Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCCATV/0/36312e35382e31362e302f32302d3234203d3e2034373830.roa
File:                     36312e35382e31362e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier:          ulLAO9jVmjVPeBWWCp8ASiEFf0HUdA7ADUlfbZ0y+H8=
Subject key identifier:   AF:38:75:EC:99:2E:BE:77:24:62:80:6D:41:8B:14:7B:8F:B4:ED:CE
Certificate issuer:       /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial:       624A9D722F9E413D8456F982F0CF946EB8FD55DA
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCCATV/0/36312e35382e31362e302f32302d3234203d3e2034373830.roa
Signing time:             Mon 11 May 2026 16:33:11 +0000
ROA not before:           Mon 11 May 2026 16:28:11 +0000
ROA not after:            Mon 10 May 2027 16:33:11 +0000
asID:                     4780
IP address blocks:        61.58.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
                          rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4a:9d:72:2f:9e:41:3d:84:56:f9:82:f0:cf:94:6e:b8:fd:55:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
        Validity
            Not Before: May 11 16:28:11 2026 GMT
            Not After : May 10 16:33:11 2027 GMT
        Subject: CN=AF3875EC992EBE772462806D418B147B8FB4EDCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:23:5b:18:80:03:bc:e1:21:4a:4a:72:67:
                    63:ec:09:69:3f:dc:8d:af:be:14:29:cb:ef:e0:58:
                    31:96:35:c6:de:a8:8d:74:66:50:1a:fe:99:01:52:
                    89:2c:76:84:df:9c:27:bb:06:42:c5:25:32:4b:2e:
                    9a:ca:d9:cf:89:9d:fc:9c:44:31:78:a4:9a:63:37:
                    a0:c3:75:37:64:cb:5c:ef:d3:ab:4f:f1:51:71:61:
                    88:85:e8:f1:5b:6a:cc:cc:1d:29:07:cd:7f:ab:20:
                    ac:2a:24:d8:07:b6:c9:48:cf:4c:a6:81:02:df:a9:
                    15:d6:61:66:81:bb:76:f3:da:65:db:4e:c4:da:e2:
                    9d:e6:f5:d7:3f:a7:01:35:1b:5e:8b:f0:a4:61:68:
                    7e:bc:39:6c:e6:80:26:0f:a4:8a:eb:6f:9a:d6:6a:
                    89:cc:e2:48:0d:15:8f:6b:99:1c:30:9d:9d:c1:05:
                    7a:8a:b3:47:19:ef:3c:b6:06:28:0d:71:09:c0:9d:
                    c9:05:4b:5d:dc:3d:b4:f0:1b:64:2e:cc:8a:12:44:
                    6c:30:cf:24:00:1f:e8:f7:d6:72:2e:54:56:4e:2b:
                    39:04:d5:3c:22:3f:9e:bd:5b:09:3d:9e:7e:52:14:
                    05:32:43:b2:30:06:82:37:eb:f2:53:01:29:f4:f7:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:38:75:EC:99:2E:BE:77:24:62:80:6D:41:8B:14:7B:8F:B4:ED:CE
            X509v3 Authority Key Identifier:
                keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/36312e35382e31362e302f32302d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:2f:e4:9f:b2:04:2c:db:4a:e0:24:f6:81:c0:81:98:a0:
         22:4a:ed:a7:dd:15:9c:8b:4e:ae:8a:d2:53:b3:77:06:a1:81:
         a9:0d:82:75:98:d4:70:3d:ce:9c:ae:c3:be:de:a8:0b:04:4f:
         93:2e:46:32:b7:cc:98:5a:be:37:0d:f8:d5:89:36:63:c0:dc:
         ca:37:c3:fc:c1:66:d0:09:15:15:b1:35:57:4b:fd:ce:4a:12:
         67:3e:2f:82:61:93:59:77:40:4b:e6:66:08:10:a4:13:48:43:
         68:91:c2:aa:6b:c8:81:b1:38:3a:d8:ab:90:a1:ca:cc:d8:8c:
         07:ad:bb:9e:e8:26:9b:57:d0:d5:58:74:ab:b1:8e:ca:da:92:
         2c:a8:ea:c1:9b:d5:4b:77:e4:0b:fe:0e:83:8b:85:ef:54:b0:
         43:5e:8e:69:7d:ca:44:23:ce:9f:b2:ac:b0:ad:51:23:ab:3e:
         14:82:79:e8:d9:5a:ff:7e:ea:05:68:21:31:ce:fd:05:f0:80:
         87:ac:68:10:99:58:a1:d8:5b:6e:21:da:e1:83:f2:86:db:ca:
         c9:67:8b:fb:98:4b:e4:ad:9b:77:be:db:c2:35:61:44:68:d0:
         2e:6a:6e:c3:49:96:37:19:c1:6b:0f:61:1a:d9:bb:94:08:62:
         17:69:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:16 2026 by rpki-client