Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCHENTEK/0/3130332e33362e32342e302f32342d3234203d3e203233343536.roa
File:                     3130332e33362e32342e302f32342d3234203d3e203233343536.roa (raw, json)
Hash identifier:          p/w43y2DPRvlMQR+IzDyNE2Tat+jQWqMf06/CS3XHqI=
Subject key identifier:   25:28:9F:2E:5C:89:DD:CD:B8:85:4A:12:6D:F2:9F:56:5E:B8:AB:BD
Certificate issuer:       /CN=540D5EB957E44D80783D8B880FD2A47A69077A24
Certificate serial:       58584202F4CD720246D6B17CD4365BF31EFECCDE
Authority key identifier: 54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/3130332e33362e32342e302f32342d3234203d3e203233343536.roa
Signing time:             Thu 14 May 2026 10:04:58 +0000
ROA not before:           Thu 14 May 2026 09:59:58 +0000
ROA not after:            Thu 13 May 2027 10:04:58 +0000
asID:                     23456
IP address blocks:        103.36.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl
                          rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:42:02:f4:cd:72:02:46:d6:b1:7c:d4:36:5b:f3:1e:fe:cc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D5EB957E44D80783D8B880FD2A47A69077A24
        Validity
            Not Before: May 14 09:59:58 2026 GMT
            Not After : May 13 10:04:58 2027 GMT
        Subject: CN=25289F2E5C89DDCDB8854A126DF29F565EB8ABBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:e0:35:ed:d7:d6:7b:c6:e1:47:b6:9b:42:
                    2f:e5:4f:ef:ec:13:04:9b:89:ed:b0:17:c8:23:30:
                    3c:ef:f0:8a:3e:f5:7c:0b:69:cb:71:b9:7e:66:5e:
                    ac:d3:25:1d:82:cb:5e:1e:35:e7:75:a7:56:76:aa:
                    51:77:d5:3c:76:e5:78:fa:9e:99:2a:24:de:27:e2:
                    35:aa:1e:ae:55:60:6d:2a:52:23:c3:99:cf:16:90:
                    fe:cd:3c:70:c8:b7:50:6d:0f:e5:aa:af:bb:6c:12:
                    34:a9:2d:7f:82:50:28:24:6b:88:5e:92:73:91:9e:
                    03:ab:8c:d3:91:d0:e8:9d:8e:56:8e:de:e3:6b:7c:
                    e4:2d:5a:39:f4:64:98:73:78:46:ad:0e:ab:aa:43:
                    6c:f2:78:04:f3:8b:0e:84:dd:98:61:41:63:c2:86:
                    4d:bf:86:0d:19:a3:38:3b:b7:01:73:d2:b6:4c:f9:
                    63:ce:c7:1a:20:54:41:3e:29:ef:2f:93:91:ce:a2:
                    48:ac:65:14:b7:10:cd:fa:33:50:57:40:18:ce:dc:
                    63:36:39:e1:cb:15:ae:d1:d3:d8:65:2d:d3:10:2b:
                    95:6c:e3:25:c1:5d:4a:7f:5f:16:49:ce:f3:ae:94:
                    61:e7:0e:5e:b5:7a:88:6c:c6:c3:31:31:03:a1:72:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:28:9F:2E:5C:89:DD:CD:B8:85:4A:12:6D:F2:9F:56:5E:B8:AB:BD
            X509v3 Authority Key Identifier:
                keyid:54:0D:5E:B9:57:E4:4D:80:78:3D:8B:88:0F:D2:A4:7A:69:07:7A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/540D5EB957E44D80783D8B880FD2A47A69077A24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/540D5EB957E44D80783D8B880FD2A47A69077A24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCHENTEK/0/3130332e33362e32342e302f32342d3234203d3e203233343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e5:eb:86:98:e7:f6:39:48:83:72:76:e7:9f:b2:bf:fc:de:
         9f:5a:7d:34:d5:55:cb:23:d1:81:a4:5d:5b:d2:a1:97:45:ef:
         e3:53:8e:31:aa:b5:1a:de:58:fb:ce:59:95:de:f1:0e:71:32:
         1e:e4:a7:5d:73:0f:5f:cb:c9:d2:ad:97:cd:b2:dd:d0:94:35:
         71:dd:af:f1:f8:89:9d:43:23:ca:89:96:78:d0:05:f1:97:a3:
         59:40:e8:55:f1:f9:9f:52:78:d1:ec:55:73:b0:ad:80:45:75:
         17:f0:92:ce:46:7a:e0:90:1a:86:3c:45:a3:f7:c3:69:5f:74:
         bf:93:c7:4c:66:75:60:dc:2a:b3:09:c9:df:7a:12:69:4a:47:
         87:43:aa:b2:53:44:7f:b4:15:39:5b:83:8e:f4:09:f6:7b:c8:
         15:de:95:80:9f:b3:56:02:a9:95:b2:e2:28:57:23:7f:a6:fd:
         f5:5f:3a:26:47:05:e6:c7:3c:e0:f5:0c:fc:ea:a5:6b:6e:a9:
         bd:b4:85:d3:57:a7:4f:18:42:61:d0:b0:64:69:01:78:52:80:
         0b:e8:d7:4d:27:6f:2c:32:de:7d:03:7f:21:97:e5:00:9d:ba:
         07:f2:1b:3e:14:f1:8a:27:d3:ca:31:a4:d4:9c:68:1e:32:0d:
         36:e6:fe:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:47 2026 by rpki-client