Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa
File:                     323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (raw, json)
Hash identifier:          LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=
Subject key identifier:   F8:B7:25:46:51:BD:8D:37:75:91:AC:D9:B2:ED:BD:95:13:28:93:06
Certificate issuer:       /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial:       09A31451C9A45E209FB547D69F4FA1C5042A17FE
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASNET/0/323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa
Signing time:             Mon 11 May 2026 17:32:40 +0000
ROA not before:           Mon 11 May 2026 17:27:40 +0000
ROA not after:            Mon 10 May 2027 17:32:40 +0000
asID:                     18217
IP address blocks:        2001:c08:ffff:ffff:ffff:ffff:fffa:800/119 maxlen: 119
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl
                          rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a3:14:51:c9:a4:5e:20:9f:b5:47:d6:9f:4f:a1:c5:04:2a:17:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
        Validity
            Not Before: May 11 17:27:40 2026 GMT
            Not After : May 10 17:32:40 2027 GMT
        Subject: CN=F8B7254651BD8D377591ACD9B2EDBD9513289306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:20:f3:b5:71:d5:93:cb:87:bc:4c:2f:46:
                    dc:d3:a0:75:6f:3f:4b:1d:34:7b:04:db:8d:bb:ae:
                    cb:00:ac:4c:83:43:8b:8d:32:13:dd:9b:57:c0:81:
                    4e:f0:72:ab:3e:80:f9:e6:b0:35:a2:02:81:98:48:
                    c4:36:81:1a:a1:6d:81:73:ab:d1:44:0d:d2:e3:b7:
                    53:af:f7:73:23:8f:4b:08:34:4d:9a:d5:f5:cc:f6:
                    de:66:01:e7:8d:e5:86:96:de:65:5c:67:31:f5:3b:
                    cb:89:af:f4:9c:c3:63:39:30:ed:c1:69:58:42:63:
                    f9:0e:d9:e6:f8:70:28:b1:02:d9:d2:ec:93:2c:7e:
                    2e:a9:79:3f:b6:cd:fc:73:7d:7d:0c:80:b3:48:0a:
                    ca:7b:70:11:64:d5:c7:15:c2:b9:c3:f9:a1:f6:19:
                    5a:3c:67:6b:1c:9b:77:7f:87:88:e9:1d:9c:bd:3f:
                    e7:2e:de:44:02:53:59:97:f1:a4:e4:9b:70:63:b5:
                    d3:1d:34:a2:3b:bf:06:03:2b:5f:0f:bd:d9:4f:e5:
                    dc:40:ef:cf:7b:9c:c7:54:57:e7:1e:76:a4:02:b8:
                    3d:7a:ec:86:94:70:b1:00:0c:ee:a5:94:be:af:8a:
                    a5:a7:b4:bb:15:25:70:37:8b:ca:44:8c:c8:4f:e7:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:25:46:51:BD:8D:37:75:91:AC:D9:B2:ED:BD:95:13:28:93:06
            X509v3 Authority Key Identifier:
                keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c08:ffff:ffff:ffff:ffff:fffa:800/119

    Signature Algorithm: sha256WithRSAEncryption
         47:82:22:80:ab:a2:bb:f8:03:a5:52:ce:03:fd:37:7f:93:69:
         53:17:2f:fe:46:1f:19:6a:50:6a:4e:f4:24:06:4e:d9:7b:90:
         d2:eb:0b:b9:98:75:54:5d:bc:33:e3:7d:cb:98:57:7f:74:33:
         41:cc:b0:f7:65:ec:0d:61:07:c0:26:c8:90:c8:b2:5d:30:0a:
         b9:3a:29:8a:b1:54:53:55:d8:a3:d5:6a:e9:57:e5:32:a3:93:
         79:6c:9a:f8:e8:7d:ef:5e:10:9a:ec:38:40:22:09:fc:83:b8:
         23:db:46:10:fe:5d:b3:d6:69:b4:25:b0:4d:09:d8:78:e8:0b:
         11:0b:8c:e2:56:e6:5e:46:ba:c0:da:ce:1f:f8:cf:58:a8:52:
         a5:1c:54:67:f0:e7:5d:95:1c:b6:12:84:78:6b:36:a2:8b:bb:
         e6:92:89:7b:eb:9f:7a:ea:47:eb:b9:09:2a:ee:d4:dc:0a:88:
         83:16:12:17:a0:17:1c:7c:6d:a8:0a:d2:05:da:d3:fb:54:61:
         82:50:80:53:c7:51:f2:8c:8d:1d:38:f1:38:ec:48:eb:27:c6:
         cf:0f:7e:68:01:31:34:a4:06:d9:3c:63:89:63:3d:16:a5:1c:
         f6:d4:b5:6d:39:2d:f9:3c:8c:19:7b:5d:5a:99:50:a3:98:c6:
         11:d6:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:30 2026 by rpki-client