Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa
File:                     3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa (raw, json)
Hash identifier:          DVa6lflyFCE3PWvV287KtfNHuZRpwCib43B9QlWb9Mo=
Subject key identifier:   1F:52:6D:A9:B8:F9:38:13:C9:10:34:D9:69:F0:1D:44:D0:51:96:3C
Certificate issuer:       /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial:       27328EBA5232BA06FE32D19D7A3F25BF9A64245F
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa
Signing time:             Tue 11 Aug 2026 09:04:02 +0000
ROA not before:           Tue 11 Aug 2026 08:59:02 +0000
ROA not after:            Tue 10 Aug 2027 09:04:02 +0000
asID:                     38047
IP address blocks:        103.160.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
                          rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:32:8e:ba:52:32:ba:06:fe:32:d1:9d:7a:3f:25:bf:9a:64:24:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
        Validity
            Not Before: Aug 11 08:59:02 2026 GMT
            Not After : Aug 10 09:04:02 2027 GMT
        Subject: CN=1F526DA9B8F93813C91034D969F01D44D051963C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:02:09:a5:73:39:81:be:59:19:c9:d1:e8:
                    92:3a:cb:a8:ea:62:b3:64:fb:78:ab:b6:a9:28:e1:
                    fb:3d:69:f8:7f:b0:1b:78:5c:95:b9:5b:e2:02:1f:
                    40:6b:ff:6e:18:ae:15:a3:2b:e2:33:d4:79:07:b1:
                    07:f5:57:8c:4d:4b:96:e9:34:b1:02:3b:2d:08:10:
                    a9:86:3a:81:25:d7:09:59:fb:be:1c:6b:78:10:e3:
                    7c:e6:f6:c5:7c:e3:52:69:2c:7b:93:97:16:51:0f:
                    2d:b7:0d:40:2a:f8:66:74:58:08:1f:b5:65:e2:89:
                    72:74:d1:d6:18:4c:d1:93:c2:72:50:15:53:2c:07:
                    b8:b0:70:a0:bd:be:eb:fd:29:36:6a:ee:8d:d2:a5:
                    23:e4:5d:b3:9d:d2:fd:0b:0e:fa:44:ff:07:13:ce:
                    32:c4:70:be:e5:47:a7:04:0c:d9:2b:65:d3:0f:ee:
                    c3:c8:bf:38:22:5e:d9:19:67:1c:8e:00:f4:5e:99:
                    ad:d4:b2:35:e3:6d:49:8b:05:49:35:4e:f3:c6:00:
                    5c:92:6c:49:e6:14:81:74:f5:b7:2e:d5:cc:e1:0f:
                    0e:ab:51:35:e7:c2:ff:b7:c1:52:99:0b:23:9a:e6:
                    cd:ce:e0:c4:b2:40:d1:92:f1:a9:65:81:09:cd:79:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:52:6D:A9:B8:F9:38:13:C9:10:34:D9:69:F0:1D:44:D0:51:96:3C
            X509v3 Authority Key Identifier:
                keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:70:4b:bb:49:2d:80:99:fd:d0:ae:bb:d3:cd:8a:45:af:f9:
         47:71:5a:65:aa:a9:66:3b:d6:e1:89:db:c8:c1:5a:c7:37:8a:
         c1:5b:1a:e7:df:ef:78:ae:04:c5:2f:47:0d:a6:fc:46:e2:0f:
         7c:77:71:34:f0:15:39:c0:6b:d6:2a:50:9c:7e:91:cd:0e:79:
         9f:e7:d2:31:d1:d0:da:ac:7e:8d:12:83:dc:f3:aa:16:f2:76:
         ad:c3:7d:96:e9:7d:aa:ae:49:d1:a5:62:3e:62:38:81:0d:25:
         40:f3:eb:44:68:f0:71:90:73:ec:7f:c0:ad:f0:0a:9e:e3:bc:
         81:60:d5:b1:5e:6a:e4:14:6b:27:cc:00:de:b3:69:9d:b6:90:
         b3:04:9e:77:a3:0c:68:e5:3a:f9:97:d4:0b:3a:4f:c5:78:53:
         80:ea:25:34:67:fa:9f:0a:e4:93:90:e8:27:dc:51:f6:cb:ff:
         42:02:26:0c:81:bd:6a:6a:d4:51:dd:fd:5e:24:bb:5d:aa:4d:
         d9:4c:d5:7e:01:f4:b3:09:8f:29:3d:28:c0:fd:ea:0e:47:0c:
         ec:dc:70:7d:c1:e0:fd:27:ec:44:b6:57:6f:fa:36:75:1b:ae:
         90:80:df:d2:b4:65:d2:b6:63:cb:83:92:6d:e2:08:55:33:62:
         37:ff:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:04 2026 by rpki-client