Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3234302e302f32302d3234203d3e2034373830.roa
File:                     3130312e302e3234302e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier:          okb0kGB+LekHYwOuGLyVCb+I6qh5V5+WzdEBzvXO6X4=
Subject key identifier:   8C:69:6E:71:23:B7:03:C2:A3:D8:14:C3:21:CC:6B:2F:9C:FD:0A:9D
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       75145AF45B0F9F74DCDF3B4E7CE07E95D5F676E0
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3234302e302f32302d3234203d3e2034373830.roa
Signing time:             Mon 11 May 2026 17:05:59 +0000
ROA not before:           Mon 11 May 2026 17:00:59 +0000
ROA not after:            Mon 10 May 2027 17:05:59 +0000
asID:                     4780
IP address blocks:        101.0.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:14:5a:f4:5b:0f:9f:74:dc:df:3b:4e:7c:e0:7e:95:d5:f6:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 17:00:59 2026 GMT
            Not After : May 10 17:05:59 2027 GMT
        Subject: CN=8C696E7123B703C2A3D814C321CC6B2F9CFD0A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:52:80:f5:64:4f:df:48:2d:03:70:af:5a:
                    e6:62:f8:a8:2d:85:55:71:81:15:57:77:78:fa:ae:
                    3b:7f:d2:b8:c4:bb:0c:1b:01:e3:3f:b5:5f:5c:27:
                    39:86:91:4a:ed:7d:6e:bb:a4:10:1e:c9:9b:ea:ee:
                    3b:ed:60:aa:02:cd:08:5f:0c:2c:89:76:8d:e6:87:
                    70:ff:1c:aa:c6:c4:28:84:2d:e2:ea:07:e0:af:26:
                    95:4e:93:7d:26:f0:64:2d:0e:2c:04:ae:bc:b0:c2:
                    bf:c9:09:1f:7e:db:31:43:24:45:94:1e:43:23:f3:
                    7a:08:66:30:cf:4d:ff:fd:05:58:4e:40:04:c2:90:
                    2d:4f:b5:15:89:ad:9d:61:8d:b0:6d:ec:32:1e:41:
                    37:b5:5e:77:49:12:9f:a4:e8:8c:eb:51:69:a7:d5:
                    42:e5:61:98:68:ae:86:8b:ea:9a:8a:a2:0d:f0:02:
                    10:6b:58:de:ca:ec:10:3b:c3:92:e3:8c:d4:6d:c6:
                    fe:15:d4:1b:b5:90:34:b8:eb:28:5c:9e:37:e6:de:
                    25:af:8e:81:8d:2b:bf:e4:83:61:30:66:55:83:06:
                    ac:6c:ff:a7:72:dd:1d:21:55:1c:55:ba:fb:ac:8c:
                    b4:bb:51:fd:ce:72:81:4f:cd:c3:f6:80:8a:26:6a:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:69:6E:71:23:B7:03:C2:A3:D8:14:C3:21:CC:6B:2F:9C:FD:0A:9D
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130312e302e3234302e302f32302d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.0.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:da:e9:26:6c:49:49:96:ee:8d:ea:09:3c:d1:42:59:1c:64:
         52:5d:9b:7b:10:7d:8f:30:16:4a:97:70:ea:67:46:0c:42:aa:
         26:9a:d2:19:7d:cd:37:b3:40:d8:4d:2b:5c:34:0b:7a:9c:48:
         39:38:91:02:dc:3f:8d:54:b9:67:ef:c0:60:1b:4d:4c:20:5f:
         c8:37:41:ec:94:7f:4b:65:ba:8c:cd:3d:9f:8d:4b:47:14:df:
         92:91:2e:04:11:21:0b:c9:b6:2d:58:f9:07:cb:72:f0:4f:48:
         59:40:60:d8:99:a0:71:33:5e:ab:b3:00:d9:30:9a:30:65:e5:
         c1:dc:92:ef:97:20:cc:8d:6e:7a:03:28:98:05:b4:c8:24:89:
         1d:b3:b6:3d:c8:60:07:2f:37:24:76:c3:a3:f0:ed:87:73:03:
         3b:35:99:8b:cb:9f:5e:9b:9f:ae:ee:95:b1:eb:94:cf:c0:7b:
         0a:fe:f0:54:ce:6f:58:95:48:af:ea:8d:47:3b:b0:8c:3d:17:
         cf:5b:3e:12:b0:b5:a8:b6:1c:e4:3c:13:14:1d:73:16:de:8e:
         ed:1e:a6:05:95:d1:5b:5e:6c:00:46:48:55:ff:c1:ec:cf:20:
         4c:ee:37:75:0d:12:83:dc:ff:c5:62:86:bd:07:22:1b:8c:51:
         ba:28:48:98
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUdRRa9FsPn3Tc3ztOfOB+ldX2duAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1RjlBNDVBNzI1
QkM1RUMwNTAeFw0yNjA1MTExNzAwNTlaFw0yNzA1MTAxNzA1NTlaMDMxMTAvBgNV
BAMTKDhDNjk2RTcxMjNCNzAzQzJBM0Q4MTRDMzIxQ0M2QjJGOUNGRDBBOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKVKA9WRP30gtA3CvWuZi+Kgt
hVVxgRVXd3j6rjt/0rjEuwwbAeM/tV9cJzmGkUrtfW67pBAeyZvq7jvtYKoCzQhf
DCyJdo3mh3D/HKrGxCiELeLqB+CvJpVOk30m8GQtDiwErrywwr/JCR9+2zFDJEWU
HkMj83oIZjDPTf/9BVhOQATCkC1PtRWJrZ1hjbBt7DIeQTe1XndJEp+k6IzrUWmn
1ULlYZhoroaL6pqKog3wAhBrWN7K7BA7w5LjjNRtxv4V1Bu1kDS46yhcnjfm3iWv
joGNK7/kg2EwZlWDBqxs/6dy3R0hVRxVuvusjLS7Uf3OcoFPzcP2gIomaldpAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUjGlucSO3A8Kj2BTDIcxrL5z9Cp0wHwYDVR0j
BBgwFoAUHMt4B8qDINZGyslF+aRaclvF7AUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU4t
Q0hBTi8wLzFDQ0I3ODA3Q0E4MzIwRDY0NkNBQzk0NUY5QTQ1QTcyNUJDNUVDMDUu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMUNDQjc4MDdDQTgzMjBENjQ2Q0FDOTQ1
RjlBNDVBNzI1QkM1RUMwNS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL
hmByc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NIVUFOLUNIQU4vMC8zMTMw
MzEyZTMwMmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBGUA8DANBgkqhkiG9w0BAQsFAAOCAQEALtrpJmxJSZbujeoJPNFC
WRxkUl2bexB9jzAWSpdw6mdGDEKqJprSGX3NN7NA2E0rXDQLepxIOTiRAtw/jVS5
Z+/AYBtNTCBfyDdB7JR/S2W6jM09n41LRxTfkpEuBBEhC8m2LVj5B8ty8E9IWUBg
2JmgcTNeq7MA2TCaMGXlwdyS75cgzI1uegMomAW0yCSJHbO2PchgBy83JHbDo/Dt
h3MDOzWZi8ufXpufru6VseuUz8B7Cv7wVM5vWJVIr+qNRzuwjD0Xz1s+ErC1qLYc
5DwTFB1zFt6O7R6mBZXRW15sAEZIVf/B7M8gTO43dQ0Sg9z/xWKGvQciG4xRuihI
mA==
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:52 2026 by rpki-client