Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/323430303a633965303a3a2f33322d3438203d3e20313334383233.roa
File:                     323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (raw, json)
Hash identifier:          tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=
Subject key identifier:   77:D5:58:67:4C:4D:27:72:4D:6E:F6:17:B3:31:C6:29:37:10:ED:D1
Certificate issuer:       /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
Certificate serial:       26003F5C0A85DEB957806B084E2F498D02396308
Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/323430303a633965303a3a2f33322d3438203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:26:51 +0000
ROA not before:           Mon 11 May 2026 17:21:51 +0000
ROA not after:            Mon 10 May 2027 17:26:51 +0000
asID:                     134823
IP address blocks:        2400:c9e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl
                          rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:00:3f:5c:0a:85:de:b9:57:80:6b:08:4e:2f:49:8d:02:39:63:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B
        Validity
            Not Before: May 11 17:21:51 2026 GMT
            Not After : May 10 17:26:51 2027 GMT
        Subject: CN=77D558674C4D27724D6EF617B331C6293710EDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:b9:8d:72:21:16:85:dc:d4:a2:ea:61:9a:
                    73:b0:42:a8:20:36:6e:a1:ea:07:7b:f0:08:ec:8a:
                    9f:e9:18:fa:c6:02:14:f6:b9:53:45:1b:83:3c:d5:
                    87:7f:11:2f:10:ae:ec:7c:52:02:bb:42:0f:75:81:
                    e1:50:5d:45:56:7c:76:e1:b3:71:1b:69:c0:ef:57:
                    ca:c0:e2:bc:2c:6c:21:1e:27:fe:a3:7a:54:70:b3:
                    29:59:18:ef:20:29:a9:39:1f:0f:3f:7f:90:d5:c2:
                    6c:d1:5d:6d:26:4d:f9:f3:34:0e:31:4a:c8:61:3d:
                    8b:83:8a:65:bd:e2:4f:14:8d:4c:ad:a5:ee:79:dd:
                    af:94:a2:e5:b6:b7:c4:bf:6f:73:20:f1:83:7f:ca:
                    a8:cd:df:8b:00:24:fb:32:9a:f4:64:d9:75:3a:73:
                    bc:d0:94:6d:ef:a8:8c:fe:f7:80:0d:d7:72:f1:48:
                    2d:c8:3f:24:7c:cb:21:db:e2:d2:1e:ac:a6:4f:7c:
                    b2:8e:5d:c8:db:af:6c:da:5b:ac:e5:95:fb:ae:26:
                    ce:83:08:4b:67:ec:da:a2:73:c1:eb:4e:4a:88:a7:
                    62:98:26:a4:9c:27:73:12:26:20:6a:2a:36:5b:90:
                    ea:d6:30:0b:8c:78:b1:35:2c:0a:10:e8:3d:50:08:
                    d2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:58:67:4C:4D:27:72:4D:6E:F6:17:B3:31:C6:29:37:10:ED:D1
            X509v3 Authority Key Identifier:
                keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/323430303a633965303a3a2f33322d3438203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:27:93:04:0f:34:f9:e8:1c:d4:6e:65:0d:6c:84:c6:98:
         0e:cc:2e:c5:d9:b1:72:cd:fc:ad:34:80:8d:f6:23:81:ac:db:
         24:71:47:06:d0:8f:cb:c3:fd:f4:07:3c:ab:d0:6a:7f:3b:70:
         3d:43:66:01:9a:7c:46:94:2a:bf:84:26:af:d3:15:b4:a8:a1:
         59:df:2a:11:3d:60:22:e0:51:fb:c3:20:10:08:43:8b:07:17:
         dd:80:d5:ed:5d:06:e7:c9:9d:0d:65:c5:9c:d8:b7:10:fb:84:
         f9:0f:84:8d:5b:29:72:b1:fa:ce:94:8b:da:06:de:bb:e9:ba:
         9b:c6:e2:df:fa:08:55:80:bf:e3:a8:e6:39:64:d3:78:5f:72:
         d2:37:96:77:30:80:69:b1:df:c2:fe:fb:06:ab:06:6b:4a:f6:
         af:b2:87:b3:1b:4c:d1:2d:6e:f1:ef:2d:c3:d3:16:70:49:a7:
         24:ed:74:df:53:f5:a0:49:d1:f9:91:da:04:df:91:90:ab:c7:
         76:06:11:17:87:e8:70:7f:68:ec:4a:54:98:ea:cd:41:ae:af:
         3d:71:10:fc:91:6d:fb:91:9b:80:e7:34:d3:6a:42:60:ff:3f:
         8e:48:4f:16:fe:5a:a7:70:7d:14:c7:3b:0d:7e:90:b9:ad:3f:
         97:90:18:c1
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUJgA/XAqF3rlXgGsITi9JjQI5YwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE
RUQ4OEUxQjAeFw0yNjA1MTExNzIxNTFaFw0yNzA1MTAxNzI2NTFaMDMxMTAvBgNV
BAMTKDc3RDU1ODY3NEM0RDI3NzI0RDZFRjYxN0IzMzFDNjI5MzcxMEVERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcLmNciEWhdzUouphmnOwQqgg
Nm6h6gd78Ajsip/pGPrGAhT2uVNFG4M81Yd/ES8Qrux8UgK7Qg91geFQXUVWfHbh
s3EbacDvV8rA4rwsbCEeJ/6jelRwsylZGO8gKak5Hw8/f5DVwmzRXW0mTfnzNA4x
SshhPYuDimW94k8UjUytpe553a+UouW2t8S/b3Mg8YN/yqjN34sAJPsymvRk2XU6
c7zQlG3vqIz+94AN13LxSC3IPyR8yyHb4tIerKZPfLKOXcjbr2zaW6zllfuuJs6D
CEtn7Nqic8HrTkqIp2KYJqScJ3MSJiBqKjZbkOrWMAuMeLE1LAoQ6D1QCNKxAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUd9VYZ0xNJ3JNbvYXszHGKTcQ7dEwHwYDVR0j
BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT
SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF
M0MzRjJGRERFRDg4RTFCLmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzNDMw
MzAzYTYzMzk2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzMzM0MzgzMjMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAJADJ4DANBgkqhkiG9w0BAQsFAAOCAQEAk/gnkwQPNPnoHNRu
ZQ1shMaYDswuxdmxcs38rTSAjfYjgazbJHFHBtCPy8P99Ac8q9BqfztwPUNmAZp8
RpQqv4Qmr9MVtKihWd8qET1gIuBR+8MgEAhDiwcX3YDV7V0G58mdDWXFnNi3EPuE
+Q+EjVspcrH6zpSL2gbeu+m6m8bi3/oIVYC/46jmOWTTeF9y0jeWdzCAabHfwv77
BqsGa0r2r7KHsxtM0S1u8e8tw9MWcEmnJO1031P1oEnR+ZHaBN+RkKvHdgYRF4fo
cH9o7EpUmOrNQa6vPXEQ/JFt+5GbgOc002pCYP8/jkhPFv5ap3B9FMc7DX6Qua0/
l5AYwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 21:12:22 2026 by rpki-client