Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCHENTEK/0/3130332e33362e32342e302f32332d3234203d3e203233343536.roa
File:                     3130332e33362e32342e302f32332d3234203d3e203233343536.roa (raw, json)
Hash identifier:          5VqRFEAHfoYwMvZ0tfnuV3to7ncxhe7kaQUJ2iNVZ0M=
Subject key identifier:   1A:03:62:31:D4:4F:D8:39:6A:E7:31:10:62:65:36:C9:F6:43:47:44
Certificate issuer:       /CN=540D5EB957E44D80783D8B880FD2A47A69077A24
Certificate serial:       1DD2768C386CB60197669AB7A5629236D084118D
Authority key identifier: 54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/3130332e33362e32342e302f32332d3234203d3e203233343536.roa
Signing time:             Mon 11 May 2026 17:58:32 +0000
ROA not before:           Mon 11 May 2026 17:53:32 +0000
ROA not after:            Mon 10 May 2027 17:58:32 +0000
asID:                     23456
IP address blocks:        103.36.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl
                          rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d2:76:8c:38:6c:b6:01:97:66:9a:b7:a5:62:92:36:d0:84:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D5EB957E44D80783D8B880FD2A47A69077A24
        Validity
            Not Before: May 11 17:53:32 2026 GMT
            Not After : May 10 17:58:32 2027 GMT
        Subject: CN=1A036231D44FD8396AE73110626536C9F6434744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:40:b6:44:db:85:a7:a8:2f:0a:14:e0:ce:
                    91:7d:ef:47:f0:72:91:20:68:ca:a1:c4:02:c9:95:
                    f0:69:da:ae:a7:9e:c5:40:af:e9:17:67:03:3f:b7:
                    97:26:21:d1:ab:21:1b:5d:e9:fa:5f:42:aa:86:0e:
                    01:74:56:4e:9c:fb:54:64:9a:72:8e:59:6a:17:26:
                    4c:fd:66:89:ab:94:70:55:0a:f2:a7:a7:45:00:1e:
                    6e:f2:ed:50:80:ff:b1:9e:1e:73:1d:1e:f3:bb:55:
                    4b:88:fc:2c:88:71:37:00:9c:4a:2d:00:59:1d:ff:
                    62:8f:a3:cb:1f:26:f2:22:e5:7d:dd:30:55:55:cf:
                    c2:98:a8:ea:5d:11:a5:8b:35:21:f1:05:d5:7b:39:
                    4e:a3:ec:58:6a:92:2b:2c:81:c4:f9:47:a3:58:ce:
                    f3:4c:8d:34:0f:cc:24:8a:d1:4c:a6:42:e4:0f:11:
                    5b:99:0a:03:ed:72:99:ab:27:5c:c7:ab:a3:ae:66:
                    b7:63:fc:d0:f9:55:9f:d3:36:f4:2c:d5:13:6d:1c:
                    bd:9b:45:86:46:2e:13:cc:80:17:81:0c:0b:1f:79:
                    dc:f6:85:8b:ef:be:8a:58:dd:fb:09:25:a6:f4:b8:
                    b0:b8:5b:9e:e2:3c:ba:cf:1a:18:c8:3a:d0:f4:e1:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:62:31:D4:4F:D8:39:6A:E7:31:10:62:65:36:C9:F6:43:47:44
            X509v3 Authority Key Identifier:
                keyid:54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/3130332e33362e32342e302f32332d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:7e:88:14:0f:76:a8:fd:b1:9e:80:0c:de:04:ef:e1:e7:b5:
         5b:0a:0d:a5:e2:83:cb:a4:6a:99:74:8c:3c:84:66:b0:ff:dd:
         c4:59:94:2a:f6:3a:70:66:10:fa:20:7a:fe:00:c4:5c:55:ac:
         2c:69:67:1b:d4:b5:9f:63:7a:11:73:29:5f:9c:7b:25:31:83:
         f9:3f:f8:99:4c:90:75:f6:d2:57:5a:78:16:d3:29:5b:db:7a:
         b9:13:dd:cf:3f:51:5f:2f:0a:43:c2:7c:49:de:e5:a9:7d:4a:
         0c:ca:a4:ee:5b:1c:24:d8:3f:ec:49:38:dc:49:f0:26:a9:45:
         cc:d9:5f:8d:41:80:01:ce:ee:4e:86:8d:04:9f:80:1c:26:96:
         43:02:03:19:6a:2d:6b:53:75:12:58:f3:3d:15:76:6c:b0:4e:
         86:aa:5a:63:f8:01:29:68:bf:35:2c:3d:d1:d9:a9:3e:a1:29:
         c2:a4:22:66:15:4c:17:2c:eb:18:06:e1:24:7e:7b:57:a7:97:
         ec:45:2c:e8:63:5a:65:8a:5e:98:b5:5e:60:6f:8d:3d:e6:8e:
         b0:e8:1a:8e:d4:8d:0b:00:53:b6:2a:f2:34:b7:b6:1f:a0:65:
         35:cd:d1:18:45:ea:4c:28:22:d4:94:f6:1b:ba:73:f3:25:cd:
         9b:0d:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:07 2026 by rpki-client