Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa
File:                     323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa (raw, json)
Hash identifier:          SVU/7dRIRRTqOjWn38YZEpKVNXmqhmDjcJRKxeeNSeU=
Subject key identifier:   6E:1C:16:08:83:E6:A8:00:4F:1A:2F:C7:B7:92:1C:E0:02:B2:DC:F9
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       1B361EAA8AC5015DDF82EFAA8E2865D7753EF0B4
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa
Signing time:             Mon 24 Aug 2026 10:24:02 +0000
ROA not before:           Mon 24 Aug 2026 10:19:02 +0000
ROA not after:            Mon 23 Aug 2027 10:24:02 +0000
asID:                     216198
IP address blocks:        2402:43e0:eee1::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 10:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:36:1e:aa:8a:c5:01:5d:df:82:ef:aa:8e:28:65:d7:75:3e:f0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Aug 24 10:19:02 2026 GMT
            Not After : Aug 23 10:24:02 2027 GMT
        Subject: CN=6E1C160883E6A8004F1A2FC7B7921CE002B2DCF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dd:48:66:2d:da:a1:3b:4c:d1:b2:cc:4b:ff:
                    3a:e2:88:2c:7e:24:8d:92:74:25:ab:6f:97:92:37:
                    c3:f0:7e:be:0f:1f:5d:3b:42:c5:8c:35:49:26:71:
                    6f:a8:44:7c:6f:3e:28:ac:c3:3b:46:24:58:3d:8a:
                    e3:04:33:ef:ec:89:91:ed:9f:b2:cf:f8:77:7b:00:
                    1c:08:0d:32:a5:ab:40:79:39:66:07:a1:30:46:7b:
                    a1:ac:b8:70:bb:60:ac:a1:cd:3c:51:1c:63:ad:a8:
                    0e:5f:14:e3:85:50:7c:f8:08:d4:73:6f:46:15:5a:
                    d3:17:33:3e:04:15:a7:39:82:6a:12:ca:59:3f:88:
                    ec:af:00:e2:99:73:09:f0:ef:76:34:16:64:e5:9f:
                    7b:de:bc:71:8a:69:c5:44:26:89:13:f7:d9:df:24:
                    f3:f4:31:33:c3:ee:81:18:f6:75:18:36:4a:24:b0:
                    13:de:89:c3:fb:d5:8d:a3:50:b4:1e:5b:be:fa:21:
                    b3:d1:96:22:f7:e6:dc:34:17:74:8a:a2:a9:02:2b:
                    b6:9f:f0:2f:ca:29:1a:4f:74:e2:23:34:ae:62:30:
                    7a:a1:77:99:72:3b:de:96:0c:65:19:b1:fe:b0:9b:
                    e0:b5:be:b6:c7:54:0e:af:05:df:e8:1a:47:69:ce:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1C:16:08:83:E6:A8:00:4F:1A:2F:C7:B7:92:1C:E0:02:B2:DC:F9
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a656565313a3a2f34382d3634203d3e20323136313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:eee1::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:65:9c:6b:87:95:c9:28:40:80:11:31:91:df:fc:6b:b9:87:
         cd:5d:db:bf:a2:51:83:05:62:81:eb:1b:5d:d0:fc:47:1c:f0:
         f1:76:1b:7c:8f:02:14:df:2a:1e:4c:52:88:a8:07:02:dc:30:
         20:78:72:4a:b7:de:d7:0c:bd:a9:f1:4e:4a:31:45:22:b4:53:
         e3:b9:e6:5a:c9:fb:c3:8e:38:84:57:63:cf:46:5b:49:84:6e:
         60:ec:ea:66:f9:c9:0e:86:71:99:1e:40:10:05:92:63:73:93:
         6e:d6:fc:e9:01:48:29:2e:f1:c1:dc:e0:0a:3b:1e:bb:b7:ea:
         c5:67:2b:58:df:48:96:eb:59:e8:4a:00:17:39:e7:36:38:83:
         1b:85:5c:89:91:1c:a2:9f:de:5c:98:73:32:c6:b6:25:c1:2e:
         79:8a:e6:0b:97:32:3a:23:0c:38:c9:e1:c4:56:30:5b:d8:15:
         aa:70:32:34:18:c3:c7:de:2d:ec:d6:2a:45:27:53:ce:ad:ae:
         a1:2b:c8:b8:24:b4:2a:1a:9f:05:58:bd:d0:34:e3:1c:e1:0c:
         9d:4c:4c:2c:a2:29:aa:ae:7c:8f:bd:36:9c:e7:43:e4:17:7b:
         60:c8:3e:aa:11:33:01:c2:94:ac:48:eb:a2:1b:ea:25:a2:90:
         c5:ed:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:42 2026 by rpki-client