Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCCATV/0/36312e35382e34382e302f32302d3234203d3e2034373830.roa
File:                     36312e35382e34382e302f32302d3234203d3e2034373830.roa (raw, json)
Hash identifier:          PYv/nS8+yuI4Ayp1EGb1dsCdX5gLwaj2cdvLRAJdezk=
Subject key identifier:   EB:08:C1:E1:55:38:61:2C:86:63:2C:35:A2:EC:C0:3A:76:75:BC:29
Certificate issuer:       /CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
Certificate serial:       6E5F68A58F022859CE0FF206DC3AD990C7FEF9C1
Authority key identifier: 5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCCATV/0/36312e35382e34382e302f32302d3234203d3e2034373830.roa
Signing time:             Mon 11 May 2026 16:33:14 +0000
ROA not before:           Mon 11 May 2026 16:28:14 +0000
ROA not after:            Mon 10 May 2027 16:33:14 +0000
asID:                     4780
IP address blocks:        61.58.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl
                          rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5f:68:a5:8f:02:28:59:ce:0f:f2:06:dc:3a:d9:90:c7:fe:f9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C5E022D4CA559A4C669A6F7364972219C8E4A09
        Validity
            Not Before: May 11 16:28:14 2026 GMT
            Not After : May 10 16:33:14 2027 GMT
        Subject: CN=EB08C1E15538612C86632C35A2ECC03A7675BC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:6e:a3:33:9f:a5:44:19:89:bf:02:d5:53:
                    dc:03:93:07:77:f5:e7:8f:fe:f4:09:74:5a:42:0c:
                    62:d8:5f:b2:66:2a:fd:3c:f0:97:57:5f:91:57:45:
                    a7:36:61:0b:62:a3:7b:f2:e5:f4:49:0a:79:80:00:
                    bf:b6:b2:fe:c0:17:41:91:13:54:57:f0:d5:57:e4:
                    04:5e:09:bb:3e:43:7c:38:f5:f6:83:95:90:4d:f2:
                    b4:25:20:23:0d:d4:a9:b0:8f:78:7d:43:ea:73:63:
                    f2:46:3c:7a:d3:d3:0d:d4:05:4f:94:80:3e:10:88:
                    b2:0d:1d:a7:14:4a:1a:12:5b:f7:c6:c5:52:0b:25:
                    de:f4:74:05:3e:5a:df:8f:12:69:e7:e4:e2:64:68:
                    78:be:40:ee:71:d3:0b:c3:c7:2f:a0:70:fd:2c:fd:
                    f7:29:43:08:c9:4d:23:99:0f:de:09:80:f2:6e:5e:
                    4b:b4:1e:2f:5f:5f:49:c1:9a:45:74:f6:40:8d:14:
                    7a:f2:25:00:24:90:7c:a6:7c:6b:72:52:c4:60:d0:
                    e5:29:1b:5c:36:3e:a6:7f:ce:c3:09:2a:8b:ab:eb:
                    2c:03:d3:27:b2:9f:6b:1a:06:a6:0f:81:d7:f0:b0:
                    0d:8e:66:59:71:33:90:3a:ba:c6:ac:dc:6d:21:2a:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:C1:E1:55:38:61:2C:86:63:2C:35:A2:EC:C0:3A:76:75:BC:29
            X509v3 Authority Key Identifier:
                keyid:5C:5E:02:2D:4C:A5:59:A4:C6:69:A6:F7:36:49:72:21:9C:8E:4A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/5C5E022D4CA559A4C669A6F7364972219C8E4A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5C5E022D4CA559A4C669A6F7364972219C8E4A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCCATV/0/36312e35382e34382e302f32302d3234203d3e2034373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.58.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:e5:40:bd:91:c5:23:6e:7c:7f:09:c3:fa:60:0d:f6:ce:6b:
         34:f5:93:e0:4c:40:55:fa:ee:e3:56:28:e5:3a:b9:6c:80:0e:
         76:01:cf:82:d1:1c:bb:36:de:34:ad:02:69:80:bd:2d:df:8f:
         bb:0a:29:4f:47:83:3f:96:ea:3d:45:b4:50:04:8a:d2:f0:47:
         76:fd:98:69:46:ce:ff:1f:e9:c5:be:23:ca:bc:36:d4:aa:31:
         ff:3c:5d:c2:bc:0f:16:b0:50:f4:50:45:de:a1:5b:50:1e:8a:
         c0:5c:20:5a:bb:16:f2:5c:d6:7a:59:7f:e1:a9:06:25:61:e6:
         46:12:7f:50:28:86:ab:20:cb:33:5a:e3:32:8b:b1:00:4c:52:
         19:ec:6f:5a:6a:b4:30:e7:1b:3e:16:4c:45:fd:a0:85:4c:03:
         1b:8a:76:7f:51:0f:35:20:9a:74:52:ce:0e:02:d7:ba:e7:d3:
         12:6e:35:b3:78:8a:8d:1f:af:df:08:b4:59:1b:d4:28:24:5a:
         d7:9f:c2:5c:1c:a8:4b:38:46:2e:36:0b:aa:cf:76:51:b8:a7:
         7b:a8:97:e3:c7:4c:6b:28:86:c0:b3:12:8a:6a:ea:69:2f:82:
         13:6d:47:7c:0b:22:19:39:66:28:44:32:1e:44:fc:f7:0a:b0:
         9e:d8:ce:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:28 2026 by rpki-client