Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASSMAU/0/323430333a386563303a313a3a2f34382d3438203d3e203338323534.roa
File:                     323430333a386563303a313a3a2f34382d3438203d3e203338323534.roa (raw, json)
Hash identifier:          AzyDnhzsqq4wmxv5aUa845dEHPvn3Zv7uqIhjdG/Lp0=
Subject key identifier:   A7:07:45:78:CD:70:48:B0:5D:2F:5D:91:33:85:9A:4A:52:C7:3A:26
Certificate issuer:       /CN=E812027AE484273C81255DEF31441251E758ED82
Certificate serial:       74BDBD6DB6DC03B7CF5BDDBADBC3286BDC4AE4E0
Authority key identifier: E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASSMAU/0/323430333a386563303a313a3a2f34382d3438203d3e203338323534.roa
Signing time:             Mon 11 May 2026 17:38:05 +0000
ROA not before:           Mon 11 May 2026 17:33:05 +0000
ROA not after:            Mon 10 May 2027 17:38:05 +0000
asID:                     38254
IP address blocks:        2403:8ec0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl
                          rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:bd:6d:b6:dc:03:b7:cf:5b:dd:ba:db:c3:28:6b:dc:4a:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E812027AE484273C81255DEF31441251E758ED82
        Validity
            Not Before: May 11 17:33:05 2026 GMT
            Not After : May 10 17:38:05 2027 GMT
        Subject: CN=A7074578CD7048B05D2F5D9133859A4A52C73A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:72:1c:07:c1:8d:0f:61:df:c8:ee:6d:3a:
                    37:f1:4b:c1:19:93:ab:ef:ee:b4:dc:3b:a0:11:7d:
                    52:25:d5:e3:bb:c5:bf:f4:81:45:89:b3:3a:a3:ec:
                    29:09:28:3e:67:df:7a:53:73:44:2c:89:b5:f6:72:
                    42:4a:55:2a:e2:5a:ef:e7:81:95:3e:ee:cf:ef:4f:
                    29:87:5c:b3:9b:9e:2b:b7:b1:6f:8c:73:59:e3:88:
                    00:05:3b:bb:0f:88:ce:65:69:2e:46:ef:41:6b:9e:
                    7b:0d:11:7b:b6:2c:1a:ac:5e:52:70:9a:d9:f4:4c:
                    63:45:3b:40:8a:54:9b:7a:5f:ab:38:72:69:d0:ce:
                    35:df:4b:aa:3c:97:67:58:b4:29:b9:d7:d7:61:17:
                    f8:3e:82:31:20:ed:6d:5c:52:c5:1d:17:a2:5c:a8:
                    a1:b3:8d:f6:27:53:19:6a:90:09:ec:de:38:c6:56:
                    da:0d:d6:bb:96:d0:8b:47:a1:c7:c0:2a:bd:88:6c:
                    11:c6:31:ee:06:88:00:98:56:6a:06:c7:1a:e2:a4:
                    15:09:48:85:2a:d9:d9:38:0e:b0:04:e1:c9:9c:00:
                    a7:06:8a:55:02:a4:62:9b:a8:75:c3:a2:6c:9f:3b:
                    85:7d:3e:4d:ae:e1:7b:10:fd:d8:62:f5:cd:de:b5:
                    fe:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:07:45:78:CD:70:48:B0:5D:2F:5D:91:33:85:9A:4A:52:C7:3A:26
            X509v3 Authority Key Identifier:
                keyid:E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/323430333a386563303a313a3a2f34382d3438203d3e203338323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8ec0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:57:25:ad:3b:0c:d4:09:10:2e:6e:a5:7f:0b:9e:34:a7:a4:
         e6:bf:69:6e:73:13:05:85:7f:cd:cd:9e:08:ee:44:d9:73:69:
         06:b8:63:f4:6f:98:4b:b3:3d:74:74:2b:e6:da:a8:6f:4b:66:
         c1:b2:f5:91:82:a8:b1:ab:a4:f9:02:bc:48:2d:0f:28:7d:95:
         db:8c:ba:61:69:2c:b6:47:e4:a5:62:e2:2e:a4:2f:f3:a0:11:
         28:1b:2e:60:e7:d3:5f:e0:7f:3b:4d:4f:e4:2a:7c:70:7d:cf:
         e4:92:f4:f2:9e:a8:5d:0f:36:34:0c:e2:42:83:5a:02:37:ec:
         a7:54:6f:65:8e:43:15:73:63:08:ec:ff:8d:b4:8e:66:d7:9f:
         b4:8c:72:5e:48:56:f9:78:52:84:12:41:3d:41:6d:e3:8a:34:
         13:00:2b:a4:d2:81:40:a0:9e:a3:d8:a1:3b:a8:fa:1f:a3:7a:
         ee:eb:fd:37:83:eb:81:cd:d6:43:36:28:e5:5d:01:11:e1:7f:
         5a:be:4e:a1:5c:99:77:b8:4a:36:38:02:c8:e6:a4:97:e5:4e:
         05:6c:2f:d4:c8:62:f2:3b:2b:6a:fd:7f:9b:e1:e9:be:9b:48:
         aa:72:20:57:29:ca:d8:86:6e:d7:b4:14:94:8e:bc:5e:7c:27:
         50:2e:20:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:14 2026 by rpki-client