Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNITEDSOFT/0/3130332e3133312e3131322e302f32322d3234203d3e20323033303133.roa
File:                     3130332e3133312e3131322e302f32322d3234203d3e20323033303133.roa (raw, json)
Hash identifier:          hGGifdT8SJ3uGAFxF9TEQXeGLIxwqZH32sbcOU94cCY=
Subject key identifier:   D7:B9:C7:19:05:43:DD:0B:54:42:8B:76:54:0E:A5:C4:A3:65:8D:6E
Certificate issuer:       /CN=6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D
Certificate serial:       1832ED8B675BC987B7367456093A1E74351A06B3
Authority key identifier: 6B:95:C6:B7:D1:D7:23:82:DF:E9:5F:9E:71:54:79:7A:4E:1F:F0:5D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/3130332e3133312e3131322e302f32322d3234203d3e20323033303133.roa
Signing time:             Mon 27 Jul 2026 01:04:01 +0000
ROA not before:           Mon 27 Jul 2026 00:59:01 +0000
ROA not after:            Mon 26 Jul 2027 01:04:01 +0000
asID:                     203013
IP address blocks:        103.131.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.crl
                          rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 01:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:32:ed:8b:67:5b:c9:87:b7:36:74:56:09:3a:1e:74:35:1a:06:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D
        Validity
            Not Before: Jul 27 00:59:01 2026 GMT
            Not After : Jul 26 01:04:01 2027 GMT
        Subject: CN=D7B9C7190543DD0B54428B76540EA5C4A3658D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:35:a3:80:a9:f5:28:9b:a3:37:0b:80:db:
                    12:24:10:09:6b:5a:0a:a3:0d:87:b5:a8:ec:0a:08:
                    5f:8f:06:ed:72:b4:7b:29:23:7e:34:ee:1b:2d:ea:
                    61:b1:e3:e0:2b:d8:15:b3:08:ec:6d:54:82:19:cb:
                    42:af:d9:fe:26:0e:41:3a:15:7d:bc:c7:de:bb:78:
                    de:c2:7e:77:35:d6:92:69:c5:28:f0:e8:84:e5:ce:
                    e5:6b:4e:88:20:d2:63:21:e2:31:9b:1d:91:22:66:
                    71:db:7f:7c:55:86:6e:f5:0f:eb:b3:08:c0:c0:18:
                    a6:a6:f8:64:f2:a8:fc:c9:db:1a:01:14:e0:ce:b4:
                    a6:bc:3a:ea:d3:08:c6:58:c6:c2:7a:2f:86:84:1f:
                    5a:af:13:f1:80:6c:58:81:25:83:17:6d:64:43:e7:
                    97:10:87:6b:ef:ec:cd:b7:a3:af:8c:9f:48:64:91:
                    c0:e0:d9:d6:e5:40:dc:79:e6:a6:e1:4b:36:b0:3c:
                    ce:35:bb:b3:e1:6c:0f:65:52:35:49:c3:6d:ac:a8:
                    63:5b:e2:f1:af:cc:81:d0:f0:b8:55:de:09:d7:3f:
                    cf:a2:55:37:17:06:2f:01:16:87:87:4b:25:f3:b7:
                    b4:96:0c:0b:4a:2c:86:09:d1:50:ea:bf:40:3b:b5:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:C7:19:05:43:DD:0B:54:42:8B:76:54:0E:A5:C4:A3:65:8D:6E
            X509v3 Authority Key Identifier:
                keyid:6B:95:C6:B7:D1:D7:23:82:DF:E9:5F:9E:71:54:79:7A:4E:1F:F0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6B95C6B7D1D72382DFE95F9E7154797A4E1FF05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNITEDSOFT/0/3130332e3133312e3131322e302f32322d3234203d3e20323033303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:db:3c:53:2d:b4:94:fe:ec:f2:c6:b8:c4:5a:7b:ce:4f:7d:
         f8:16:8f:eb:b1:f1:1a:64:2c:dc:08:49:39:fe:b0:df:a7:7a:
         c9:ba:1c:33:ad:9f:56:92:bf:8f:77:d8:41:9f:8a:bd:ba:e6:
         01:7b:3b:1f:2b:34:aa:5a:2a:c0:3b:9d:31:58:5b:a3:ca:fd:
         33:22:1e:9a:6e:c8:19:17:ce:48:fe:d5:0f:9b:fa:c0:e0:00:
         ac:ad:07:8f:d4:04:23:f9:77:d5:4e:3f:96:3c:92:c9:92:82:
         2a:ec:d9:5e:7d:da:b0:81:f8:65:bb:4b:8e:f3:26:d5:2b:d8:
         94:5d:d6:09:fa:ad:e4:80:2b:96:b1:60:7c:96:de:53:26:89:
         58:df:9b:40:d0:de:bf:9c:0c:7c:da:5b:e6:21:f5:ea:d1:42:
         bd:33:83:90:3f:1e:f5:87:74:a3:50:ce:3b:1b:01:50:e1:98:
         36:c5:5b:15:86:3b:ab:98:8d:ad:47:7b:e0:70:5c:0e:dd:ae:
         87:df:b6:46:17:cd:e1:c3:c3:e8:e6:82:c1:a9:5a:ee:01:cc:
         36:3d:c9:9c:68:e6:cc:81:cb:01:f8:38:0b:3a:f6:88:39:8b:
         12:8c:1e:09:0f:4a:b1:2d:4e:5a:7e:ef:60:d3:18:cd:09:ec:
         87:ac:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:53 2026 by rpki-client