Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3138332e37392e302f32342d3234203d3e203338303437.roa
File:                     3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (raw, json)
Hash identifier:          LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=
Subject key identifier:   1C:22:BF:49:14:33:52:F2:54:69:80:AF:04:06:00:84:C3:C4:5B:8D
Certificate issuer:       /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial:       678C1DBBE0CB0AD6D73FB1878DDD819C309440B6
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3138332e37392e302f32342d3234203d3e203338303437.roa
Signing time:             Mon 11 May 2026 17:15:32 +0000
ROA not before:           Mon 11 May 2026 17:10:32 +0000
ROA not after:            Mon 10 May 2027 17:15:32 +0000
asID:                     38047
IP address blocks:        103.183.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
                          rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:8c:1d:bb:e0:cb:0a:d6:d7:3f:b1:87:8d:dd:81:9c:30:94:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
        Validity
            Not Before: May 11 17:10:32 2026 GMT
            Not After : May 10 17:15:32 2027 GMT
        Subject: CN=1C22BF49143352F2546980AF04060084C3C45B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:c8:c5:9c:b7:97:a4:b2:66:fd:ca:94:30:
                    e9:4f:34:cb:6d:c2:6f:fd:1c:79:a1:05:31:7c:1d:
                    2f:f8:eb:ce:77:ee:7c:7d:6c:54:a6:d6:62:5a:3d:
                    ef:a7:33:d4:ee:cc:33:b0:d6:17:bf:67:93:d3:58:
                    54:13:35:0f:f5:6a:38:b4:7a:88:f5:8d:99:c0:3d:
                    06:06:23:62:35:7a:28:d7:bb:8d:63:ca:87:6f:8c:
                    07:63:66:54:8c:97:2c:b4:6c:15:9b:8f:e5:db:7d:
                    8c:b0:b6:61:a1:5a:0a:9a:c4:3c:8c:a3:2d:52:dd:
                    0e:64:91:7e:79:64:43:c7:21:25:12:71:70:fd:ad:
                    e1:f1:14:d6:63:f8:41:36:d7:8d:b0:c0:db:bc:19:
                    a7:4b:36:bc:b7:d6:c0:82:5e:cb:4b:d7:b0:6b:76:
                    ce:e9:8d:d5:76:c3:2e:d6:3c:f0:f5:36:ac:f9:3a:
                    11:7d:48:4e:e1:06:57:c5:58:8d:16:e0:44:ff:61:
                    0e:45:79:53:7a:ab:d3:ed:7a:01:f5:e4:12:0e:94:
                    5b:21:21:b7:df:a4:50:50:e5:2e:95:e2:62:98:c9:
                    95:21:70:e0:2b:c3:cd:c1:07:1c:79:66:66:5d:1f:
                    69:64:61:e1:48:10:77:6f:31:4a:22:5e:6c:0a:44:
                    cb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:22:BF:49:14:33:52:F2:54:69:80:AF:04:06:00:84:C3:C4:5B:8D
            X509v3 Authority Key Identifier:
                keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/3130332e3138332e37392e302f32342d3234203d3e203338303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6e:dc:13:03:ac:35:1b:aa:f6:14:b2:8b:20:7b:b4:7e:bc:
         8c:0d:08:05:5b:b5:d5:7f:85:dc:0a:5a:6e:7d:f1:a0:54:9e:
         75:68:b5:d1:a2:27:db:37:f6:99:40:87:90:d6:73:2c:3c:7e:
         c9:45:ab:c2:68:cb:89:e9:87:28:9a:73:c5:7c:40:22:7a:1f:
         96:7b:2e:3e:b9:c7:2c:cb:ac:6e:30:76:bf:ad:04:ad:53:92:
         87:fc:b2:a2:3d:0f:ce:97:f5:7f:35:90:83:be:18:20:1f:ea:
         a5:97:25:a2:ce:1c:22:f9:e0:9c:ad:9e:93:d0:ad:94:f2:f1:
         b1:da:0e:3f:15:0a:7a:10:5c:ef:44:5f:c0:4a:22:2b:f6:a9:
         fb:91:25:dd:67:53:37:6b:7d:96:70:d8:5f:7a:6f:1c:7d:4f:
         18:f9:ed:df:07:79:70:00:35:c3:d5:a1:68:a1:dd:2d:3d:94:
         24:16:33:3f:09:ad:8c:45:a9:8a:3a:87:37:37:c9:3e:f3:0c:
         d4:34:fb:99:d5:6c:02:bd:df:61:0d:ae:50:50:0f:76:34:0b:
         07:e5:9a:ea:92:35:ef:6d:d3:14:0b:20:0e:a5:0a:d7:08:6b:
         ea:3d:bc:96:d7:2f:b0:de:ac:3f:e4:f2:70:b9:72:f3:7f:b6:
         89:f0:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:32 2026 by rpki-client