Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa
File:                     3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (raw, json)
Hash identifier:          I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=
Subject key identifier:   9D:B7:B4:B9:39:27:16:55:BA:4D:46:57:33:90:A6:05:84:84:03:C9
Certificate issuer:       /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Certificate serial:       1F7ADB205944FC92F751FB8624BD7C90F6C370FD
Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa
Signing time:             Mon 11 May 2026 17:38:59 +0000
ROA not before:           Mon 11 May 2026 17:33:59 +0000
ROA not after:            Mon 10 May 2027 17:38:59 +0000
asID:                     152615
IP address blocks:        160.187.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl
                          rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7a:db:20:59:44:fc:92:f7:51:fb:86:24:bd:7c:90:f6:c3:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
        Validity
            Not Before: May 11 17:33:59 2026 GMT
            Not After : May 10 17:38:59 2027 GMT
        Subject: CN=9DB7B4B939271655BA4D46573390A605848403C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:ed:f4:70:a5:2b:bf:f0:58:96:f6:79:84:
                    db:84:c3:e2:3a:fb:75:11:53:ae:69:dc:85:98:7a:
                    5d:87:8a:e9:9d:a5:9d:3a:18:8c:2d:9a:18:ab:70:
                    58:1b:28:6f:c3:b0:70:03:80:69:88:28:c0:6c:a6:
                    31:f4:81:db:96:6c:12:66:38:53:2d:19:6a:92:b9:
                    7c:47:51:ac:c3:bd:d3:9d:6e:70:75:7c:40:cb:5d:
                    6d:38:c3:94:aa:4a:b2:8f:d8:7b:56:65:bc:45:bd:
                    f4:d7:9c:b3:0e:a0:3d:4e:1b:63:f7:af:38:96:98:
                    0b:6e:dc:d2:11:a2:58:23:cc:c0:2b:1a:de:1d:db:
                    21:6e:c6:d4:02:75:09:d3:60:1a:b6:d8:d7:cf:ab:
                    2f:12:0f:74:4f:f7:18:4c:b3:9d:3c:10:c9:89:2f:
                    a1:36:ff:2a:e8:34:09:c1:2f:79:f3:b7:ef:cc:cc:
                    b6:6b:e7:ed:85:46:73:35:b6:7b:e8:7c:6c:1a:19:
                    5a:ad:c5:37:57:a7:d9:de:18:db:c7:68:21:42:96:
                    8c:39:4e:68:99:a8:2a:fb:85:cd:52:38:37:ef:1c:
                    be:6b:61:45:e9:99:6f:04:74:bb:a5:73:19:8c:ec:
                    fc:27:dc:e6:8c:4e:05:32:85:eb:f0:21:33:5f:e7:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:B4:B9:39:27:16:55:BA:4D:46:57:33:90:A6:05:84:84:03:C9
            X509v3 Authority Key Identifier:
                keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:f0:fd:60:a1:8e:2a:0e:1c:3a:1c:3a:bc:58:6d:a7:fb:
         40:b8:ec:f7:f2:2d:b7:1e:f3:1e:e5:19:d6:50:7c:fd:0e:11:
         ab:f7:b1:0d:dd:75:2f:fe:ed:97:35:25:5c:a9:2e:61:ac:f8:
         04:87:5c:c1:26:eb:45:f9:08:ff:fb:88:d0:39:2b:52:23:77:
         16:fb:dd:0c:00:c2:03:d4:2b:f4:9f:dc:59:c3:38:56:10:7f:
         fd:e6:7d:02:52:e5:8d:16:67:b9:6c:bd:68:bc:40:76:4a:bb:
         1e:0b:9a:44:0e:3e:9a:6a:ac:be:da:b1:b4:3f:e3:f4:bd:5a:
         26:28:d5:6f:e2:5f:f0:b6:b5:25:fc:e7:d9:cf:06:00:47:45:
         ae:2e:3e:3e:87:f0:f6:d8:24:f5:5e:2b:ea:d5:dc:a9:b4:d5:
         4e:37:66:df:eb:7b:12:54:c7:e3:41:86:8a:70:5f:6d:0f:e7:
         99:cb:24:69:08:14:3c:ff:c0:74:4e:b5:f5:8f:a0:58:13:f4:
         0a:d2:d4:ac:c4:b5:c7:26:1e:6a:8e:36:04:ea:f1:19:c3:84:
         6e:07:bf:1f:c3:1b:5a:c9:26:2e:f8:57:d2:25:3f:27:93:ea:
         ac:2c:c2:9f:b4:43:31:d6:d8:e8:19:cb:f5:34:ca:a0:03:ad:
         61:bb:97:30
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUH3rbIFlE/JL3UfuGJL18kPbDcP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0NjU0MzIyQUNE
RkNBMzQwNzAeFw0yNjA1MTExNzMzNTlaFw0yNzA1MTAxNzM4NTlaMDMxMTAvBgNV
BAMTKDlEQjdCNEI5MzkyNzE2NTVCQTRENDY1NzMzOTBBNjA1ODQ4NDAzQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2e30cKUrv/BYlvZ5hNuEw+I6
+3URU65p3IWYel2HiumdpZ06GIwtmhircFgbKG/DsHADgGmIKMBspjH0gduWbBJm
OFMtGWqSuXxHUazDvdOdbnB1fEDLXW04w5SqSrKP2HtWZbxFvfTXnLMOoD1OG2P3
rziWmAtu3NIRolgjzMArGt4d2yFuxtQCdQnTYBq22NfPqy8SD3RP9xhMs508EMmJ
L6E2/yroNAnBL3nzt+/MzLZr5+2FRnM1tnvofGwaGVqtxTdXp9neGNvHaCFClow5
TmiZqCr7hc1SODfvHL5rYUXpmW8EdLulcxmM7Pwn3OaMTgUyhevwITNf5zoRAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUnbe0uTknFlW6TUZXM5CmBYSEA8kwHwYDVR0j
BBgwFoAUKOH9A8iwQKmHSpDUZUMirN/KNAcwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVTU1Z
VEVDSC8xLzI4RTFGRDAzQzhCMDQwQTk4NzRBOTBENDY1NDMyMkFDREZDQTM0MDcu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzAvMjhFMUZEMDNDOEIwNDBBOTg3NEE5MEQ0
NjU0MzIyQUNERkNBMzQwNy5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcw
C4ZocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSFVNTVlURUNILzEvMzEz
NjMwMmUzMTM4MzcyZTMxMzkzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUz
MjM2MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAaC7xjANBgkqhkiG9w0BAQsFAAOCAQEACJ3w/WCh
jioOHDocOrxYbaf7QLjs9/Ittx7zHuUZ1lB8/Q4Rq/exDd11L/7tlzUlXKkuYaz4
BIdcwSbrRfkI//uI0DkrUiN3FvvdDADCA9Qr9J/cWcM4VhB//eZ9AlLljRZnuWy9
aLxAdkq7HguaRA4+mmqsvtqxtD/j9L1aJijVb+Jf8La1Jfzn2c8GAEdFri4+Pofw
9tgk9V4r6tXcqbTVTjdm3+t7ElTH40GGinBfbQ/nmcskaQgUPP/AdE619Y+gWBP0
CtLUrMS1xyYeao42BOrxGcOEbge/H8MbWskmLvhX0iU/J5PqrCzCn7RDMdbY6BnL
9TTKoAOtYbuXMA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:54:50 2026 by rpki-client