Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa
File:                     3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa (raw, json)
Hash identifier:          Auax/gFiunbHxNkQOS/4xGo2FY/JkqSoOSclCXMaFXY=
Subject key identifier:   02:21:65:03:37:A8:29:06:B6:AC:82:25:7B:AA:FD:B1:0B:58:BA:56
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       5DB816752B76897074D383AE59DEC5A7A56CDA5A
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa
Signing time:             Mon 11 May 2026 17:20:10 +0000
ROA not before:           Mon 11 May 2026 17:15:10 +0000
ROA not after:            Mon 10 May 2027 17:20:10 +0000
asID:                     24172
IP address blocks:        103.234.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b8:16:75:2b:76:89:70:74:d3:83:ae:59:de:c5:a7:a5:6c:da:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 17:15:10 2026 GMT
            Not After : May 10 17:20:10 2027 GMT
        Subject: CN=0221650337A82906B6AC82257BAAFDB10B58BA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:7b:08:33:ae:74:61:58:06:86:28:53:fb:
                    72:52:f9:2a:af:85:70:12:bd:3f:fc:d4:aa:05:12:
                    8b:4c:c5:54:3b:65:41:7c:21:d8:29:32:10:31:85:
                    b0:f0:05:6b:27:7d:e4:ee:09:74:5d:2f:30:dd:52:
                    a0:f0:a6:66:bb:0a:13:95:f7:0d:da:fc:dc:80:c4:
                    54:78:09:66:5e:f1:59:24:c7:74:32:63:57:5c:ee:
                    9d:d0:fc:d0:05:9b:f3:c5:cb:21:c8:f6:40:a2:dd:
                    b7:5c:e7:49:c2:06:35:c5:f0:3c:0f:e4:a0:10:85:
                    e7:85:34:b4:23:9a:db:da:82:64:16:3e:0c:3a:09:
                    b4:6a:fe:a3:c0:9e:35:89:10:76:eb:57:09:77:f6:
                    ca:84:52:7b:43:5c:17:ef:07:e7:e4:c6:19:6f:b1:
                    2d:72:10:33:9a:05:20:b5:76:fe:db:cc:c4:d2:bd:
                    d5:6e:60:f9:d7:22:20:08:e0:f2:0d:3c:8f:d9:c9:
                    8a:27:05:5d:37:d8:05:4a:84:95:73:bb:e8:15:cd:
                    4d:b5:79:4b:6d:f4:b9:ab:0e:e3:4c:f9:75:b6:1d:
                    ea:4c:c5:6b:88:b7:8f:12:83:44:76:be:aa:e5:6d:
                    4d:ea:c4:a0:31:3c:05:2d:34:32:81:8c:f0:80:fa:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:21:65:03:37:A8:29:06:B6:AC:82:25:7B:AA:FD:B1:0B:58:BA:56
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3130332e3233342e3232342e302f32342d3234203d3e203234313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:ae:3f:d4:d3:99:d0:2c:53:4f:65:eb:42:d2:18:d9:a7:a4:
         81:0a:ce:9c:c3:d4:ae:e6:85:82:a1:b9:a1:c5:cf:64:47:66:
         80:a7:58:7a:e5:76:10:24:d4:85:63:a4:dd:74:48:dd:e5:b3:
         76:d5:c9:1a:6c:d9:a4:d8:19:ba:44:7d:6e:d3:d2:40:0a:d5:
         98:f3:b0:8f:26:0d:97:1f:11:07:46:5d:10:bf:b0:8c:83:aa:
         15:a0:16:45:a5:b7:c3:47:61:f7:2c:c1:d6:35:52:7c:78:fe:
         6e:ef:61:4c:13:9f:c2:d2:4f:14:c9:e3:10:5e:32:52:3f:58:
         79:82:07:5c:c5:57:72:49:67:0c:82:84:01:6b:5e:b1:21:a5:
         29:d3:71:6a:ec:0c:38:8a:f3:06:db:12:8b:fc:92:7c:dc:4c:
         21:f7:7a:14:45:45:65:77:db:cd:43:88:f1:6b:74:07:17:4f:
         c1:61:3d:c7:0b:2f:2b:da:d6:bb:9e:c4:45:bd:64:fa:54:34:
         52:f9:35:79:c5:ee:cc:8e:55:55:5f:4f:90:e0:6b:43:bb:a8:
         4c:1e:4b:7d:cd:4c:15:3d:c6:1b:39:43:57:30:62:d5:7b:c0:
         28:4c:dc:bb:6b:8f:0c:eb:66:f8:89:a6:77:a2:e7:3b:d7:a4:
         ea:81:12:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:13 2026 by rpki-client