Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa
File:                     3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa (raw, json)
Hash identifier:          O5tH6+rHeF/CzyKscBEL7/Pd/t5Mq5TOsy/0NVKpiIo=
Subject key identifier:   A0:72:02:BE:A0:35:E6:6A:D1:B8:14:69:86:74:4C:52:98:BC:A3:6C
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       0DDB1A09E8AAA0724895006504E5AA48F34FFF16
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa
Signing time:             Mon 11 May 2026 17:04:29 +0000
ROA not before:           Mon 11 May 2026 16:59:29 +0000
ROA not after:            Mon 10 May 2027 17:04:29 +0000
asID:                     131611
IP address blocks:        121.50.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:db:1a:09:e8:aa:a0:72:48:95:00:65:04:e5:aa:48:f3:4f:ff:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 16:59:29 2026 GMT
            Not After : May 10 17:04:29 2027 GMT
        Subject: CN=A07202BEA035E66AD1B8146986744C5298BCA36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:20:5c:c3:76:e7:20:ce:8e:2d:61:7c:7f:bf:
                    d3:d0:06:3d:c2:78:fd:a2:42:d9:19:1d:45:c8:df:
                    ab:e5:f9:5a:01:bd:dc:0a:46:a9:7f:ec:00:c1:4f:
                    07:0c:e0:f8:38:48:24:4f:7e:e5:7a:1a:70:79:d5:
                    28:96:b0:8f:3e:5d:6c:dd:21:a1:85:4f:50:14:2f:
                    5a:82:c9:84:00:44:b2:5e:26:68:d9:29:44:52:f5:
                    d3:f0:cc:d2:63:0c:50:71:35:d1:cd:52:1e:98:b6:
                    db:c0:81:54:2b:d9:bf:20:7a:4d:86:fd:e3:2a:77:
                    a8:8c:35:7f:6b:f6:be:df:07:c9:9b:fc:7f:0c:2e:
                    0d:1c:eb:0e:3d:10:d0:b3:b7:74:4b:2b:88:58:7c:
                    aa:37:dc:93:a9:ca:5c:0c:25:e9:d7:e8:49:bf:93:
                    93:e4:00:ca:a4:1f:2f:e1:7b:cc:0d:b3:74:ad:2a:
                    89:37:b7:49:af:ec:f4:e5:ec:c9:8e:8a:99:ed:82:
                    0b:4f:be:b3:f0:11:25:83:e5:23:30:e4:27:47:28:
                    b7:7f:eb:f3:a7:a2:f6:c2:41:43:31:8b:5c:e0:fe:
                    29:78:65:ba:3e:9f:3b:da:fd:4d:52:ba:bf:8b:f0:
                    6e:b9:84:67:7c:ee:57:23:03:f2:f0:38:8e:05:9f:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:72:02:BE:A0:35:E6:6A:D1:B8:14:69:86:74:4C:52:98:BC:A3:6C
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3132312e35302e3138342e302f32322d3234203d3e20313331363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ee:81:4e:97:73:e1:53:05:3a:e2:5e:a7:57:6d:12:41:d3:c4:
         cc:41:57:31:d4:ff:2b:20:f3:ae:41:59:01:ae:fb:4c:55:66:
         5c:1b:8d:bb:3f:e6:6b:4c:da:34:44:ad:58:09:9b:98:32:49:
         c5:a2:15:1f:47:34:db:48:fa:b2:8c:3d:4c:1d:91:66:ce:93:
         4a:34:9a:91:5f:14:05:2e:53:de:4e:fe:98:c5:26:97:d2:7a:
         52:b0:29:7f:7f:6b:7d:a8:41:86:e0:1b:bf:dc:d6:a0:c2:3f:
         7a:1e:fb:69:d0:99:99:9c:f7:de:0a:d8:01:e1:d6:87:7a:0c:
         46:1f:5b:aa:aa:f3:a0:c7:10:95:c6:0f:d1:9c:18:44:21:05:
         ba:9b:6d:2e:33:c1:43:80:77:c7:c9:b9:ad:18:aa:d9:eb:91:
         2c:72:e5:78:30:fc:14:f3:ea:d5:e8:b5:fc:e5:1d:2a:2d:02:
         81:5b:04:c4:77:fb:22:c1:35:cf:3c:ec:1e:8d:5c:5c:40:60:
         bf:04:34:e0:7f:5e:a6:0f:fa:72:df:2d:7c:bf:77:ab:da:8a:
         20:41:0c:52:f6:0c:a6:e2:25:08:ea:4a:d1:1f:f8:96:ce:b6:
         3e:db:2d:d9:34:54:23:89:68:1f:01:6a:9f:f8:a1:72:2b:86:
         55:41:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:56 2026 by rpki-client