Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa
File:                     3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa (raw, json)
Hash identifier:          /9BFFQzw0cKcAkYyhzrX90hfsn9yx3G5YlAAOT7vnaE=
Subject key identifier:   4A:72:FA:4F:10:5C:FE:76:AE:5A:D8:F4:D0:10:42:2D:17:B8:38:7F
Certificate issuer:       /CN=3BFFB675B95FCD73A993F3228774251092970E7B
Certificate serial:       5EF67D0A0D91E7E36E4888E49898453810305D74
Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa
Signing time:             Mon 11 May 2026 17:37:15 +0000
ROA not before:           Mon 11 May 2026 17:32:15 +0000
ROA not after:            Mon 10 May 2027 17:37:15 +0000
asID:                     208223
IP address blocks:        160.25.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl
                          rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f6:7d:0a:0d:91:e7:e3:6e:48:88:e4:98:98:45:38:10:30:5d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B
        Validity
            Not Before: May 11 17:32:15 2026 GMT
            Not After : May 10 17:37:15 2027 GMT
        Subject: CN=4A72FA4F105CFE76AE5AD8F4D010422D17B8387F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:fa:be:24:e4:21:8d:a7:74:68:3f:00:16:
                    46:7e:99:97:dc:69:93:a9:70:b3:25:52:90:d4:28:
                    7b:43:14:79:c6:43:e5:44:ea:70:96:a5:52:68:ac:
                    c9:b6:4f:f1:3d:f5:95:18:2e:62:a0:6a:c4:0f:8d:
                    5f:d2:1c:1d:95:cc:94:89:94:de:6e:8b:59:61:d9:
                    7b:19:45:a2:94:7e:e8:ae:21:95:65:86:fa:ab:de:
                    46:62:20:2e:88:6b:ac:9a:27:e7:42:d2:09:71:48:
                    d9:a5:7b:f1:cc:7a:5c:bc:88:7a:00:38:96:bb:ee:
                    7e:e4:50:d1:3f:6e:6b:a8:e2:2b:9e:06:a4:75:9d:
                    33:52:13:4e:ae:95:4d:b0:4e:c3:0c:89:38:e7:f4:
                    bc:56:fe:96:a9:73:6d:44:f1:45:97:ff:7b:ae:d0:
                    2b:f5:ba:70:17:34:0a:39:98:01:c5:3d:25:cd:b5:
                    9d:2c:06:34:0e:9a:72:57:96:84:68:a7:ef:e8:8f:
                    eb:e5:65:90:1b:83:93:5a:a5:ea:0b:6e:bf:b9:98:
                    99:84:5e:c1:ce:a6:70:d3:ff:66:c7:1b:33:42:57:
                    f5:11:b9:bf:eb:6a:28:53:7a:41:57:00:b1:22:9f:
                    74:8c:9d:6f:72:a7:47:bd:bc:d2:82:eb:5d:27:a3:
                    67:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:72:FA:4F:10:5C:FE:76:AE:5A:D8:F4:D0:10:42:2D:17:B8:38:7F
            X509v3 Authority Key Identifier:
                keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130342e302f32342d3234203d3e20323038323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:35:70:b1:3b:96:2d:cc:24:c0:1e:eb:4e:08:25:45:54:39:
         e2:e5:4f:15:b5:c1:2a:5e:3f:3e:c8:72:1b:09:3a:fa:5e:a6:
         49:9f:47:53:c9:63:66:68:80:40:d6:ff:53:97:1c:1e:2a:97:
         05:fd:4f:3d:7b:a7:b4:6a:6a:fe:89:ac:4c:44:87:81:1d:52:
         32:27:94:21:1e:e2:82:ce:35:2d:d3:35:3e:32:5e:72:37:51:
         2d:0e:41:94:32:e2:d7:17:fd:46:19:2e:67:13:0d:68:17:d9:
         6e:82:3b:32:1c:12:6a:b2:90:c2:9b:29:23:0f:89:42:e5:ab:
         e2:b7:dc:5e:4c:db:6b:7f:cb:88:97:ec:2d:a2:de:2a:86:45:
         22:56:3b:f2:9c:3e:27:35:31:a8:9c:db:74:5c:ae:ed:f6:0b:
         2e:92:5a:66:0e:7b:bd:67:ed:27:fc:82:9f:6a:cc:09:00:7c:
         6c:3d:c7:39:2b:8e:3f:33:f3:9d:66:28:92:75:55:38:1b:20:
         b0:fb:c1:4f:16:a7:01:ca:1b:ad:95:ba:28:75:7a:a2:c4:d7:
         a8:fd:16:b8:bc:c3:5e:8b:c8:59:eb:fe:4b:99:9b:c1:62:cd:
         cc:55:1e:90:bb:c9:74:f2:9d:fd:a4:73:a8:65:47:19:99:1b:
         04:8a:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:29 2026 by rpki-client