Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCCATV/0/3130332e3133302e34342e302f32322d3234203d3e203138303436.roa
File:                     3130332e3133302e34342e302f32322d3234203d3e203138303436.roa (raw, json)
Hash identifier:          PuLpSdQZHzCEFGC7TmIZ9IbqnyJX6A4hr8rSx+omfPM=
Subject key identifier:   9F:46:7D:0E:06:F5:AC:21:ED:44:F8:9F:49:7E:5F:1C:5D:20:91:91
Certificate issuer:       /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial:       2BD7FF793149B128103D0B63F2D8DF7D7A529215
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCCATV/0/3130332e3133302e34342e302f32322d3234203d3e203138303436.roa
Signing time:             Mon 11 May 2026 17:32:31 +0000
ROA not before:           Mon 11 May 2026 17:27:31 +0000
ROA not after:            Mon 10 May 2027 17:32:31 +0000
asID:                     18046
IP address blocks:        103.130.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
                          rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:ff:79:31:49:b1:28:10:3d:0b:63:f2:d8:df:7d:7a:52:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
        Validity
            Not Before: May 11 17:27:31 2026 GMT
            Not After : May 10 17:32:31 2027 GMT
        Subject: CN=9F467D0E06F5AC21ED44F89F497E5F1C5D209191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:74:b5:28:62:ef:30:da:ac:ff:32:e8:79:
                    86:b5:d4:70:12:a5:1b:33:ac:23:3d:cc:59:17:33:
                    6a:38:55:cf:9b:d4:a6:27:2e:89:fb:7c:2d:11:13:
                    58:8a:93:a0:6e:01:d6:42:6f:71:1a:e8:2e:74:e0:
                    97:33:d7:5a:b6:64:fc:b2:eb:50:21:35:11:7d:f3:
                    15:44:21:34:7d:e4:8b:1c:26:6b:ac:6d:48:22:c6:
                    85:56:ff:08:6c:74:cc:c2:1d:4e:56:23:c6:7f:6c:
                    e9:37:23:09:3a:5a:c2:8d:21:8d:49:7e:0c:ed:bd:
                    b9:6f:0d:29:cc:53:1e:25:54:59:c4:1e:8a:ff:c4:
                    67:97:0e:38:8d:30:53:ad:e1:1d:98:d9:23:38:b8:
                    71:02:13:41:d4:5d:36:d7:c3:8c:d6:7c:72:28:f7:
                    9d:72:d9:8f:b2:7e:59:1a:f4:bd:75:c5:1e:8a:0d:
                    00:6d:e1:15:29:5c:11:52:c7:87:c3:a4:4e:02:6c:
                    e9:c8:ee:39:51:40:2b:e9:8f:c7:78:4f:d7:77:22:
                    bd:3d:e3:55:96:48:b3:e5:a6:42:24:e3:be:b2:ec:
                    96:16:39:95:c1:1f:11:30:17:17:b0:49:07:6f:ed:
                    dd:30:37:a4:f5:4d:5a:55:51:53:c5:b8:1c:87:db:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:46:7D:0E:06:F5:AC:21:ED:44:F8:9F:49:7E:5F:1C:5D:20:91:91
            X509v3 Authority Key Identifier:
                keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/3130332e3133302e34342e302f32322d3234203d3e203138303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:7f:30:a1:89:e7:08:3f:93:5f:50:4c:b2:62:e7:0d:14:
         8d:f6:f3:28:49:c9:7d:50:5c:c8:ec:0a:25:d8:7b:da:58:bd:
         6a:78:93:ba:38:69:02:97:d4:d3:30:14:4e:2d:fd:ca:46:e5:
         23:ec:0b:7b:a4:76:9a:fd:1d:7f:43:f2:dd:76:3a:5b:3b:c5:
         e2:31:ae:cb:24:f1:81:c5:a1:90:b9:ba:5e:7c:d3:a3:c8:3e:
         23:59:aa:9c:db:43:76:10:d1:3c:10:4a:30:32:e8:eb:2b:72:
         8d:2a:26:ed:92:ad:53:e6:5a:4b:42:88:5a:f6:48:2c:b7:29:
         0b:d7:3a:dd:e9:84:7d:32:32:b1:5b:c8:e1:48:57:2b:d8:8d:
         5a:61:26:10:2d:7f:f3:32:b2:cd:b3:ae:29:7b:55:b2:e0:ee:
         1d:a0:d1:0c:51:62:8e:84:47:8e:9e:7e:47:0c:c7:8c:ef:fa:
         28:c7:e1:5d:74:fd:ec:22:22:ff:54:2d:ec:c4:aa:46:c1:bb:
         98:65:f2:54:13:07:6a:84:53:96:5b:6b:f8:48:97:96:8e:03:
         ec:a1:fe:5d:ac:aa:81:04:3d:d0:5d:1d:08:92:93:71:89:c8:
         d3:c6:82:90:d0:93:a5:0e:a9:dd:f8:76:bf:80:6a:17:63:67:
         4f:4d:f7:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 21:13:31 2026 by rpki-client