Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32342d3234203d3e20323033303133.roa
File:                     3130332e3133312e3132342e302f32342d3234203d3e20323033303133.roa (raw, json)
Hash identifier:          gzX0arRtCBcka2v1mOO4ayrFbmUFgs9F0NtG28kYri0=
Subject key identifier:   B1:40:2D:9E:6D:95:70:8D:14:84:7D:FA:8B:A7:19:EA:26:96:2F:53
Certificate issuer:       /CN=E5067314CFC65098386A97E8110F787E073CA51E
Certificate serial:       71FA016E6735801ADD576EEC9E1055F0F8061D91
Authority key identifier: E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32342d3234203d3e20323033303133.roa
Signing time:             Mon 27 Jul 2026 01:04:01 +0000
ROA not before:           Mon 27 Jul 2026 00:59:01 +0000
ROA not after:            Mon 26 Jul 2027 01:04:01 +0000
asID:                     203013
IP address blocks:        103.131.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl
                          rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fa:01:6e:67:35:80:1a:dd:57:6e:ec:9e:10:55:f0:f8:06:1d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5067314CFC65098386A97E8110F787E073CA51E
        Validity
            Not Before: Jul 27 00:59:01 2026 GMT
            Not After : Jul 26 01:04:01 2027 GMT
        Subject: CN=B1402D9E6D95708D14847DFA8BA719EA26962F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c6:02:50:ba:2e:aa:3e:84:cf:1e:c2:f7:e7:
                    32:85:19:af:40:fc:26:5a:89:14:0c:60:10:09:ee:
                    6c:1c:e5:e7:fa:a1:59:d1:ad:f7:59:32:34:ed:41:
                    18:10:fe:19:83:65:d0:d1:4e:d3:b8:26:07:a5:2d:
                    55:e5:c1:e0:00:d7:0e:c5:f7:b1:84:d7:0f:7e:5e:
                    5f:78:f3:aa:9e:f5:8b:1e:57:ba:0a:68:79:9b:c5:
                    fe:6e:26:cf:09:75:72:cd:d0:55:a6:f2:9f:d5:b9:
                    ae:d4:b0:b1:81:58:b1:c5:86:2c:4a:72:19:ae:ea:
                    32:c8:c0:24:ad:30:61:5f:4f:94:a0:00:0c:a8:03:
                    5a:c4:a6:4f:33:76:50:0c:18:f2:56:ee:f9:ba:59:
                    18:a3:c9:4c:93:b2:c4:3c:65:17:ff:a5:93:fd:75:
                    74:85:99:c8:f4:08:32:56:0b:a5:8d:f2:28:aa:c5:
                    42:70:39:1c:c0:84:f9:5f:cb:a9:05:fb:0c:15:75:
                    c7:6b:f2:a2:75:c9:ef:ed:e6:a6:d9:38:f9:55:b8:
                    5c:50:16:21:b5:e4:e1:ce:4d:14:e0:c6:91:3f:63:
                    a7:98:e9:87:f5:be:15:bb:cf:81:17:0a:e9:59:95:
                    7f:ee:20:88:c5:4f:b6:ee:b5:2d:f2:12:47:fe:39:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:40:2D:9E:6D:95:70:8D:14:84:7D:FA:8B:A7:19:EA:26:96:2F:53
            X509v3 Authority Key Identifier:
                keyid:E5:06:73:14:CF:C6:50:98:38:6A:97:E8:11:0F:78:7E:07:3C:A5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/E5067314CFC65098386A97E8110F787E073CA51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5067314CFC65098386A97E8110F787E073CA51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MPOWER/0/3130332e3133312e3132342e302f32342d3234203d3e20323033303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:09:ee:f2:84:97:5c:f8:f3:7c:75:2f:d6:02:2a:d2:99:3c:
         fb:da:3d:8a:26:9c:5e:92:e3:3d:54:de:97:81:fc:e6:c0:f2:
         a1:42:38:5f:7d:3b:41:66:ad:75:c8:1c:f8:b9:8b:b0:70:33:
         86:49:51:e0:bb:a0:fa:bd:b1:16:82:a8:ad:66:25:4a:62:b2:
         d8:47:0f:44:26:d9:b9:bb:66:6f:a1:7b:38:c6:4c:4e:7e:7a:
         3f:7c:09:04:e6:ca:1b:5a:82:1a:3e:a2:97:35:3d:89:bb:cf:
         b9:05:40:3d:7a:87:eb:95:30:ea:f6:d3:d9:9e:75:e8:7e:ce:
         e2:e4:05:7c:5e:1d:e8:50:18:4d:83:87:1d:09:45:89:ee:fc:
         cd:dd:d6:3b:5c:a1:56:0b:30:f9:d3:bc:84:88:ab:69:d8:6e:
         0b:48:2b:b5:b6:3f:8f:c8:9a:85:60:2e:f4:e1:61:c2:3f:8a:
         1b:b2:7b:28:02:83:ab:be:a9:74:cb:b7:e6:6e:9e:b7:bc:dc:
         fb:1f:c1:a1:ea:cd:3d:32:d0:3a:39:6e:0a:58:99:e9:79:9d:
         2d:28:4d:e8:21:f6:d1:bc:35:e9:b5:b5:24:4f:2f:80:6f:51:
         9e:6e:ca:77:ea:c3:16:5d:ba:f3:c5:20:de:70:8a:4e:e6:b1:
         a1:f8:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:27 2026 by rpki-client