Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TYCATV/0/3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa
File:                     3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (raw, json)
Hash identifier:          2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=
Subject key identifier:   CB:B9:F5:CD:76:03:FA:B3:60:FB:D5:70:DD:17:1D:CD:11:A5:BB:1E
Certificate issuer:       /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial:       31DB04DFB0FE3FE0E933318FF9F69A1EA83CCA5B
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TYCATV/0/3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa
Signing time:             Mon 11 May 2026 17:18:44 +0000
ROA not before:           Mon 11 May 2026 17:13:44 +0000
ROA not after:            Mon 10 May 2027 17:18:44 +0000
asID:                     9676
IP address blocks:        203.111.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
                          rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:db:04:df:b0:fe:3f:e0:e9:33:31:8f:f9:f6:9a:1e:a8:3c:ca:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
        Validity
            Not Before: May 11 17:13:44 2026 GMT
            Not After : May 10 17:18:44 2027 GMT
        Subject: CN=CBB9F5CD7603FAB360FBD570DD171DCD11A5BB1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3c:09:89:1e:e1:5f:d2:1d:5f:53:32:37:22:
                    b4:59:40:b0:f0:56:47:55:2f:2c:8e:01:c8:33:97:
                    fd:d5:c9:95:72:bf:8c:4b:ab:2b:b3:aa:2b:82:4b:
                    e3:52:94:0e:18:a5:5d:c9:27:5b:da:96:47:ca:bf:
                    03:4a:c9:3b:60:8d:a0:0a:e8:a9:4e:2a:85:2e:63:
                    2c:51:00:78:d5:10:fa:41:76:b1:5f:74:0a:95:f2:
                    87:28:57:01:1c:15:88:f7:93:f2:3f:a6:71:cf:2a:
                    ca:bf:d1:fc:e1:d9:a1:6f:9a:5e:0b:cc:14:2c:8b:
                    f0:cf:92:f4:0a:c2:d6:86:0d:e3:ae:11:3b:e2:ce:
                    a3:8a:c0:75:dc:5e:77:56:2b:77:18:da:79:65:79:
                    3a:50:0b:21:0c:ae:89:9f:06:3c:43:d8:53:5a:72:
                    b1:9d:bd:16:2a:c9:3a:56:d0:e2:1a:fe:af:20:24:
                    67:ec:0b:64:54:18:1a:df:03:9a:34:8d:20:6e:88:
                    41:da:85:8f:53:95:2b:f1:b1:29:d2:aa:a0:8d:69:
                    46:4b:d3:00:a5:ef:5f:5a:59:4c:90:73:b4:c5:1a:
                    aa:be:8b:40:6b:97:29:b2:54:aa:e0:d1:ce:bb:0e:
                    df:13:c1:34:fe:95:68:09:2c:d4:b5:1e:3b:24:1b:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B9:F5:CD:76:03:FA:B3:60:FB:D5:70:DD:17:1D:CD:11:A5:BB:1E
            X509v3 Authority Key Identifier:
                keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.111.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:27:61:b7:a1:7f:b0:ad:5f:64:f6:f0:60:81:14:f7:80:dc:
         be:60:88:b7:d2:3d:b7:04:ca:62:95:d6:f7:6d:ac:ab:60:e8:
         10:ce:1a:0c:b8:26:7a:a2:89:b4:63:ef:e9:57:64:71:66:34:
         32:a6:94:e6:83:e3:dd:33:39:93:7b:fa:b9:70:ed:4f:ba:35:
         aa:9d:a9:c4:ec:e9:ae:93:51:32:9e:71:80:09:ca:a2:70:8d:
         5b:97:ea:2c:38:81:a2:05:f0:bd:16:24:d5:d2:0a:d9:9b:77:
         4e:41:4f:f4:6d:d6:3d:3d:5f:65:c5:95:38:01:7a:2b:f2:4a:
         a3:93:74:40:e6:67:a1:3f:53:d7:a2:26:47:da:88:f2:ab:19:
         96:60:63:7c:01:25:07:1f:88:21:c2:c2:97:ba:35:2a:45:0c:
         cf:fa:98:af:51:a7:be:0b:31:45:77:2e:ab:1f:7c:80:6a:4f:
         b9:35:85:d3:12:d5:ea:16:e5:ed:c1:6c:a2:ee:4a:f3:c6:61:
         1d:91:75:16:78:80:e6:26:27:1c:f7:9b:54:c8:a8:15:90:d1:
         16:cd:99:be:59:4e:5e:79:b2:a6:1e:f6:c6:8d:4d:d6:f4:e6:
         fb:a6:5f:04:06:c5:1e:27:91:89:58:2f:37:7f:fa:83:0d:e7:
         5f:be:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:38:01 2026 by rpki-client