Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3232342e302f31392d3234203d3e203138303436.roa
File:                     3130312e302e3232342e302f31392d3234203d3e203138303436.roa (raw, json)
Hash identifier:          k/+ga+vpCPibtMDN9kfqTV2mcmYqsE3mkZm7QgeNBac=
Subject key identifier:   21:E9:E2:42:76:9B:97:B0:12:D6:D3:3C:03:E2:FA:92:28:34:45:4C
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       45417278CA2299C6355D37A85F84D7A5709DCADF
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3232342e302f31392d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:05:56 +0000
ROA not before:           Mon 11 May 2026 17:00:56 +0000
ROA not after:            Mon 10 May 2027 17:05:56 +0000
asID:                     18046
IP address blocks:        101.0.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:41:72:78:ca:22:99:c6:35:5d:37:a8:5f:84:d7:a5:70:9d:ca:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 17:00:56 2026 GMT
            Not After : May 10 17:05:56 2027 GMT
        Subject: CN=21E9E242769B97B012D6D33C03E2FA922834454C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:13:be:70:92:b4:06:cf:13:f1:79:11:12:
                    c7:d1:ec:52:17:3f:32:9b:c6:e7:cc:a1:25:16:aa:
                    6a:e4:74:24:b9:2e:bb:e1:8e:ec:78:f9:d6:14:54:
                    04:eb:a1:58:9c:12:0d:be:19:92:25:a7:c2:4c:f8:
                    24:fe:3c:ee:e8:ac:22:57:7b:b0:38:06:c4:8f:f5:
                    f5:3b:ad:db:04:e6:e5:20:36:0b:c3:e3:0e:e2:28:
                    d7:3e:c3:9b:18:06:93:f5:04:8d:05:84:3d:87:d1:
                    23:4a:7d:5c:c8:ee:e4:49:5f:33:b9:d7:18:11:30:
                    eb:80:77:5b:8a:da:cf:eb:85:bf:ae:52:8e:89:92:
                    35:d4:06:d4:9f:be:93:4f:cb:42:49:ae:fd:85:3a:
                    7c:28:7f:17:9e:27:95:be:46:f4:53:b5:ae:2b:a2:
                    89:08:9b:b9:89:53:74:cf:b2:9d:59:dc:18:9d:46:
                    59:de:b8:6d:57:d9:97:75:15:71:6c:6c:98:05:0a:
                    4a:a7:46:d8:5e:2b:4a:87:6f:87:00:7a:b6:76:7c:
                    cd:62:9f:37:9e:86:2d:ab:30:3f:73:95:77:cb:4d:
                    94:38:f5:00:14:64:68:8f:ea:4f:73:fb:94:45:49:
                    e9:8f:97:02:6e:6d:b1:ad:c1:50:cd:33:ae:7c:9a:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:E2:42:76:9B:97:B0:12:D6:D3:3C:03:E2:FA:92:28:34:45:4C
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3232342e302f31392d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:f4:52:21:e2:8b:3f:a8:22:a5:57:c4:2a:1f:26:37:23:2f:
         19:67:d7:7c:b1:ca:63:f9:9d:55:d0:99:68:ca:ea:39:9f:32:
         58:18:17:81:5e:46:84:16:93:19:44:43:97:5a:89:d6:eb:e4:
         b2:ac:d9:87:54:35:67:1f:02:17:96:7f:05:86:bb:06:cf:e3:
         25:59:37:79:76:e6:8f:9c:ca:7b:91:c8:70:b1:73:9d:91:4d:
         86:90:8b:8e:73:a5:0b:38:b9:a7:f7:82:96:6b:90:ed:33:8b:
         a2:cd:89:e6:e7:96:ad:82:cd:ae:5d:73:d5:2a:ae:e9:d4:06:
         2b:68:3e:2a:6a:78:91:77:7f:cf:5a:87:a5:99:7b:bc:4c:15:
         eb:b7:3a:20:0a:46:49:52:65:9c:1a:47:fe:c6:d4:b6:18:1c:
         29:52:25:52:d4:f3:60:8c:84:1c:b9:1a:56:1c:4c:8b:9d:a7:
         73:1a:31:1b:02:43:7a:b6:bb:a9:5d:3e:59:15:27:54:d6:6d:
         4a:e9:2c:c2:3b:84:b2:81:96:6e:31:a7:48:4a:f8:d2:5d:24:
         0e:9a:b3:98:a8:da:da:7c:b2:53:75:42:23:68:bf:91:91:20:
         51:c9:0a:8a:b3:b3:7f:27:63:ee:ea:4e:be:4a:1d:10:ea:a0:
         92:f2:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:44 2026 by rpki-client