Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIAOCHIAO/0/3130332e3134382e3134362e302f32332d3234203d3e2037353336.roa
File:                     3130332e3134382e3134362e302f32332d3234203d3e2037353336.roa (raw, json)
Hash identifier:          mctWeOsWYbt3qvVjKSVdhyoHazDOUitkMfyf1eWK4Cg=
Subject key identifier:   1A:6A:EA:5D:CB:65:89:82:CD:DE:46:28:E0:0C:9F:87:B7:AC:C4:31
Certificate issuer:       /CN=46A39033600C06F3DE67312DA7FF15D05D5552A2
Certificate serial:       2C84841E9572CFAF9CA84BC5F420F5F4A7DC72D9
Authority key identifier: 46:A3:90:33:60:0C:06:F3:DE:67:31:2D:A7:FF:15:D0:5D:55:52:A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/3130332e3134382e3134362e302f32332d3234203d3e2037353336.roa
Signing time:             Mon 11 May 2026 17:57:07 +0000
ROA not before:           Mon 11 May 2026 17:52:07 +0000
ROA not after:            Mon 10 May 2027 17:57:07 +0000
asID:                     7536
IP address blocks:        103.148.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.crl
                          rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:84:84:1e:95:72:cf:af:9c:a8:4b:c5:f4:20:f5:f4:a7:dc:72:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A39033600C06F3DE67312DA7FF15D05D5552A2
        Validity
            Not Before: May 11 17:52:07 2026 GMT
            Not After : May 10 17:57:07 2027 GMT
        Subject: CN=1A6AEA5DCB658982CDDE4628E00C9F87B7ACC431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:45:35:68:d8:48:99:4e:72:09:2f:0e:8e:25:
                    40:b8:9f:80:81:c3:f6:63:0c:b8:e7:55:c6:ed:3d:
                    f6:fe:76:08:c8:7f:6b:72:36:16:7a:84:d4:8e:8a:
                    bf:d6:5e:b0:7b:a4:2f:d2:bd:4d:7c:6e:80:e7:21:
                    0a:85:ce:77:b5:d6:88:2b:f1:b0:99:53:23:d9:c0:
                    ba:c7:66:13:58:02:9b:76:be:15:91:49:f4:b5:9e:
                    10:73:78:38:c7:85:0c:43:d5:2c:b7:03:b1:95:d1:
                    12:38:60:69:5d:e7:d0:84:23:0c:14:0a:0a:91:84:
                    41:97:eb:8c:c4:1f:14:b1:a9:e8:18:30:0f:83:e0:
                    f4:9b:15:7f:2d:42:c4:5f:8e:6a:c1:a6:0a:1d:94:
                    41:91:09:45:e3:1f:ed:3f:78:54:9a:2c:ab:59:f4:
                    e7:b7:4d:22:f1:8f:8a:7d:ae:64:ae:11:e4:c9:d0:
                    84:47:ff:d0:37:00:02:0f:f2:f4:32:28:4f:35:21:
                    e2:68:e9:5c:56:12:55:de:cd:c1:c9:4e:7b:9e:1f:
                    32:c3:79:f1:81:60:1f:23:91:7e:75:e4:f7:51:bc:
                    cb:3d:ad:6d:93:8d:b7:d0:30:e4:78:9a:8f:5d:06:
                    2d:2e:2b:3f:af:97:0e:99:d5:4f:8b:da:35:ec:77:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6A:EA:5D:CB:65:89:82:CD:DE:46:28:E0:0C:9F:87:B7:AC:C4:31
            X509v3 Authority Key Identifier:
                keyid:46:A3:90:33:60:0C:06:F3:DE:67:31:2D:A7:FF:15:D0:5D:55:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/46A39033600C06F3DE67312DA7FF15D05D5552A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46A39033600C06F3DE67312DA7FF15D05D5552A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIAOCHIAO/0/3130332e3134382e3134362e302f32332d3234203d3e2037353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:b6:73:a7:f3:1c:c6:4d:8c:32:8a:92:25:a0:e8:c0:ea:be:
         29:c8:1f:6f:1c:3c:24:ae:58:dc:69:c5:f0:b3:b7:a9:02:79:
         f4:9e:8b:cf:0b:e4:f5:ce:ad:24:54:b3:0a:96:06:33:89:46:
         f5:6e:50:e6:81:49:24:c7:11:60:1d:4e:0a:9c:2e:07:52:35:
         e5:b7:67:6b:c6:ed:97:85:55:5a:8f:22:ff:5d:46:e5:3f:4b:
         90:73:21:3c:33:fc:2c:df:e0:99:4d:6e:7f:fd:59:88:bb:02:
         f2:3d:da:6b:45:c9:59:6a:45:ad:91:ac:9e:c7:0a:3a:3f:dc:
         04:9d:37:6c:ab:17:2f:3d:c7:64:d2:57:a5:a6:0d:ef:a6:ca:
         8a:54:2a:af:d5:a3:0c:06:27:c0:93:d4:68:47:c7:e0:e0:f4:
         68:98:58:72:e2:ae:fd:dc:2a:e4:9f:10:45:a4:b8:07:93:8c:
         29:a9:7e:bb:bc:7c:c1:b1:e4:68:13:90:0d:d9:e7:e7:a0:9b:
         5d:99:76:eb:2d:d4:42:c7:ef:7e:f8:1b:f0:f6:aa:9e:90:34:
         ca:aa:b7:e0:82:d9:d0:5d:38:d3:3c:0d:ba:ab:3c:fd:2a:42:
         14:e6:96:36:52:2e:1e:80:df:1a:6b:27:a2:90:60:c0:fa:4a:
         38:9b:36:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:55 2026 by rpki-client