Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUJIN/0/3130332e32342e35342e302f32332d3234203d3e2037353338.roa
File:                     3130332e32342e35342e302f32332d3234203d3e2037353338.roa (raw, json)
Hash identifier:          uV3gyJDRo9+yZr9VR9jnAcSljqRlhLbz64U9Q+9ccvY=
Subject key identifier:   7F:9E:1B:CE:5A:8E:AD:47:96:13:F7:E5:8E:F4:CF:AC:3B:85:16:8B
Certificate issuer:       /CN=7411EB8A89B091C3CB5C6D282FCA1E46D214035D
Certificate serial:       400173E4F26F9F8EBBE2EC878295E83558A63933
Authority key identifier: 74:11:EB:8A:89:B0:91:C3:CB:5C:6D:28:2F:CA:1E:46:D2:14:03:5D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUJIN/0/3130332e32342e35342e302f32332d3234203d3e2037353338.roa
Signing time:             Thu 27 Aug 2026 09:04:01 +0000
ROA not before:           Thu 27 Aug 2026 08:59:01 +0000
ROA not after:            Thu 26 Aug 2027 09:04:01 +0000
asID:                     7538
IP address blocks:        103.24.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUJIN/0/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.crl
                          rsync://rpkica.twnic.tw/rpki/YUJIN/0/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:01:73:e4:f2:6f:9f:8e:bb:e2:ec:87:82:95:e8:35:58:a6:39:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7411EB8A89B091C3CB5C6D282FCA1E46D214035D
        Validity
            Not Before: Aug 27 08:59:01 2026 GMT
            Not After : Aug 26 09:04:01 2027 GMT
        Subject: CN=7F9E1BCE5A8EAD479613F7E58EF4CFAC3B85168B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:92:7c:74:f8:12:0c:2a:ce:d7:8c:39:98:
                    0d:61:4a:0e:f3:9f:16:db:b6:4d:fb:f7:64:d2:b0:
                    bd:92:f2:0f:59:44:16:b4:c9:f6:76:7f:2a:6f:80:
                    95:62:ef:52:dd:c2:8e:ad:cf:f7:c0:53:d2:c6:54:
                    db:3c:45:d9:86:57:88:61:39:ad:4e:15:c8:cc:b4:
                    ca:1a:b8:3a:7a:d9:6e:c0:5b:7b:03:4b:d8:c2:9b:
                    93:f5:4d:09:4b:36:12:47:ca:97:17:3d:49:93:b8:
                    13:27:8e:43:a3:c2:8e:df:35:23:26:59:5e:89:b6:
                    81:7e:00:04:16:db:c6:f3:a1:d1:c9:b9:e1:0a:10:
                    de:ab:47:4d:a8:22:a4:ff:4c:11:dc:20:4c:0f:f0:
                    2d:39:e5:12:2e:7c:af:60:e2:15:a0:cd:15:46:7b:
                    30:59:87:a9:bc:d2:f6:0b:54:56:35:87:01:cf:7d:
                    07:90:d9:f3:93:bf:c5:33:b1:0f:80:14:65:24:29:
                    1f:f4:8a:cd:c9:91:51:41:df:ca:c4:a8:42:72:04:
                    bf:27:68:04:54:98:c0:de:1c:c0:73:74:42:9e:2c:
                    b3:75:f9:a8:d0:90:83:ac:0f:d0:bd:c9:b8:81:61:
                    09:08:1a:5c:da:5a:05:e0:e9:5b:76:fc:cd:08:b1:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9E:1B:CE:5A:8E:AD:47:96:13:F7:E5:8E:F4:CF:AC:3B:85:16:8B
            X509v3 Authority Key Identifier:
                keyid:74:11:EB:8A:89:B0:91:C3:CB:5C:6D:28:2F:CA:1E:46:D2:14:03:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUJIN/0/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7411EB8A89B091C3CB5C6D282FCA1E46D214035D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUJIN/0/3130332e32342e35342e302f32332d3234203d3e2037353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:8e:f4:38:6a:da:e5:a8:42:ed:b5:9f:f7:f2:cb:44:87:
         0f:bd:f5:d0:e7:41:bd:4c:26:6a:b4:7c:52:5d:1d:db:d0:03:
         55:06:98:6f:8c:bf:8e:bb:c8:97:f3:14:e6:b1:31:0e:52:32:
         c6:5d:a7:db:50:c5:44:09:26:db:2b:84:f8:56:c1:8b:f0:32:
         da:0c:27:0b:63:12:22:43:45:1f:74:b7:10:a0:13:7b:67:1c:
         1e:bb:a9:ed:30:09:44:51:93:a7:70:d0:00:7e:0f:32:04:a2:
         31:46:ab:1b:04:e1:8b:9c:54:eb:cb:40:9d:fa:96:52:35:ad:
         3a:b7:0a:9f:14:b2:5b:93:55:bf:09:a3:18:4e:b4:3b:a6:62:
         37:ae:46:ea:37:d3:b6:1b:e0:6d:4e:0f:07:c9:8e:d3:97:84:
         6f:0c:f0:e4:97:bb:d9:2b:d7:e6:6f:b6:0e:3f:46:2c:9e:e0:
         de:1c:6f:a7:65:4e:e4:0c:ee:5c:0d:a6:d0:65:e3:02:b7:01:
         34:d1:b0:f3:7e:6b:f5:c5:cf:ba:06:e0:93:98:4d:1e:93:b5:
         be:c1:7a:95:87:c4:0e:07:c6:81:9f:b6:88:4d:34:9f:7a:e4:
         9a:06:dd:dc:17:46:50:31:00:f9:4d:56:e3:c9:7e:8e:a5:6d:
         75:58:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:23:36 2026 by rpki-client