Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3232342e302f32312d3234203d3e203138303436.roa
File:                     3130312e302e3232342e302f32312d3234203d3e203138303436.roa (raw, json)
Hash identifier:          PDX/dgh26U+Jh027gHT88wZj3/PahBSo9laTaUqIs+A=
Subject key identifier:   4F:0E:A2:E4:3C:D4:24:78:24:CA:FD:E8:BB:31:D3:C7:1B:80:02:3E
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       065B883716E89D2DBE3BAA00AE3703C32C30FAF4
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3232342e302f32312d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:05:57 +0000
ROA not before:           Mon 11 May 2026 17:00:57 +0000
ROA not after:            Mon 10 May 2027 17:05:57 +0000
asID:                     18046
IP address blocks:        101.0.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5b:88:37:16:e8:9d:2d:be:3b:aa:00:ae:37:03:c3:2c:30:fa:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 17:00:57 2026 GMT
            Not After : May 10 17:05:57 2027 GMT
        Subject: CN=4F0EA2E43CD4247824CAFDE8BB31D3C71B80023E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:06:07:d1:ef:91:c2:28:81:01:37:9e:88:
                    02:43:53:b1:b0:80:19:13:22:16:b6:d8:00:23:6f:
                    dd:56:6b:ed:07:35:8f:97:be:6c:ad:2f:12:63:14:
                    29:c9:3b:6d:02:79:a9:f5:db:73:fe:27:62:49:ba:
                    a2:84:59:c8:f0:64:92:dd:4c:33:ac:7b:3c:7d:50:
                    52:41:43:29:c3:52:db:7b:e0:8c:c9:7c:4e:b6:6a:
                    96:86:f2:2b:5a:6a:21:73:33:c7:4d:eb:1f:a7:31:
                    ad:fb:0c:84:ea:bb:6e:4a:3c:19:35:38:19:5f:ed:
                    e8:a1:45:86:28:f7:a4:f5:79:d1:b3:27:b2:b2:45:
                    71:75:8b:90:36:75:5e:87:0e:a0:73:88:be:3a:64:
                    00:63:ea:a2:63:09:67:6d:4a:62:34:ea:ac:c0:dc:
                    c9:3d:6a:78:92:94:c0:58:63:a8:0d:e6:0b:26:2e:
                    4d:ce:33:2b:b4:02:e4:3a:e6:10:3d:49:9d:e3:d2:
                    ee:3e:44:1b:3f:b2:3c:81:24:ce:e1:ba:f7:93:20:
                    dc:96:70:94:ea:3b:c4:b2:1b:f5:0d:c4:1e:5d:29:
                    67:bd:e7:05:11:59:01:3e:a5:8e:72:23:f3:ce:4d:
                    07:73:f1:55:05:f2:50:61:18:cb:03:75:08:0f:57:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:A2:E4:3C:D4:24:78:24:CA:FD:E8:BB:31:D3:C7:1B:80:02:3E
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3232342e302f32312d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         db:50:86:01:33:51:9e:ef:1e:d5:3c:83:01:77:bb:2e:da:07:
         fd:5d:60:3a:aa:12:7a:61:3c:7f:21:99:5c:35:89:1e:5e:03:
         c2:07:15:6f:cb:b8:59:29:1a:69:9a:e6:64:c2:8d:16:a3:18:
         a6:a1:b9:e7:1e:75:d9:11:f7:03:3c:38:69:10:f0:4c:81:e0:
         0c:9c:67:77:a6:76:53:7d:e9:5d:2a:5b:75:8b:09:c2:dc:af:
         e7:1b:ec:b4:0a:b8:6d:95:07:cb:b3:f9:92:47:ad:67:da:64:
         45:88:eb:b2:3e:29:51:bc:ab:98:4b:f2:99:1a:1d:66:13:c1:
         6f:4e:0a:c4:b1:dc:6e:69:fd:64:9d:6d:e3:b0:1a:aa:5a:a9:
         13:29:88:68:cb:b2:10:71:8b:54:99:ca:d9:bc:b3:d9:20:bc:
         dc:47:6b:23:f7:28:be:56:f1:0e:b2:8f:d5:e0:9d:21:48:a3:
         bc:1f:b5:1c:73:b0:85:d8:b8:c6:d2:b2:27:11:d4:e3:d5:20:
         46:07:30:e0:ff:f8:64:da:2c:96:d1:90:50:41:95:eb:df:00:
         6c:58:17:75:36:29:3f:bc:a6:ab:36:b4:65:23:b7:0d:48:7a:
         7b:5d:1a:15:cd:70:35:dc:9a:cb:ef:fd:fa:69:32:cb:23:f3:
         4d:6e:e4:54
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUBluINxbonS2+O6oArjcDwyww+vQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1RjlBNDVBNzI1
QkM1RUMwNTAeFw0yNjA1MTExNzAwNTdaFw0yNzA1MTAxNzA1NTdaMDMxMTAvBgNV
BAMTKDRGMEVBMkU0M0NENDI0NzgyNENBRkRFOEJCMzFEM0M3MUI4MDAyM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVwwYH0e+RwiiBATeeiAJDU7Gw
gBkTIha22AAjb91Wa+0HNY+XvmytLxJjFCnJO20Cean123P+J2JJuqKEWcjwZJLd
TDOsezx9UFJBQynDUtt74IzJfE62apaG8itaaiFzM8dN6x+nMa37DITqu25KPBk1
OBlf7eihRYYo96T1edGzJ7KyRXF1i5A2dV6HDqBziL46ZABj6qJjCWdtSmI06qzA
3Mk9aniSlMBYY6gN5gsmLk3OMyu0AuQ65hA9SZ3j0u4+RBs/sjyBJM7huveTINyW
cJTqO8SyG/UNxB5dKWe95wURWQE+pY5yI/POTQdz8VUF8lBhGMsDdQgPVxmJAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUTw6i5DzUJHgkyv3ouzHTxxuAAj4wHwYDVR0j
BBgwFoAUHMt4B8qDINZGyslF+aRaclvF7AUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t
Q0hBTi8wLzFDQ0I3ODA3Q0E4MzIwRDY0NkNBQzk0NUY5QTQ1QTcyNUJDNUVDMDUu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1
RjlBNDVBNzI1QkM1RUMwNS5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzAL
hmJyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMC8zMTMw
MzEyZTMwMmUzMjMyMzQyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM4MzAzNDM2
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQDZQDgMA0GCSqGSIb3DQEBCwUAA4IBAQDbUIYBM1Ge7x7VPIMB
d7su2gf9XWA6qhJ6YTx/IZlcNYkeXgPCBxVvy7hZKRppmuZkwo0WoximobnnHnXZ
EfcDPDhpEPBMgeAMnGd3pnZTfeldKlt1iwnC3K/nG+y0CrhtlQfLs/mSR61n2mRF
iOuyPilRvKuYS/KZGh1mE8FvTgrEsdxuaf1knW3jsBqqWqkTKYhoy7IQcYtUmcrZ
vLPZILzcR2sj9yi+VvEOso/V4J0hSKO8H7Ucc7CF2LjG0rInEdTj1SBGBzDg//hk
2iyW0ZBQQZXr3wBsWBd1Nik/vKarNrRlI7cNSHp7XRoVzXA13JrL7/36aTLLI/NN
buRU
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:40 2026 by rpki-client