Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCCATV/0/3130332e3133302e32302e302f32322d3234203d3e203138303436.roa
File:                     3130332e3133302e32302e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier:          fLV1xsYNOJbdFp05Q7bjpEBZ/bWgjA4jSH8639TK4es=
Subject key identifier:   63:B3:FD:A9:71:1B:AF:B0:8E:C0:DC:BA:30:F7:55:1E:5B:AD:AD:FE
Certificate issuer:       /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial:       0309B3A31D2985A712C48C5F97FBF9A1D6EE918C
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCCATV/0/3130332e3133302e32302e302f32322d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:32:32 +0000
ROA not before:           Mon 11 May 2026 17:27:32 +0000
ROA not after:            Mon 10 May 2027 17:32:32 +0000
asID:                     18046
IP address blocks:        103.130.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
                          rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:b3:a3:1d:29:85:a7:12:c4:8c:5f:97:fb:f9:a1:d6:ee:91:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
        Validity
            Not Before: May 11 17:27:32 2026 GMT
            Not After : May 10 17:32:32 2027 GMT
        Subject: CN=63B3FDA9711BAFB08EC0DCBA30F7551E5BADADFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:79:db:ad:c7:7f:83:6f:58:a9:bd:6e:af:
                    53:b3:73:7b:37:1a:91:bb:65:33:c8:b0:5d:ef:54:
                    80:26:d4:bb:03:b5:53:bc:a8:cf:bf:b5:ec:a7:1d:
                    b0:c0:21:4e:85:c3:84:ee:c4:02:8e:ac:55:92:cf:
                    63:94:c1:55:c7:5b:63:18:28:77:64:e6:47:47:d0:
                    1a:70:09:61:69:b7:49:df:f7:8c:bc:e5:e9:79:e0:
                    83:ba:bb:7e:36:eb:e0:96:67:62:33:4a:f9:68:a5:
                    f5:db:af:52:2c:a3:5b:cd:52:c8:f6:ae:33:c2:fa:
                    51:ce:64:28:ea:61:0d:1d:11:32:a7:89:d9:f1:e3:
                    e1:10:06:88:01:25:c7:12:fe:3e:a7:2c:27:03:7f:
                    16:94:69:90:ff:b9:d5:fc:9a:5c:86:1f:e5:5e:5d:
                    41:1d:11:e6:f0:68:1e:e3:95:4a:2d:79:69:49:66:
                    5b:d9:4d:01:45:20:9d:ee:e8:7a:31:b1:a6:72:5f:
                    06:03:21:b5:70:34:a8:f8:7e:94:b8:78:00:64:df:
                    ae:55:af:42:d0:3f:b8:86:e3:16:05:f7:c1:73:96:
                    5d:99:ec:e1:27:7c:e0:a4:ac:2d:cf:fb:5d:88:7b:
                    1b:25:cb:dd:dc:ce:bf:2b:f1:07:ec:e9:1c:bd:fd:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B3:FD:A9:71:1B:AF:B0:8E:C0:DC:BA:30:F7:55:1E:5B:AD:AD:FE
            X509v3 Authority Key Identifier:
                keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/3130332e3133302e32302e302f32322d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:1b:4e:8d:45:f4:71:36:a3:56:2a:50:16:eb:c1:51:e5:58:
         56:10:b7:2e:8c:a6:ee:e0:e8:14:82:ea:c6:ab:61:f2:e1:b3:
         6f:4b:32:9d:fa:2f:8e:bb:0d:ad:97:75:b3:0b:cb:0c:0d:94:
         42:58:4c:e3:91:94:ad:09:32:f2:3c:83:3c:9f:cb:d4:30:53:
         f3:d4:9d:e6:42:c9:6b:d3:8c:3c:19:99:87:f9:bd:c3:e0:a3:
         2a:bc:4a:bb:24:3c:00:91:93:cd:a6:f7:0f:df:39:9a:e8:19:
         2f:c8:c7:fd:49:d4:1c:54:89:05:1a:24:b6:5d:6f:dd:0b:5c:
         8b:ac:88:b3:45:d1:63:f2:32:72:04:54:50:87:bf:59:65:a3:
         87:c4:c1:a8:9c:7c:cd:80:68:74:0b:ae:58:04:67:d9:62:18:
         20:f9:6b:f4:91:59:e9:c3:77:07:a1:3a:75:1f:dc:21:62:57:
         6b:50:e1:c3:96:22:53:20:40:71:19:24:40:47:81:e9:e6:3d:
         27:18:97:99:0d:35:81:31:b6:c6:17:aa:60:0a:4e:f6:48:7f:
         b5:5f:fb:de:e2:86:ab:55:69:b0:3f:fb:78:9b:2e:6a:56:d6:
         ea:7e:c5:b6:5c:3d:f1:e7:4b:a1:cb:69:e9:18:ac:9b:a0:b4:
         41:81:84:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:32 2026 by rpki-client