ee:ac:56:
                    30:8b:11:2f:eb:e2:48:0d:c1:f5:ee:f0:16:bb:c5:
                    a7:57:f7:62:0d:09:01:37:57:21:9a:e3:bd:f3:2a:
                    12:b4:f6:b6:d3:c7:6c:00:b8:56:bf:05:0b:0e:1a:
                    cc:3f:2f:c5:3a:04:2f:13:51:84:e6:99:8b:7e:ca:
                    5a:7b:0d:40:31:cd:2f:bd:99:d0:5e:41:9a:85:16:
                    fd:36:74:1b:be:a4:6a:84:58:79:0d:c0:54:c6:d2:
                    14:b0:38:71:25:81:47:c8:9f:95:be:09:65:ec:72:
                    ca:72:a4:e7:e5:cf:a6:4a:f8:c5:d2:af:51:8b:d1:
                    73:d2:6f:0a:b3:b9:f2:2d:a6:a9:25:71:e0:ed:5f:
                    25:a9:53:e3:77:75:5a:99:68:80:63:f4:2e:7a:a0:
                    4a:4c:e9:33:d8:cd:cb:2e:e3:2c:d1:ce:2c:be:18:
                    cd:21:3b:dc:85:ba:c1:b2:7d:31:72:13:89:9f:a9:
                    03:f6:a6:54:40:81:2d:1b:a9:92:d2:06:fe:fc:0f:
                    7a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:61:0D:4C:EC:D3:2C:D5:89:4E:22:0F:7C:AE:BD:A0:FC:16:6D:C6
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132332e3234322e302f32332d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:80:21:d9:20:66:c7:f5:de:94:3e:24:3a:f7:05:d6:2b:6c:
         f6:d8:6e:53:cb:d3:92:61:2f:a7:6d:5a:ae:78:6f:e6:8a:62:
         13:92:33:f0:77:1c:0e:94:76:1b:fd:a9:56:15:de:5a:ac:07:
         dc:d9:b3:5c:a1:ec:a4:96:c4:05:4b:b2:da:04:64:18:bd:fa:
         ab:59:a2:09:59:a9:a1:d6:89:2f:3f:9a:86:f8:7c:20:dc:ef:
         ff:ab:84:b8:c4:d7:16:dc:12:35:1c:f3:dc:e5:0c:9c:38:6f:
         18:ac:5e:e6:c2:bb:f2:ed:fd:a3:7e:fc:85:ba:5c:c8:a5:aa:
         cf:04:cf:29:40:80:cc:01:b5:d4:1b:e8:d4:21:5b:d0:2d:22:
         ad:4d:20:ee:f3:99:3f:5e:f5:58:a7:b0:0b:68:ee:26:c4:a6:
         f4:87:12:4a:07:90:83:83:1e:55:af:ea:4f:cf:75:19:f4:00:
         b2:15:6b:29:34:7d:63:ce:37:92:3f:a9:76:dc:53:bf:5f:7d:
         14:28:50:bc:58:e5:c6:db:0d:23:81:a8:4c:46:36:0d:2f:d2:
         b6:b3:64:8e:29:31:f6:61:05:9e:56:71:21:2a:77:0d:8a:c0:
         d7:95:12:e7:dc:16:39:2f:21:34:71:35:87:4b:8f:a7:db:3a:
         1b:0f:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:16 2026 by rpki-client