Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa
File:                     3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa (raw, json)
Hash identifier:          kLX8JWP5e8TfooxSrIQf/bTViGHZeimUz/lVy37AiIU=
Subject key identifier:   45:1C:4B:54:37:33:2D:DF:1A:2E:FA:9A:CA:22:11:EA:F5:3A:5F:69
Certificate issuer:       /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial:       6A4F10458E0C17671AB79396539623472385FF29
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa
Signing time:             Wed 12 Aug 2026 12:24:00 +0000
ROA not before:           Wed 12 Aug 2026 12:19:00 +0000
ROA not after:            Wed 11 Aug 2027 12:24:00 +0000
asID:                     38047
IP address blocks:        103.160.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
                          rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4f:10:45:8e:0c:17:67:1a:b7:93:96:53:96:23:47:23:85:ff:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
        Validity
            Not Before: Aug 12 12:19:00 2026 GMT
            Not After : Aug 11 12:24:00 2027 GMT
        Subject: CN=451C4B5437332DDF1A2EFA9ACA2211EAF53A5F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8f:e9:e8:8f:ad:62:75:66:a8:74:7e:e8:ad:
                    a5:24:f4:0c:cd:2e:2d:1e:3e:e2:a4:6a:94:43:20:
                    34:d8:23:8e:68:d2:53:7a:28:06:e1:e6:af:c3:11:
                    01:b2:f4:fb:01:f9:f8:8f:ef:3b:87:ae:c7:a9:bc:
                    a5:c1:2f:f5:20:ea:11:37:c5:ff:8b:02:a5:1c:16:
                    c5:10:14:c1:16:49:19:0c:02:a4:3f:84:1d:f0:d8:
                    de:4b:f4:3a:88:52:9c:7b:8c:9c:95:ad:6b:36:89:
                    7f:a8:19:6a:4d:32:83:44:b5:c6:cd:97:05:c0:a8:
                    81:ee:7c:b7:c2:ca:c2:6b:4f:95:6c:df:62:53:85:
                    18:46:b5:75:de:a7:05:98:56:f1:f7:ef:f8:fa:21:
                    7c:1b:11:62:d0:a9:d1:0b:a8:fb:58:1a:4c:9f:54:
                    f7:f8:12:ce:46:85:70:d7:2a:a8:7e:e8:df:67:05:
                    8a:70:26:da:63:cc:cd:35:d4:e7:bf:a5:12:bd:8c:
                    f6:1d:2b:b7:1f:3c:3e:52:ff:60:27:5e:19:94:37:
                    f0:16:fa:97:18:83:27:0d:87:c0:da:e3:74:1e:99:
                    fc:ae:2e:f5:70:80:b1:f0:7a:92:77:d8:6b:5b:d6:
                    91:da:bd:a7:25:d1:20:34:14:68:5d:55:93:9a:6d:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1C:4B:54:37:33:2D:DF:1A:2E:FA:9A:CA:22:11:EA:F5:3A:5F:69
            X509v3 Authority Key Identifier:
                keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:09:0b:00:68:16:90:5f:de:91:7b:6d:7d:95:96:c9:80:
         e7:51:1d:b0:8d:c5:0f:0b:07:7e:8a:23:34:c2:f2:a3:1f:46:
         72:c1:27:3e:71:21:30:2e:da:d9:da:c6:5f:a1:e0:85:14:62:
         a3:11:1d:25:0c:26:b1:0c:f1:7f:9f:bb:ec:66:94:b1:38:96:
         0a:cc:b4:a2:d4:e6:1e:d2:87:53:00:fa:23:7d:87:99:ef:7a:
         00:cc:35:3d:34:0c:18:5e:ab:c3:36:57:82:c3:4f:bf:7d:5f:
         49:24:07:5f:0b:cb:58:e2:42:85:d6:31:d7:1c:bd:98:73:1c:
         7e:4f:47:ea:17:b2:a9:ee:93:fa:2d:f4:8a:e5:7b:8f:ae:12:
         7c:c7:33:a0:5d:ba:d8:0f:01:5c:c4:24:fa:8b:a4:3b:a2:b0:
         e3:d0:14:c2:f9:2b:36:01:d9:27:f4:04:46:fe:f2:9b:ab:2f:
         52:50:20:92:07:ab:b6:79:42:e1:f4:0f:39:29:6a:a8:35:9d:
         21:1a:6d:ee:5d:4e:7b:d2:f0:ac:c1:61:dd:c8:58:bc:c8:da:
         c4:ae:77:73:06:e6:a1:0e:df:a0:d7:8b:f4:92:76:4f:99:fb:
         b6:d2:b6:29:dd:8a:37:72:ef:7a:64:7e:fb:18:70:54:44:11:
         63:01:e8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:12 2026 by rpki-client