Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa
File:                     3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier:          UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=
Subject key identifier:   4B:81:B1:69:82:F8:BA:15:AC:04:79:3D:94:B2:B8:A1:F2:4A:A2:DB
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       0D352B5C5CF493A8D53EC65BA4FC1A3F6D516F28
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa
Signing time:             Tue 08 Sep 2026 07:44:11 +0000
ROA not before:           Tue 08 Sep 2026 07:39:11 +0000
ROA not after:            Tue 07 Sep 2027 07:44:11 +0000
asID:                     4780
IP address blocks:        103.234.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:35:2b:5c:5c:f4:93:a8:d5:3e:c6:5b:a4:fc:1a:3f:6d:51:6f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Sep  8 07:39:11 2026 GMT
            Not After : Sep  7 07:44:11 2027 GMT
        Subject: CN=4B81B16982F8BA15AC04793D94B2B8A1F24AA2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:4c:06:d3:67:fe:e6:8c:16:e0:8e:f4:75:
                    b9:a7:d6:dc:dc:cf:1f:2b:67:b6:1e:bb:50:74:f3:
                    d1:1d:ac:e5:0f:06:22:da:a7:70:59:8c:34:94:44:
                    90:37:69:c7:14:d5:c5:d2:64:02:d8:c6:28:d6:d4:
                    9f:9b:75:6c:05:79:e6:a2:d5:1f:2a:cb:4b:8c:f0:
                    e1:37:a3:58:9f:81:97:9c:a2:bb:2c:b6:67:b0:eb:
                    c4:a4:b0:93:f3:7a:3d:82:dd:87:28:0d:4f:12:1d:
                    a5:5e:06:c3:eb:39:71:15:2b:33:3a:b0:55:7a:f1:
                    66:c8:f9:2a:78:5f:14:9c:29:3a:05:6f:d0:50:20:
                    da:a8:f2:17:57:e3:89:62:eb:6e:42:bc:28:8a:6b:
                    9e:94:2d:ea:77:eb:6a:4e:c2:99:6a:f0:7b:d4:d1:
                    5c:75:41:27:40:98:c5:9a:86:28:86:bd:b3:27:6b:
                    07:18:21:91:16:a3:65:8c:2b:3b:ee:18:70:01:91:
                    51:f0:ff:ef:bb:f6:c5:7f:7b:5e:19:b0:27:e6:d3:
                    df:1e:8e:36:fa:1e:ff:be:d2:34:f0:9a:52:4e:36:
                    98:a5:c4:1c:29:7b:be:2c:cb:b0:47:e9:17:aa:c9:
                    4c:04:d4:da:56:f3:ed:65:c1:83:0c:0b:2e:09:60:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:B1:69:82:F8:BA:15:AC:04:79:3D:94:B2:B8:A1:F2:4A:A2:DB
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:2f:0c:ac:ed:80:aa:c3:36:f3:bd:f2:83:86:05:7c:ce:
         68:5f:2e:ea:31:bb:b1:3c:5d:19:bd:02:f2:44:ad:d8:7f:56:
         32:d1:57:f1:60:1c:c2:57:7e:a3:e7:11:84:20:f8:ed:78:fb:
         df:e5:36:f5:85:40:99:21:42:bd:b1:19:51:43:77:75:5b:77:
         8c:37:4b:7a:f5:47:ee:b2:58:8a:d8:61:cc:76:b9:54:14:df:
         60:56:cd:c0:72:2b:32:53:6e:67:6c:7a:2c:f4:2c:96:c7:6e:
         57:1f:b4:6a:0d:48:bb:9a:c4:7e:ac:ad:84:80:1d:a4:a4:f7:
         08:1c:5f:9c:d6:b4:4f:e6:08:ee:21:a6:7f:8b:19:36:3b:b2:
         cf:48:43:1e:72:c0:90:87:ee:d8:98:f0:df:07:19:b0:d0:5a:
         4e:52:46:48:0e:5b:27:35:5a:a0:d2:0b:36:71:ad:df:40:f6:
         03:f9:a8:47:ba:b4:de:da:b0:54:77:28:45:ba:d6:c4:f4:cc:
         d1:17:3a:34:f1:43:d5:57:2a:bb:2f:22:df:40:c3:0d:a6:d4:
         dc:13:b4:41:ed:66:b5:60:41:ba:aa:31:27:cc:f2:bd:58:a1:
         d3:83:29:63:74:57:11:34:e2:4d:d7:f0:c9:0f:74:89:26:1d:
         db:6a:16:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:47:40 2026 by rpki-client