Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa
File:                     323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa (raw, json)
Hash identifier:          NGp60z3Cs5J1MqqhHfuGriiby6iLCjVSyzM4a3MR+jI=
Subject key identifier:   BB:7A:19:3E:51:B9:C1:37:02:B5:41:33:FD:7C:2E:CF:77:5F:E6:06
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       2664540566AB9F86163D9795143AF12905658B14
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa
Signing time:             Mon 11 May 2026 17:58:36 +0000
ROA not before:           Mon 11 May 2026 17:53:36 +0000
ROA not after:            Mon 10 May 2027 17:58:36 +0000
asID:                     216198
IP address blocks:        2402:43e0:9000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:64:54:05:66:ab:9f:86:16:3d:97:95:14:3a:f1:29:05:65:8b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: May 11 17:53:36 2026 GMT
            Not After : May 10 17:58:36 2027 GMT
        Subject: CN=BB7A193E51B9C13702B54133FD7C2ECF775FE606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:21:a2:23:8e:81:ed:83:d1:89:ff:6d:5c:
                    68:73:01:a2:15:5f:01:05:9d:fc:04:c2:01:3a:61:
                    5c:08:99:db:71:57:83:f3:cc:ab:6b:d1:ba:1e:7c:
                    f1:dd:b7:d1:a9:72:b5:fe:32:df:3f:ae:24:2e:57:
                    8e:1a:c4:01:71:5c:48:24:44:6a:27:bb:1a:24:d6:
                    f5:6b:60:31:74:3c:89:60:1d:91:1a:a6:5d:ee:16:
                    4c:dc:72:10:94:bd:c8:fc:9a:0d:62:08:c2:8a:bf:
                    e2:1f:89:fd:8e:85:69:a3:50:16:7d:6e:07:f7:e4:
                    42:05:aa:7d:68:76:57:92:fc:ea:7c:b5:46:28:c2:
                    28:2a:2b:3c:33:30:b2:12:b4:88:dd:cb:7a:0d:d7:
                    f8:3c:5c:26:4d:ce:f6:e8:9f:39:2c:bf:c1:c9:ff:
                    ce:77:16:d9:ea:56:14:2d:5e:52:ec:3e:a0:e2:67:
                    cb:20:5d:80:bc:b9:12:1f:52:53:df:32:d9:e9:88:
                    23:7b:62:72:fe:3d:dd:99:5f:26:84:5e:30:3c:54:
                    07:f9:bb:52:32:e7:ea:56:bb:d6:d0:70:8c:29:17:
                    26:c6:bc:bf:54:95:3a:e2:ad:a7:15:d3:b0:19:b2:
                    ee:4a:c1:be:e7:6f:7c:d3:fd:df:7b:e0:8b:3b:db:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7A:19:3E:51:B9:C1:37:02:B5:41:33:FD:7C:2E:CF:77:5F:E6:06
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a393030303a3a2f34382d3634203d3e20323136313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:20:8a:ea:68:6a:65:19:39:95:cc:e2:3c:86:ea:c5:fa:51:
         d9:96:ee:fd:a4:aa:23:88:a1:d0:fb:00:79:6a:98:0f:40:1d:
         13:1e:8e:e4:c3:51:25:50:bc:07:19:66:3f:53:d8:43:42:4a:
         01:31:24:9c:8d:14:ca:c1:45:d0:1e:f6:b5:a7:15:f4:f0:87:
         d3:bb:cc:a9:51:04:c4:b2:62:00:88:5e:e8:15:12:dc:e5:cc:
         65:49:e5:cd:6e:74:83:6a:82:f8:8c:f4:8d:e3:21:ca:47:4d:
         08:bb:a4:e1:30:df:c8:ae:a1:65:fb:94:c9:0e:bb:ef:a4:e7:
         36:d9:57:ea:4a:17:1a:e3:e9:97:07:cd:74:fd:83:76:28:73:
         52:14:af:8c:5b:c8:5e:ab:95:51:0e:58:ab:b1:f7:56:22:52:
         f4:39:89:8c:9e:4e:78:68:54:f8:4c:d3:84:24:e5:9f:c6:07:
         36:a7:a0:87:a9:f2:ae:60:8c:dd:5b:18:f7:32:cf:0e:fd:f6:
         22:14:7c:88:e1:9b:4c:8b:c9:22:be:b8:17:74:30:1c:44:72:
         39:c2:2b:41:80:90:2c:82:75:49:c5:52:90:d9:fb:b5:ab:17:
         ce:72:08:2c:d0:ef:0f:c0:65:e7:84:0a:a9:72:9c:46:3f:88:
         bf:ef:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:35 2026 by rpki-client