Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132392e3136382e302f32322d3332203d3e20313331313439.roa
File:                     3130332e3132392e3136382e302f32322d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          Xk6yS2TWJMWZBOwo932s8w+km5Lrk4mU07mh2X5Q+zc=
Subject key identifier:   08:DB:A4:DA:E8:DC:2E:38:5E:D1:43:58:8D:0F:10:A2:48:35:3A:1D
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       5A40CC8F06DF53F7609A01CE8DE94DFB329848AF
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132392e3136382e302f32322d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:32:15 +0000
ROA not before:           Mon 11 May 2026 17:27:15 +0000
ROA not after:            Mon 10 May 2027 17:32:15 +0000
asID:                     131149
IP address blocks:        103.129.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:40:cc:8f:06:df:53:f7:60:9a:01:ce:8d:e9:4d:fb:32:98:48:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:27:15 2026 GMT
            Not After : May 10 17:32:15 2027 GMT
        Subject: CN=08DBA4DAE8DC2E385ED143588D0F10A248353A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:95:c0:00:31:cf:9e:b9:24:4a:10:50:fb:
                    41:e4:81:61:44:5f:d2:02:c0:fb:47:3f:11:41:d9:
                    bd:2b:79:8d:59:9d:1f:0b:84:9b:27:aa:65:ed:99:
                    25:80:fc:4d:94:26:e4:22:d6:6e:fd:71:ba:b0:ad:
                    5b:32:4e:0b:fe:ba:ef:98:a2:bb:e8:38:c2:4c:33:
                    5f:68:0a:39:4c:f8:b6:09:e1:4a:c3:d1:af:ee:fe:
                    11:9e:44:a9:97:04:e0:ed:e8:29:1d:9e:dc:9e:a5:
                    79:5f:0b:b0:ab:4d:6a:bc:5a:68:34:a9:69:11:c0:
                    32:66:56:96:87:f6:f4:f4:6e:40:95:82:74:cf:4b:
                    31:d8:06:b2:8f:39:c4:7b:d6:50:04:2d:b5:32:94:
                    1e:85:aa:32:d8:a1:07:30:c9:ee:d7:4d:6c:6f:06:
                    99:2c:48:19:d4:ce:38:16:93:81:52:cd:14:83:5f:
                    7d:e4:44:49:19:32:76:7c:ee:7c:97:9e:a9:6d:93:
                    a5:ba:e0:8a:d4:37:99:98:b2:87:bc:ea:28:e2:82:
                    60:a2:56:02:01:67:ed:2d:ef:14:10:e4:aa:e3:fd:
                    3e:e1:11:fd:ee:dd:91:5c:28:22:d3:8a:94:dc:51:
                    cb:9d:bd:c4:e3:cd:ed:cb:e5:cb:41:b1:5a:c9:b8:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:A4:DA:E8:DC:2E:38:5E:D1:43:58:8D:0F:10:A2:48:35:3A:1D
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e3132392e3136382e302f32322d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:ca:59:e1:b4:ef:5c:4b:16:c9:19:bf:ae:a8:f0:0f:3d:
         a3:b3:46:be:79:0d:0e:f1:5e:87:0d:b8:8b:e8:3d:91:7e:b5:
         72:25:2d:e9:76:ba:c4:0d:23:fe:f5:9e:50:23:7e:32:df:68:
         2d:f3:b3:de:0f:53:98:a1:8d:66:ed:ab:0d:a7:4e:e4:82:76:
         16:7b:cd:a1:63:07:eb:25:d7:13:c1:d9:d9:82:ab:7a:25:7f:
         7d:26:06:3b:4c:1f:e4:16:5f:0f:54:cd:12:76:09:7f:5a:fb:
         e0:fd:2f:39:bb:e1:f0:94:7e:4a:8e:c7:54:3d:08:d8:de:d6:
         6d:67:43:f6:69:29:52:5d:bc:e0:fb:1f:d5:17:27:e7:ce:8e:
         d1:7d:93:0e:84:ba:01:03:fe:26:e2:8e:b8:23:96:c7:68:06:
         00:55:eb:4e:57:b0:76:e6:42:5f:98:e3:ae:53:71:32:dc:b3:
         a2:26:05:b0:b0:a1:71:d3:06:7d:24:de:bc:de:78:e4:b4:8f:
         dd:e1:e1:16:1c:db:4c:80:b5:7a:49:d3:ac:61:4e:83:6c:09:
         4f:8f:88:ef:8d:ff:11:a4:40:9a:b7:52:1a:4f:49:97:a9:c6:
         fa:3f:d9:7b:d2:88:bf:b9:aa:9e:86:48:5c:c1:16:99:77:68:
         b8:34:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:12 2026 by rpki-client