Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
File:                     3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (raw, json)
Hash identifier:          8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=
Subject key identifier:   58:7F:0A:C3:C7:31:F6:30:69:18:13:9D:AB:83:52:F7:E8:6E:32:D2
Certificate issuer:       /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial:       1F1A31CC05339E6B1DB23FFC4F5092671EF134DA
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa
Signing time:             Tue 08 Sep 2026 07:44:07 +0000
ROA not before:           Tue 08 Sep 2026 07:39:07 +0000
ROA not after:            Tue 07 Sep 2027 07:44:07 +0000
asID:                     4780
IP address blocks:        103.234.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
                          rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1a:31:cc:05:33:9e:6b:1d:b2:3f:fc:4f:50:92:67:1e:f1:34:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
        Validity
            Not Before: Sep  8 07:39:07 2026 GMT
            Not After : Sep  7 07:44:07 2027 GMT
        Subject: CN=587F0AC3C731F6306918139DAB8352F7E86E32D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:ea:1d:83:ca:b4:a6:6f:07:44:e1:e8:ba:
                    d9:2a:50:68:17:a8:9d:61:34:25:0e:27:db:21:02:
                    5e:b8:f6:f3:1a:0c:a3:d5:98:22:b4:6c:6e:d1:2d:
                    ca:04:22:0a:87:3f:d2:c1:dd:c4:bd:f5:25:55:af:
                    2c:84:9c:97:1d:93:4a:54:30:8f:3b:ac:88:ca:ed:
                    82:af:00:40:db:ed:2e:b9:5d:56:c0:1f:24:09:fc:
                    de:85:dd:29:4d:99:e5:07:85:64:e4:e1:66:46:50:
                    c9:07:e7:f2:f8:6a:73:63:17:d3:c5:ef:5b:a1:8c:
                    02:32:18:f2:f0:fb:55:be:a9:3b:ff:f2:89:74:0b:
                    6c:57:11:e0:93:44:95:a6:35:ec:40:47:64:dc:62:
                    4d:28:39:c3:9b:f4:ba:58:85:3a:6f:9e:49:fb:13:
                    4e:34:28:28:6e:7c:60:69:c4:95:1e:cf:2b:62:f9:
                    b0:03:71:ea:a0:2c:65:5b:93:b6:af:61:a6:ef:22:
                    1d:1f:51:8b:14:4e:d4:d3:3a:0d:28:68:dc:9e:bf:
                    47:86:a7:f0:95:b2:64:dd:34:9a:cb:14:cf:be:cd:
                    f8:fb:43:01:32:d2:69:82:37:c7:09:b2:59:16:28:
                    c0:36:5c:01:5d:0c:21:c7:56:fa:72:a4:61:f7:84:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:0A:C3:C7:31:F6:30:69:18:13:9D:AB:83:52:F7:E8:6E:32:D2
            X509v3 Authority Key Identifier:
                keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:22:72:8d:f5:05:c1:44:a9:75:93:fa:8a:64:bb:38:91:ad:
         c3:e8:42:95:17:6b:07:37:32:05:18:b1:43:0e:89:4a:bd:d4:
         b0:d5:a8:63:42:3a:6e:f0:0c:2a:f5:f0:42:f5:65:3a:0f:ba:
         cf:28:b7:e9:33:5d:54:11:cc:49:4d:e2:c4:10:aa:86:fd:aa:
         e7:17:9b:f2:1a:06:aa:b6:a5:16:5e:6f:cc:33:aa:fb:13:fd:
         13:75:e5:b7:db:6f:8a:6e:4a:ab:bd:31:d8:79:b7:ad:14:ee:
         5c:6b:c9:c9:c4:78:5f:43:73:f4:98:d6:32:21:c8:e3:7d:35:
         b2:80:47:6f:ce:35:15:10:90:d6:1d:32:32:71:fe:14:b0:fb:
         a5:be:d9:e8:4d:42:55:25:3a:59:db:01:d3:56:d6:05:f1:4f:
         f5:ef:2f:1c:a4:2e:49:f2:a4:1d:d2:21:08:24:2f:d5:98:78:
         89:ae:98:7f:f9:ff:98:2a:d8:39:cd:de:02:5d:86:3b:cd:18:
         c7:55:ca:6d:de:db:b5:39:42:f5:a5:c7:ed:e6:a9:29:e7:ed:
         ee:2d:8c:af:70:de:ca:f9:42:24:6e:0c:d4:0e:c9:c8:82:36:
         8a:97:a3:02:57:f3:94:98:27:0d:83:6c:c1:1c:39:8e:11:d0:
         40:33:b2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:19:09 2026 by rpki-client