Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa
File:                     3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa (raw, json)
Hash identifier:          kMJ1vhXoM5lWsAtGby2N4NBOQOtOqqWYBMf/MDrw46E=
Subject key identifier:   25:47:0D:A2:59:D9:2A:EA:D0:17:A6:33:26:1B:20:67:7B:C4:56:61
Certificate issuer:       /CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
Certificate serial:       75904FC42FE5381CC0F883A2110E29697CC1F3FF
Authority key identifier: 1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:06:00 +0000
ROA not before:           Mon 11 May 2026 17:01:00 +0000
ROA not after:            Mon 10 May 2027 17:06:00 +0000
asID:                     18046
IP address blocks:        122.200.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl
                          rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:90:4f:c4:2f:e5:38:1c:c0:f8:83:a2:11:0e:29:69:7c:c1:f3:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CCB7807CA8320D646CAC945F9A45A725BC5EC05
        Validity
            Not Before: May 11 17:01:00 2026 GMT
            Not After : May 10 17:06:00 2027 GMT
        Subject: CN=25470DA259D92AEAD017A633261B20677BC45661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:d8:df:a3:df:45:ed:09:b3:11:90:b9:f5:
                    f3:66:e0:cc:b0:d0:fb:36:83:c5:f0:4d:05:65:bf:
                    76:3a:b5:5e:92:b5:4f:c5:95:37:d7:44:09:a8:1b:
                    ce:2d:31:6b:87:6f:ce:8d:d9:1d:99:11:b8:3d:31:
                    29:81:0f:30:ca:53:9e:65:cc:f2:31:85:11:96:83:
                    86:16:47:90:97:0e:32:54:87:45:a6:68:35:51:46:
                    b8:0b:11:05:2a:59:60:73:53:31:f0:3b:db:7e:bc:
                    e9:f1:41:95:d8:a8:98:b3:82:81:14:84:e2:fe:f9:
                    c8:bc:4e:01:75:0a:21:0c:37:92:b8:28:06:91:ea:
                    b9:2d:2a:9b:96:8a:7e:3f:0c:a4:48:7a:11:12:b3:
                    eb:ea:48:9a:30:3c:48:97:c2:51:a5:71:14:34:fe:
                    89:6f:b7:04:26:78:48:df:50:31:c1:a0:f1:e9:bf:
                    c9:f6:77:d1:fc:2d:a1:62:1a:35:f9:77:cc:75:07:
                    75:54:7d:09:3f:3a:7d:20:ab:ca:f4:ca:d9:4a:3d:
                    ba:90:72:34:57:99:5a:da:58:93:d5:f7:52:54:dd:
                    80:35:54:0f:15:e5:8f:06:1e:47:4f:13:60:48:69:
                    20:b2:f2:ad:13:15:b5:d9:d0:d3:2e:76:cc:6c:0a:
                    62:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:47:0D:A2:59:D9:2A:EA:D0:17:A6:33:26:1B:20:67:7B:C4:56:61
            X509v3 Authority Key Identifier:
                keyid:1C:CB:78:07:CA:83:20:D6:46:CA:C9:45:F9:A4:5A:72:5B:C5:EC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1CCB7807CA8320D646CAC945F9A45A725BC5EC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUAN-CHAN/0/3132322e3230302e3135322e302f32312d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:29:99:8f:a7:f6:a6:15:2b:8b:18:dd:bf:da:9a:0f:44:a0:
         85:09:31:14:da:8a:f5:1c:24:ea:49:f3:8d:06:ac:94:07:16:
         b1:85:dd:bd:e9:e5:ea:83:91:a4:55:51:99:83:77:df:a0:0f:
         f2:3b:03:f4:10:16:13:42:0a:79:1d:23:bb:aa:8c:ce:69:9d:
         49:9a:6a:34:e8:13:83:8e:79:df:40:cc:9c:c2:30:94:8a:60:
         80:27:b8:58:4c:a9:5c:58:e7:4d:d3:a5:f9:b9:92:86:5e:32:
         25:1d:e6:7d:11:63:56:13:bc:9f:98:e4:e3:09:84:0a:9f:0d:
         30:c6:49:c0:85:35:e0:36:ff:c5:6c:e6:5c:e1:16:fa:8f:3a:
         e1:e0:c8:1a:73:9c:c2:79:36:ea:8a:0d:d5:f8:05:1d:2e:7b:
         7f:35:0c:f6:44:68:8b:2d:d9:6d:b2:41:6c:04:92:3a:33:d4:
         fc:18:d5:22:f9:8c:25:61:08:33:3d:ab:fb:7a:f0:16:64:f3:
         74:d6:43:fb:d1:6c:5b:8d:9c:52:1b:51:90:59:65:16:d0:45:
         eb:29:d4:a8:d1:eb:c6:23:1e:55:98:a9:86:d0:46:80:2c:d3:
         96:96:b1:55:1a:9d:b3:8e:59:2c:13:74:39:c6:ce:d2:9f:a0:
         5f:41:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:18 2026 by rpki-client