Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32322d3234203d3e20323033303133.roa
File:                     3130332e3133312e3132342e302f32322d3234203d3e20323033303133.roa (raw, json)
Hash identifier:          uSpjdhqYU2AVviwfm2aaPmn4kfZ1rmuQUL2shYvXM4Q=
Subject key identifier:   44:2D:40:24:5B:BF:E9:66:E3:10:87:5E:D1:69:FC:C1:11:BD:4E:63
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       54EA58F0FF815D2112F971E2320CF709F3922C68
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32322d3234203d3e20323033303133.roa
Signing time:             Mon 24 Aug 2026 07:33:17 +0000
ROA not before:           Mon 24 Aug 2026 07:28:17 +0000
ROA not after:            Mon 23 Aug 2027 07:33:17 +0000
asID:                     203013
IP address blocks:        103.131.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ea:58:f0:ff:81:5d:21:12:f9:71:e2:32:0c:f7:09:f3:92:2c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Aug 24 07:28:17 2026 GMT
            Not After : Aug 23 07:33:17 2027 GMT
        Subject: CN=442D40245BBFE966E310875ED169FCC111BD4E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:cb:d1:04:28:f5:55:23:b0:8b:e6:6a:7a:
                    1f:26:af:7c:09:6a:c3:e5:25:b5:5f:b4:31:0e:03:
                    41:b4:8c:d4:2d:53:f2:4f:02:4f:64:9f:f9:13:bb:
                    67:78:6c:39:bf:fb:4b:fa:2a:10:c8:80:10:a2:58:
                    6c:48:25:44:ab:e5:01:98:ec:69:c4:62:32:73:41:
                    79:87:66:4e:8e:b6:e7:b4:21:79:0d:2f:3e:ee:73:
                    be:9d:50:fb:ae:eb:e1:3f:83:c5:4d:9e:45:20:d9:
                    88:44:bf:6d:e2:c7:7f:b7:07:9a:a5:42:f4:94:97:
                    5c:8d:46:0c:f3:97:18:04:62:a0:c6:e6:b9:c7:31:
                    60:6f:d6:c1:0c:5c:78:9b:aa:65:25:a8:e5:76:aa:
                    e2:a2:54:e5:0a:61:a3:74:bc:26:50:00:43:01:e0:
                    99:2d:f1:2a:97:23:07:cc:b3:fb:21:db:98:06:35:
                    cb:6e:2a:44:53:86:a5:71:f2:2c:97:5f:cd:e8:c8:
                    45:52:9f:f0:6d:f1:74:ac:47:a6:78:84:9d:b6:a1:
                    67:4f:18:17:00:5d:1b:c5:22:21:37:79:16:1d:6a:
                    6d:fa:48:a2:f6:aa:7d:c8:43:a4:57:69:bc:9a:85:
                    6d:82:47:d4:40:77:f6:bd:46:f0:a7:f7:f0:f6:70:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2D:40:24:5B:BF:E9:66:E3:10:87:5E:D1:69:FC:C1:11:BD:4E:63
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32322d3234203d3e20323033303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:35:4b:b1:fd:9f:fb:36:9e:0f:9c:13:98:9a:62:59:9a:82:
         68:61:75:7e:93:2c:93:d2:da:ed:01:f7:b8:6c:69:e9:10:e3:
         f0:97:56:1c:04:96:27:0e:27:ba:4e:8f:64:47:b5:db:9d:ec:
         5b:72:7a:91:e2:0c:a7:d2:f7:b5:a2:d0:59:34:41:04:8d:e2:
         0b:35:00:d6:c1:81:24:1d:ae:09:11:9b:23:b0:83:c2:36:0a:
         62:fd:6b:fd:ad:b5:9a:fe:d3:36:77:9e:bd:d2:18:6d:10:71:
         b9:c7:3c:ea:b7:5c:81:e5:b0:7e:45:f4:9a:56:7d:45:2e:b0:
         22:74:64:a0:4e:12:05:d3:ce:f7:c8:f0:13:ef:94:3c:ac:4c:
         77:b7:24:b1:69:f8:07:30:96:a1:ea:81:c4:a1:3d:57:29:17:
         30:34:ad:7f:03:74:ba:bf:5b:c3:15:c2:22:c0:9d:ef:5f:30:
         e2:35:f9:61:fa:ff:7c:9e:6d:d8:b5:03:f8:e8:b5:ae:e0:9c:
         11:40:b7:66:d0:3e:73:9f:1f:14:ad:60:9d:21:de:97:5f:c9:
         29:bb:6c:72:d7:05:b9:e7:97:d6:ac:f0:7f:aa:cb:59:87:b9:
         16:88:41:90:7d:aa:f7:ec:21:7c:e2:40:74:b0:9b:e0:2e:0a:
         a9:ec:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:07 2026 by rpki-client