Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233362e302f32342d3234203d3e203633383937.roa
File:                     3130332e3132372e3233362e302f32342d3234203d3e203633383937.roa (raw, json)
Hash identifier:          1DpKKx3LbTodUBDevtc1pgF4z8H1r44nuFzvkdn6rdk=
Subject key identifier:   E2:89:6E:FC:11:0A:6F:24:91:39:B7:E3:AE:66:CF:EC:C3:4C:63:40
Certificate issuer:       /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
Certificate serial:       4F06392B338CDF78CEBBFBC53BB77811DC362231
Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233362e302f32342d3234203d3e203633383937.roa
Signing time:             Mon 01 Jun 2026 08:23:52 +0000
ROA not before:           Mon 01 Jun 2026 08:18:52 +0000
ROA not after:            Mon 31 May 2027 08:23:52 +0000
asID:                     63897
IP address blocks:        103.127.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl
                          rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:39:2b:33:8c:df:78:ce:bb:fb:c5:3b:b7:78:11:dc:36:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
        Validity
            Not Before: Jun  1 08:18:52 2026 GMT
            Not After : May 31 08:23:52 2027 GMT
        Subject: CN=E2896EFC110A6F249139B7E3AE66CFECC34C6340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:6a:12:36:e1:46:65:93:1a:45:96:9b:7b:
                    57:13:be:f8:48:39:3d:b4:b1:85:ad:03:e0:13:87:
                    8d:88:1a:73:1d:47:37:2c:a5:b5:54:f9:3f:57:ae:
                    1c:37:5f:2d:21:12:60:f5:70:98:2e:7f:3e:00:4f:
                    10:ef:51:38:af:96:cc:b7:14:af:18:2f:ae:0e:80:
                    3f:24:e6:bc:db:8a:75:da:ff:6f:fc:ec:b6:98:e4:
                    b7:c6:ad:2f:f8:54:8a:55:63:5b:5e:77:09:46:a7:
                    5c:18:5b:c7:96:3e:c3:2e:69:42:32:4c:0a:f0:c8:
                    bc:9f:11:12:45:33:dc:b7:8c:98:4c:50:64:2e:42:
                    0c:80:95:3b:30:04:a3:d8:b7:4e:1e:3d:c9:1b:3b:
                    64:26:a8:8e:16:20:59:29:e9:ab:70:b4:04:8e:4f:
                    85:a6:bc:36:83:f0:0f:20:47:ac:77:7d:f1:95:af:
                    1d:8c:98:43:2b:47:de:09:9a:a6:3d:c7:d2:87:39:
                    1e:26:da:5d:bb:ad:15:fb:dd:84:e3:93:b4:e7:3c:
                    c3:05:9b:00:47:23:e7:2b:28:be:d0:e8:52:bc:07:
                    02:99:36:7a:25:39:10:43:df:32:7e:ee:65:56:ae:
                    c3:1b:13:4e:47:f7:39:f4:fa:dd:95:9d:75:85:22:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:89:6E:FC:11:0A:6F:24:91:39:B7:E3:AE:66:CF:EC:C3:4C:63:40
            X509v3 Authority Key Identifier:
                keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/3130332e3132372e3233362e302f32342d3234203d3e203633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:b8:c2:36:cc:b0:75:c6:87:e9:2f:a5:9d:42:6e:1d:f6:
         22:84:32:5b:01:88:9f:60:67:35:ba:8b:9b:ae:a8:64:10:c6:
         e3:4c:6e:69:6c:88:60:93:29:b1:d7:bf:5a:e9:ab:bb:53:67:
         e2:61:92:34:12:b5:d0:95:56:62:5e:b5:ee:61:41:8c:17:50:
         9c:cf:e2:43:bf:12:26:71:43:d2:33:89:60:66:31:42:5f:cc:
         37:ad:01:ba:99:47:55:c3:7c:35:98:ac:37:e2:9e:98:59:e8:
         74:7c:2d:55:12:36:06:4c:2d:41:5b:f7:5e:d3:10:3f:07:ed:
         3c:70:e2:be:b7:60:a2:87:4e:05:09:d0:f9:6f:96:1f:c4:2b:
         4d:c1:6f:44:c1:e9:36:9e:b7:4f:81:42:c0:3c:fb:23:af:be:
         6e:e9:89:b7:67:7f:f7:09:6c:85:09:db:93:5f:4f:90:7b:ae:
         e7:84:9b:ad:68:34:bd:69:83:70:a8:67:ae:98:1c:6a:5d:8f:
         8f:bb:af:99:8a:98:e8:7d:5d:1b:27:4f:13:57:3b:e6:82:d8:
         0d:02:67:b9:c9:8a:bb:e7:7e:0d:9d:1e:85:e1:d8:ab:2d:e6:
         18:fc:3d:e0:6e:ea:01:5c:fa:18:1a:e5:d0:10:1e:3a:bc:7c:
         66:0e:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:37 2026 by rpki-client