Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/3130332e3137332e39342e302f32332d3234203d3e2039393230.roa
File:                     3130332e3137332e39342e302f32332d3234203d3e2039393230.roa (raw, json)
Hash identifier:          4AY9mKhgxxuuSl6y1Sy2exIP/SFNw2gXcIDmergV1Y0=
Subject key identifier:   4E:2E:1B:21:88:D1:5C:51:AE:5B:1F:3D:9F:4B:EF:61:A0:48:4A:8D
Certificate issuer:       /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Certificate serial:       0CC0EEF75F4A85DDA128CCE3F09D984F4593446A
Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ISTVC/0/3130332e3137332e39342e302f32332d3234203d3e2039393230.roa
Signing time:             Mon 01 Jun 2026 08:43:52 +0000
ROA not before:           Mon 01 Jun 2026 08:38:52 +0000
ROA not after:            Mon 31 May 2027 08:43:52 +0000
asID:                     9920
IP address blocks:        103.173.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
                          rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 19:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c0:ee:f7:5f:4a:85:dd:a1:28:cc:e3:f0:9d:98:4f:45:93:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
        Validity
            Not Before: Jun  1 08:38:52 2026 GMT
            Not After : May 31 08:43:52 2027 GMT
        Subject: CN=4E2E1B2188D15C51AE5B1F3D9F4BEF61A0484A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:34:03:84:f9:b7:f5:51:4a:26:7e:b4:8d:
                    78:99:01:5e:0b:85:11:0e:c5:a8:94:0d:f4:45:e8:
                    33:4d:f7:53:9c:fd:3e:60:91:aa:9a:1f:48:25:86:
                    9f:e2:b1:fa:9a:1e:5d:c6:f7:72:ac:1b:1a:f2:8e:
                    28:99:52:4f:4e:9a:fd:aa:d0:40:3d:5e:fe:18:94:
                    30:01:c9:c4:0d:1f:c2:39:af:b9:8a:9a:0c:c5:83:
                    3f:7d:3c:fb:70:97:05:e7:b2:c8:bb:4b:52:80:5e:
                    1f:71:88:8c:59:93:03:3c:78:02:88:e6:a1:b3:d4:
                    c5:00:e7:79:a7:b1:e1:67:3a:ef:9c:0c:8e:07:f6:
                    32:1f:16:f6:ae:04:11:70:f8:40:e1:be:d3:59:33:
                    e8:c8:7c:2e:78:7e:a9:97:98:bf:69:cf:f5:97:a1:
                    cf:dd:ea:12:54:8f:45:a0:c5:04:df:41:1c:c4:a1:
                    7d:53:bb:24:03:cf:0f:6f:7a:40:4d:1c:b1:14:71:
                    7f:ca:ab:48:5b:1a:39:18:79:da:bc:11:3d:d1:73:
                    9a:ab:a8:5e:5c:89:2e:c4:dd:4b:e1:e8:91:fd:c0:
                    92:d6:92:4c:88:3c:1b:12:a4:1d:44:6d:f5:42:2a:
                    78:ec:95:a3:7e:ea:ec:33:36:92:bc:d2:62:ed:ce:
                    13:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:1B:21:88:D1:5C:51:AE:5B:1F:3D:9F:4B:EF:61:A0:48:4A:8D
            X509v3 Authority Key Identifier:
                keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/3130332e3137332e39342e302f32332d3234203d3e2039393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:33:69:fa:4f:fb:33:18:f5:c5:e7:16:7e:d6:c1:ed:70:
         ee:5f:59:ef:3d:7d:33:85:6d:a8:3b:bd:37:eb:c5:98:f0:29:
         b3:ff:ab:97:c8:73:8e:18:35:da:12:fb:ce:b6:0b:95:d2:35:
         a9:57:88:04:5f:de:c2:16:2a:80:ef:df:55:d7:a4:20:55:f1:
         94:d3:99:99:34:c1:ab:89:93:66:fc:c0:9d:b1:57:7c:18:98:
         e6:92:9b:57:62:25:f7:a4:8f:e8:df:ab:51:81:e2:eb:aa:d6:
         9c:09:f5:16:d9:9a:98:1a:d8:51:f2:06:f1:0b:8e:09:3f:9a:
         55:be:f4:24:38:6b:50:52:d6:97:4f:48:d7:ff:3a:35:4c:3b:
         d1:a3:3c:52:c3:e3:f0:19:8c:0b:d3:d7:bb:04:13:90:90:b5:
         95:7e:7b:98:51:5a:d6:2e:f3:31:b4:37:f3:d7:11:3e:89:2c:
         5f:96:21:65:d6:31:bf:0a:1d:3a:dd:dd:24:79:d1:56:ab:ce:
         e4:f1:05:22:dc:d8:ba:e5:7e:90:f8:d8:51:b0:3c:2e:08:17:
         62:d2:9f:8b:d7:22:4e:92:42:72:ea:27:d5:3d:6f:0e:73:bd:
         a0:ca:d3:81:37:ec:22:ea:c6:d1:23:6e:a3:f6:37:4e:91:25:
         4f:30:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:55 2026 by rpki-client