Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCHENTEK/0/323430303a626561303a3a2f33322d3332203d3e203233343536.roa
File:                     323430303a626561303a3a2f33322d3332203d3e203233343536.roa (raw, json)
Hash identifier:          7EISQbTz08S8vCeQ9Io6cF/M5d2qZgpTRijYGhMKT8Q=
Subject key identifier:   37:26:BC:8B:82:B0:7D:8A:74:8B:05:A4:35:AB:3B:36:CE:61:D3:82
Certificate issuer:       /CN=540D5EB957E44D80783D8B880FD2A47A69077A24
Certificate serial:       2D06F678758CAFB0E8A62F794627C6F7042EEE16
Authority key identifier: 54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/323430303a626561303a3a2f33322d3332203d3e203233343536.roa
Signing time:             Mon 11 May 2026 17:58:33 +0000
ROA not before:           Mon 11 May 2026 17:53:33 +0000
ROA not after:            Mon 10 May 2027 17:58:33 +0000
asID:                     23456
IP address blocks:        2400:bea0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl
                          rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:06:f6:78:75:8c:af:b0:e8:a6:2f:79:46:27:c6:f7:04:2e:ee:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D5EB957E44D80783D8B880FD2A47A69077A24
        Validity
            Not Before: May 11 17:53:33 2026 GMT
            Not After : May 10 17:58:33 2027 GMT
        Subject: CN=3726BC8B82B07D8A748B05A435AB3B36CE61D382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:62:74:e6:79:ec:6a:84:6c:3e:1f:b8:a2:
                    ed:2f:dd:bf:04:c6:68:ab:8e:ae:19:33:93:44:67:
                    a8:a9:1c:73:72:e5:cd:e6:f9:b3:b5:d0:22:14:e8:
                    aa:7e:20:fa:76:4a:3c:b7:6d:96:6a:e6:56:6c:23:
                    21:a6:ea:43:12:42:06:db:05:27:15:d9:84:36:4d:
                    82:18:13:98:40:5e:1d:1c:a2:0c:c7:24:a5:41:ed:
                    d4:0c:d6:44:3e:69:cc:86:ee:b8:3f:31:fa:45:6a:
                    a7:71:fa:66:6a:4e:bc:1b:66:f8:a3:7e:a3:66:7b:
                    26:4b:84:8f:3c:76:33:18:a6:4f:88:f4:7d:b4:31:
                    14:c8:32:78:0f:2b:c7:99:88:b4:a3:9b:14:87:23:
                    1f:5d:15:6b:e5:57:be:cb:a0:0b:e9:30:5b:86:7f:
                    ef:23:c0:92:3a:13:84:34:29:e4:01:53:4e:b1:06:
                    77:7d:4e:a9:f7:bb:c9:2a:37:0d:5d:82:35:0a:fb:
                    5c:08:55:3a:e4:fb:fc:32:22:cb:69:fb:a1:de:6e:
                    df:ce:71:8f:6a:45:9a:b6:a6:ed:d9:95:6b:8b:71:
                    24:3b:21:01:d4:df:8c:69:cc:9a:b0:ce:60:97:32:
                    2c:ff:9d:a0:24:5e:6b:11:94:5f:4c:40:a6:68:3a:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:26:BC:8B:82:B0:7D:8A:74:8B:05:A4:35:AB:3B:36:CE:61:D3:82
            X509v3 Authority Key Identifier:
                keyid:54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/323430303a626561303a3a2f33322d3332203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:bea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:5c:f0:20:ad:20:c6:36:8b:21:1f:4c:c8:cc:bd:60:35:
         29:a5:9b:8e:8f:d6:49:0c:a3:0e:2f:ff:6d:7c:25:8b:ee:e9:
         e9:9a:11:b5:b4:45:80:a0:7c:85:d9:0e:9a:fb:0e:28:92:03:
         0d:27:66:e4:f1:84:61:c2:e2:9c:b5:cc:21:31:cd:a2:4b:4f:
         c7:31:08:ce:15:49:5f:79:8e:63:74:bd:63:1a:18:cc:66:d5:
         2f:11:f6:47:74:c3:2e:5c:44:a3:dc:a0:c7:35:ee:db:c3:2f:
         eb:41:11:f8:f1:09:e7:9d:5a:bc:90:39:ff:09:7c:09:b5:39:
         32:40:8c:86:06:f4:f6:3a:2e:02:17:d6:6d:c9:47:9c:09:a4:
         03:80:2c:1a:43:98:7e:e5:e8:cb:f6:62:c1:f2:96:6a:15:73:
         e9:19:0f:b9:ca:3d:ad:7d:92:bb:89:f0:78:12:56:42:46:50:
         b0:aa:0e:77:de:3b:70:5d:db:bb:ab:59:a2:c2:a9:5a:93:04:
         c3:e2:fc:20:89:ea:98:bf:51:4a:eb:f1:37:f8:0b:cd:b5:0c:
         97:db:46:92:3b:8c:ba:43:5b:a0:79:6c:c7:0a:61:57:07:9f:
         9c:6d:39:a6:1e:7e:6d:32:98:37:e2:1d:c0:1d:af:cc:b1:17:
         52:8b:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:47 2026 by rpki-client