Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e31372e382e302f32322d3332203d3e20313331313439.roa
File:                     3130332e31372e382e302f32322d3332203d3e20313331313439.roa (raw, json)
Hash identifier:          hZUaWratCjgaQsx8PmP6kA2splqJpSDGrjxSvKb8z+g=
Subject key identifier:   82:38:8C:3A:76:80:AA:4B:CA:A0:98:33:9A:BC:CB:05:E2:A7:D1:C2
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       0E9774C55BFB5667CD497048A165DEE86077FF05
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e31372e382e302f32322d3332203d3e20313331313439.roa
Signing time:             Mon 11 May 2026 17:26:37 +0000
ROA not before:           Mon 11 May 2026 17:21:37 +0000
ROA not after:            Mon 10 May 2027 17:26:37 +0000
asID:                     131149
IP address blocks:        103.17.8.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:97:74:c5:5b:fb:56:67:cd:49:70:48:a1:65:de:e8:60:77:ff:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: May 11 17:21:37 2026 GMT
            Not After : May 10 17:26:37 2027 GMT
        Subject: CN=82388C3A7680AA4BCAA098339ABCCB05E2A7D1C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f7:81:a0:62:1f:65:61:38:95:01:c6:ec:cc:
                    a7:20:0e:ab:04:65:8a:07:cb:3c:3d:66:7d:1c:da:
                    66:85:b4:d9:67:45:0f:80:38:0b:ca:eb:4d:12:eb:
                    f1:42:a0:f0:c1:23:5a:6e:5e:98:b8:69:3e:54:45:
                    d6:f6:48:ad:fc:59:1f:57:bd:07:0a:55:71:57:0e:
                    92:04:28:c5:f0:7e:ad:86:a0:3e:b9:4e:a1:d1:92:
                    bd:88:5f:db:2b:7a:17:8c:74:15:e3:b9:f5:2e:a2:
                    f8:ec:42:db:6c:fe:56:45:af:73:1b:63:69:0b:fb:
                    3b:79:d0:02:98:e2:ea:b8:36:8f:4e:b2:d1:d1:98:
                    ae:0b:cb:4e:af:a2:72:3b:38:b5:f9:b5:23:45:ac:
                    a7:c0:35:00:af:9a:3d:b9:4f:c8:fc:5d:b5:42:9d:
                    21:e1:45:76:96:38:23:eb:ba:8d:bb:9c:48:19:94:
                    b8:85:46:7a:57:bf:c9:ac:82:18:3a:93:2c:e4:cc:
                    de:4e:d5:e0:b7:c3:d5:63:8c:6d:81:02:46:a8:0f:
                    39:a5:d5:3c:f5:55:b4:b6:68:35:81:17:95:8e:73:
                    6e:f7:e5:45:0c:b3:4b:8a:a8:62:5a:27:ad:19:d6:
                    58:c1:c6:3d:c7:de:84:ee:38:4e:66:4c:71:94:f5:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:8C:3A:76:80:AA:4B:CA:A0:98:33:9A:BC:CB:05:E2:A7:D1:C2
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/3130332e31372e382e302f32322d3332203d3e20313331313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:dd:33:18:e4:14:31:0a:8d:d5:4a:14:a1:ef:59:36:84:
         4a:b4:f9:2a:03:6b:fe:6f:96:a3:3f:18:35:dc:1f:33:59:26:
         90:03:0e:de:9f:30:00:7d:f0:16:e4:a4:44:84:e5:0e:6c:96:
         37:19:f4:a9:0a:fb:b5:37:5c:02:4b:71:4a:c4:b9:0a:2c:bc:
         e0:09:77:96:9a:2d:87:6c:2e:d5:df:3e:b2:1f:e8:b9:9e:5b:
         3f:ff:9f:e4:97:09:6d:80:4c:1c:77:5a:77:ea:cc:7a:5e:f0:
         2c:d8:c6:f1:26:fb:08:18:04:ae:2b:3f:21:85:94:24:e2:9c:
         b9:e9:c0:d9:07:66:44:b0:8b:04:d2:6d:2a:4f:3d:2e:15:bc:
         17:92:d2:15:8e:ce:04:39:56:b2:ac:5f:35:20:54:35:26:8a:
         b1:5b:12:0d:62:7e:d5:68:aa:c1:61:90:ba:6c:c8:32:10:8c:
         c3:07:3b:a4:76:82:8c:58:54:94:7e:19:7f:87:dc:d0:58:ab:
         cd:c6:35:e1:5b:7c:df:f7:a3:95:42:fd:67:87:8b:36:c4:53:
         27:86:d9:d1:37:2a:5e:90:7f:70:2c:21:35:05:49:6c:d0:0d:
         c3:47:16:22:38:af:0c:fe:83:19:b4:6b:3c:80:1c:f9:88:42:
         18:30:21:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:15:15 2026 by rpki-client