Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/Lz6twE8pibEcp2GxWkpGxLvuRZI.roa
File:                     Lz6twE8pibEcp2GxWkpGxLvuRZI.roa (raw, json)
Hash identifier:          xWsiYeqO5Am+Y7FZeq1u8wjy+UP+zwKxdAFeV6plv7c=
Subject key identifier:   2F:3E:AD:C0:4F:29:89:B1:1C:A7:61:B1:5A:4A:46:C4:BB:EE:45:92
Certificate issuer:       /CN=A736CFF1948740614D0321E63B8403EB9AB9748D
Certificate serial:       03BB
Authority key identifier: A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/Lz6twE8pibEcp2GxWkpGxLvuRZI.roa
Signing time:             Sat 14 Mar 2026 08:23:32 +0000
ROA not before:           Sat 14 Mar 2026 08:23:32 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     23456
IP address blocks:        103.36.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Mar 2026 04:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A736CFF1948740614D0321E63B8403EB9AB9748D
        Validity
            Not Before: Mar 14 08:23:32 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2F3EADC04F2989B11CA761B15A4A46C4BBEE4592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:b1:b4:9c:01:f2:d5:8a:cb:31:39:b7:f4:
                    6f:83:ee:ad:64:4c:d9:c6:31:4f:1f:ce:80:5b:be:
                    9e:93:2a:f0:e9:e0:41:49:00:af:bd:4c:85:63:7e:
                    eb:b4:2f:9f:3d:8c:22:1d:c1:63:4c:a8:a5:21:9c:
                    0a:bc:18:24:b0:cd:db:de:38:4d:dc:6b:57:16:03:
                    1a:90:85:91:a4:66:bf:55:58:69:e8:26:c3:51:f7:
                    61:cf:31:d9:85:09:f7:92:94:12:97:dc:75:06:83:
                    e5:31:74:f8:c5:0b:32:85:b4:f5:47:ea:c7:29:13:
                    23:b8:fb:26:2b:85:ce:44:ef:9c:33:88:b0:02:1b:
                    43:71:43:5a:c9:7c:ad:a8:c5:1a:0d:9a:ed:30:e9:
                    e1:b4:e6:0e:0f:04:ca:1f:26:61:6e:51:db:ac:b3:
                    57:2c:56:b1:60:03:f0:7c:14:b5:4e:cf:19:ae:0b:
                    7e:f1:19:90:3f:e9:5e:b5:5f:89:29:5e:82:cf:7d:
                    8c:0f:ee:a2:28:e2:ca:93:f3:ab:b6:71:e9:f0:7c:
                    81:80:06:8f:a9:15:20:79:7c:6a:36:48:3d:39:83:
                    6a:96:fc:c8:c3:55:03:5d:32:90:bf:4b:b9:ec:7b:
                    ce:f7:b0:8f:fa:a4:a1:ef:d0:95:ec:24:62:65:ad:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3E:AD:C0:4F:29:89:B1:1C:A7:61:B1:5A:4A:46:C4:BB:EE:45:92
            X509v3 Authority Key Identifier:
                keyid:A7:36:CF:F1:94:87:40:61:4D:03:21:E6:3B:84:03:EB:9A:B9:74:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/pzbP8ZSHQGFNAyHmO4QD65q5dI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/pzbP8ZSHQGFNAyHmO4QD65q5dI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCHENTEK/Lz6twE8pibEcp2GxWkpGxLvuRZI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:c9:02:d4:c6:aa:9a:9a:7d:7d:73:a6:f2:45:03:a7:c5:19:
         71:45:31:52:db:89:b9:5d:71:18:58:12:64:3a:ed:79:9a:e1:
         98:88:0f:00:83:11:08:28:ae:88:f2:82:ca:2f:5a:aa:9c:0f:
         43:07:02:60:4b:5d:79:b4:da:e3:f2:35:c9:4d:2c:10:6d:39:
         c2:37:91:72:2a:6f:91:ed:e5:11:c2:61:02:8a:e5:33:2e:66:
         72:d2:e1:c2:2c:ab:54:0c:1e:5d:c5:f5:a0:52:d0:a7:5c:8d:
         38:b9:0f:71:29:e2:2f:78:08:db:33:e4:f9:77:70:cc:49:03:
         a5:b1:42:31:d4:08:24:00:8f:c2:a0:71:14:9e:42:5b:39:aa:
         ef:37:8d:1a:4b:e9:e1:0e:10:29:43:50:26:67:ce:71:07:77:
         8b:d8:5d:68:45:ed:71:e4:56:e1:81:bd:14:6e:fa:d0:ae:4e:
         69:1b:fd:31:10:dc:3c:fc:d6:20:86:66:60:49:fd:92:eb:3a:
         25:31:25:a0:59:71:bd:93:a0:cb:fd:97:cb:4e:28:5c:55:f8:
         f3:8b:dc:36:7f:e9:9e:bf:18:c7:0f:25:e3:de:f5:11:bd:99:
         12:a7:6f:82:c8:60:06:66:a9:d3:0f:33:08:73:3b:ab:bb:01:
         37:fa:dd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:17:11 2026 by rpki-client