Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa
File:                     3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier:          UUvZcZF1n2KebH1VxdmjDiegAC00F4y9dKmC0BIQVng=
Subject key identifier:   33:41:DC:DC:EB:77:2B:C6:E4:72:07:55:69:A5:E6:A7:60:6B:ED:33
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       297DA0C46BF8EB28CFA8E88D895A760EA9218CAE
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:05:54 +0000
ROA not before:           Mon 11 May 2026 17:00:54 +0000
ROA not after:            Mon 10 May 2027 17:05:54 +0000
asID:                     18046
IP address blocks:        103.234.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7d:a0:c4:6b:f8:eb:28:cf:a8:e8:8d:89:5a:76:0e:a9:21:8c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 17:00:54 2026 GMT
            Not After : May 10 17:05:54 2027 GMT
        Subject: CN=3341DCDCEB772BC6E472075569A5E6A7606BED33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:4c:87:aa:e1:8a:d7:01:8e:eb:26:f0:95:
                    e1:08:af:27:10:e5:8e:e7:eb:02:3c:dc:ad:e0:22:
                    c7:18:3d:ff:b5:6f:0d:7e:fc:c6:97:a8:f5:87:48:
                    cb:10:e9:56:d5:d7:a6:ef:63:a0:0f:22:b6:b2:5f:
                    75:4a:57:99:7c:49:7f:14:3f:0e:55:d6:cd:4f:5b:
                    b2:b5:22:d6:75:ba:a4:09:8c:1f:15:d4:a7:b9:da:
                    99:61:d9:36:1a:1d:54:9e:ea:33:49:cc:79:4f:95:
                    15:bf:76:5c:85:4a:8f:20:5f:f8:c5:22:22:d0:12:
                    d4:2f:5f:80:99:d3:5e:7d:32:2a:ea:53:f7:c9:3e:
                    fd:a6:a6:0a:a8:c4:cf:e6:47:8d:f0:b2:c2:cf:2a:
                    6e:8b:d7:04:e9:28:fb:33:fb:c2:8b:fc:42:fb:9c:
                    b5:17:f4:84:2a:f6:67:1b:d6:62:7a:85:b5:2a:58:
                    42:5b:b7:4a:99:81:c6:9a:61:1a:ad:b7:02:78:33:
                    2f:64:f4:06:7d:d6:ef:e9:3a:e1:c7:29:2c:e4:19:
                    07:9b:6c:ff:a7:a7:93:d5:4f:0a:74:2e:32:c8:93:
                    bc:ff:8f:f9:04:96:db:3f:9c:ca:06:7f:36:4d:6a:
                    b6:93:2b:27:28:c8:58:65:a1:a3:9d:72:99:b2:98:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:41:DC:DC:EB:77:2B:C6:E4:72:07:55:69:A5:E6:A7:60:6B:ED:33
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130332e3233342e3232342e302f32322d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:49:6f:95:bc:85:db:c0:50:1b:12:00:45:45:f2:02:d6:a9:
         a2:d8:89:c0:eb:84:2d:d4:56:45:4f:3a:4e:07:62:0f:0e:e2:
         75:14:84:0d:ad:16:26:21:7b:b9:22:c7:66:87:e7:99:3b:c2:
         b9:a8:3c:eb:b7:17:77:db:17:f8:6c:43:01:24:5c:f8:5d:da:
         e4:79:f9:00:36:39:fe:84:00:36:1f:49:d0:a6:90:ba:aa:17:
         33:5d:5d:ce:13:cb:9b:71:1e:d0:a1:d2:9a:e2:76:3b:d3:57:
         46:bf:21:e5:f1:5f:93:69:ad:62:d7:df:92:b2:45:37:2d:16:
         44:d5:f9:63:fb:3c:1e:ee:e7:98:5c:11:34:38:dd:7b:b3:e0:
         3e:a9:72:47:3d:4b:2c:7e:41:33:d6:ce:cd:e8:f9:1b:60:7a:
         a9:21:93:77:e3:6b:fe:22:ef:d2:01:ab:ec:41:44:20:2e:cc:
         d6:4c:14:bd:80:9b:06:73:38:65:a7:f4:b0:33:43:18:9b:07:
         c8:74:ee:59:1c:16:c1:13:03:5e:c7:4e:5b:e2:b7:54:8e:a2:
         65:5a:9f:ed:93:1b:44:bb:c0:ed:21:1c:6a:5c:93:f4:13:ce:
         37:dc:a6:0d:b4:50:80:0b:5f:a7:3d:a7:8b:22:e8:9e:f5:cd:
         37:5e:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:53 2026 by rpki-client