Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCCATV/0/36312e35372e3230382e302f32302d3234203d3e2034373830.roa
File:                     36312e35372e3230382e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier:          0vW2aeNMFlQCCdUqFw+kop6U+fnVyKA1KhUN54tofaU=
Subject key identifier:   5C:B3:CA:98:58:CC:7E:4A:DF:5F:38:60:04:66:E9:42:86:35:77:88
Certificate issuer:       /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial:       6463C14E8E4933485125BDDB8E55777AFC36FB14
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCCATV/0/36312e35372e3230382e302f32302d3234203d3e2034373830.roa
Signing time:             Mon 11 May 2026 16:33:14 +0000
ROA not before:           Mon 11 May 2026 16:28:14 +0000
ROA not after:            Mon 10 May 2027 16:33:14 +0000
asID:                     4780
IP address blocks:        61.57.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
                          rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:63:c1:4e:8e:49:33:48:51:25:bd:db:8e:55:77:7a:fc:36:fb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
        Validity
            Not Before: May 11 16:28:14 2026 GMT
            Not After : May 10 16:33:14 2027 GMT
        Subject: CN=5CB3CA9858CC7E4ADF5F38600466E94286357788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:e7:92:2f:45:d0:a9:11:d1:34:de:b4:a9:
                    50:fa:e7:62:70:5e:31:1b:05:97:1e:aa:79:f7:d9:
                    23:31:2d:1f:ec:dd:91:d0:79:b3:f2:d1:8a:08:32:
                    d0:b5:e3:63:16:86:2e:b6:9a:3c:ba:3d:bf:00:8d:
                    f7:59:da:cd:5d:38:8a:c3:3d:4a:23:da:0b:2a:dc:
                    46:5a:85:23:16:be:3a:02:3a:89:7a:c2:0b:16:15:
                    37:4d:9e:ca:4d:fb:bf:6f:a2:18:d7:c4:1e:f7:f3:
                    f7:8d:4a:21:97:96:c6:69:23:5f:9e:de:3f:6d:b5:
                    1e:0f:0c:03:d8:a3:68:c2:a1:84:ce:6b:79:a2:3c:
                    68:28:4f:33:b0:20:51:d3:a7:d0:33:64:8c:ef:fb:
                    7d:06:98:41:7a:51:04:ca:fb:e2:78:8f:af:f1:ad:
                    8c:e2:8b:45:ae:d5:d2:a9:b9:4e:5f:c8:0c:94:91:
                    45:e5:f7:d2:5a:63:b4:0d:99:95:62:17:14:09:53:
                    ff:5f:f5:fe:46:8c:72:87:3e:ab:29:ae:ad:83:7f:
                    37:12:9b:b4:ef:97:99:34:a7:3f:f0:cd:1f:6c:60:
                    4f:f6:02:48:a7:c3:fd:a5:24:5e:f4:98:04:36:4c:
                    de:a4:a1:d9:c0:89:21:5b:b2:4e:5a:6f:b2:db:03:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B3:CA:98:58:CC:7E:4A:DF:5F:38:60:04:66:E9:42:86:35:77:88
            X509v3 Authority Key Identifier:
                keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/36312e35372e3230382e302f32302d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.57.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:d1:bc:80:64:48:ad:1f:bc:3b:9a:ad:8a:6a:00:3b:26:
         fd:7f:ef:70:63:76:5c:0f:9e:63:65:25:f1:b6:81:31:43:e5:
         46:37:c5:6c:a3:db:2c:b9:01:66:a7:be:e1:5d:d6:49:28:c8:
         0a:51:c0:3b:57:a2:2d:38:07:ed:36:96:1d:1c:c5:50:3b:91:
         bd:80:9e:27:db:20:15:14:1a:58:60:14:4f:e1:fa:7c:35:96:
         ae:ec:8d:f7:fa:0e:ca:64:17:2e:da:fa:24:4a:e8:85:06:3d:
         71:52:0f:2c:94:c6:c4:e6:e4:df:99:f3:76:18:b9:85:8a:ea:
         bf:b3:91:7d:6d:2d:30:e9:79:2b:16:c2:30:a3:59:bf:8e:0f:
         de:d4:61:46:da:4b:98:3a:5a:a1:1a:d9:17:fd:d3:8e:12:a9:
         c9:bd:a9:06:5a:6b:1a:3f:f8:bc:29:81:29:19:09:aa:63:3f:
         a4:f9:2d:93:4b:91:9d:c2:d8:01:66:a9:10:9e:fe:31:a6:c3:
         8e:ff:b4:7d:ad:3c:ac:0b:af:5c:57:e6:be:39:84:28:c4:c2:
         20:b6:fa:6a:61:7f:50:24:cb:a7:b9:2a:eb:01:b8:6c:e1:81:
         a7:ca:75:6f:9a:83:f9:bb:33:37:59:b8:f9:ac:70:89:9d:67:
         c3:f3:30:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:16 2026 by rpki-client