Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/1/3138372e37392e3232342e302f32302d3234203d3e203138303436.roa
File:                     3138372e37392e3232342e302f32302d3234203d3e203138303436.roa (raw, json)
Hash identifier:          a4aDafUrsQCLesXMzcaRXwN1eTgcdL6Z2dzVNg6CuYE=
Subject key identifier:   53:4E:EB:D6:54:C7:4E:2B:F2:E3:73:09:28:3B:00:DF:D1:D8:46:0D
Certificate issuer:       /CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
Certificate serial:       5BE8F7B288EEB8606DC730749406333E07E870CE
Authority key identifier: 95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/3138372e37392e3232342e302f32302d3234203d3e203138303436.roa
Signing time:             Tue 12 May 2026 09:51:16 +0000
ROA not before:           Tue 12 May 2026 09:46:16 +0000
ROA not after:            Tue 11 May 2027 09:51:16 +0000
asID:                     18046
IP address blocks:        187.79.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e8:f7:b2:88:ee:b8:60:6d:c7:30:74:94:06:33:3e:07:e8:70:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95B1A62479B36C1414FF17CE759F45E2E7E421A3
        Validity
            Not Before: May 12 09:46:16 2026 GMT
            Not After : May 11 09:51:16 2027 GMT
        Subject: CN=534EEBD654C74E2BF2E37309283B00DFD1D8460D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:a5:c0:75:3e:87:20:7e:13:5d:90:cf:ce:
                    cf:3a:2c:42:64:28:43:90:95:18:bd:e1:1c:6e:28:
                    80:df:19:f6:bc:99:ba:ce:b8:6f:7b:4f:5d:dd:c3:
                    a1:de:fb:a9:a7:ad:d4:b2:60:b8:12:99:e4:d9:94:
                    e9:5f:4a:ca:92:2b:9a:b8:82:52:6d:7f:cf:44:60:
                    be:51:59:8c:f9:2d:38:1e:cf:f8:17:fb:5d:0d:83:
                    5b:5c:00:2b:09:b4:37:64:1b:bb:ba:16:2c:13:d9:
                    6e:ae:49:c5:3e:d0:47:3b:03:04:bd:68:e6:99:ad:
                    a3:8f:73:cc:82:05:63:8e:0e:9e:07:70:d3:ed:98:
                    a5:fc:dd:b5:c6:2b:8b:0a:bd:8a:72:f7:e6:cb:8c:
                    67:74:cd:c6:6b:64:b4:b6:43:a3:ea:c0:c7:97:64:
                    10:db:09:91:d6:ae:df:ae:e6:dc:33:87:be:ab:e9:
                    32:68:ae:d6:4c:2c:14:49:39:2e:83:02:a3:cf:bf:
                    b2:e1:23:f4:71:d6:12:0e:98:b8:52:dd:ab:1b:04:
                    d2:d2:df:e2:cb:2f:4d:af:fc:c2:4d:ef:de:45:93:
                    35:c5:3d:27:ce:8f:98:ae:d7:40:f9:b3:11:ac:2b:
                    76:ec:b8:6a:2e:d1:bc:02:8b:6e:7e:1e:de:94:32:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:EB:D6:54:C7:4E:2B:F2:E3:73:09:28:3B:00:DF:D1:D8:46:0D
            X509v3 Authority Key Identifier:
                keyid:95:B1:A6:24:79:B3:6C:14:14:FF:17:CE:75:9F:45:E2:E7:E4:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/95B1A62479B36C1414FF17CE759F45E2E7E421A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/1/3138372e37392e3232342e302f32302d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.79.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:38:8f:b7:2d:33:7c:8b:9b:68:46:44:ed:aa:c3:1e:67:
         c2:52:6d:fe:be:2a:9e:ab:81:85:86:fa:42:3d:80:ca:ef:b4:
         52:f6:b9:d3:7d:f5:2e:d2:d4:17:46:68:c5:cb:cf:98:3b:1a:
         f6:0c:d7:21:49:cb:07:97:b5:0b:81:95:9e:9a:cc:5d:31:b8:
         59:93:35:e5:17:fe:9f:42:b9:26:7e:cb:59:f6:77:e3:6c:32:
         ab:5f:9f:79:19:20:a3:de:86:f9:21:db:5b:35:bc:86:eb:4f:
         ad:b7:d3:c5:43:58:2c:18:9c:97:a9:b9:db:32:14:8a:f9:c6:
         72:90:db:4e:65:76:6c:7b:a6:e7:f7:d3:a4:3e:e7:0f:1a:3e:
         48:fb:13:58:ae:92:b0:e5:ea:b0:41:cf:91:f1:98:14:43:30:
         8e:a9:b7:a5:b4:97:cd:84:7e:46:58:93:7c:53:48:e1:92:5c:
         88:26:90:3d:6d:b3:7d:0d:a0:24:ef:30:da:51:f6:72:9e:b2:
         dd:41:11:34:91:67:71:91:52:f4:7f:16:6e:ee:a6:a8:6d:ea:
         42:87:1d:a6:d9:69:bd:76:96:ad:2e:6e:0f:23:22:9e:ea:01:
         88:47:0e:40:d9:c9:1c:4a:90:8e:d7:89:58:19:40:aa:c0:d2:
         2b:1f:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:14 2026 by rpki-client