Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCETECH/0/323430313a616632303a3431633a3a2f34362d3436203d3e20323130393332.roa
File:                     323430313a616632303a3431633a3a2f34362d3436203d3e20323130393332.roa (raw, json)
Hash identifier:          An9sVDG6DiBw4VN2rrOB/9Iye0iwH8eCyS4QC5qPooM=
Subject key identifier:   C0:A8:E8:E5:54:27:CD:45:00:DA:69:2C:D2:79:69:8B:53:43:A2:94
Certificate issuer:       /CN=300F45147A453EAC44093ADD500AE22112A608EF
Certificate serial:       586F8700374D2CB43905872E7D2DB06A906E25D5
Authority key identifier: 30:0F:45:14:7A:45:3E:AC:44:09:3A:DD:50:0A:E2:21:12:A6:08:EF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCETECH/0/323430313a616632303a3431633a3a2f34362d3436203d3e20323130393332.roa
Signing time:             Sat 24 Oct 2026 14:04:01 +0000
ROA not before:           Sat 24 Oct 2026 13:59:01 +0000
ROA not after:            Sat 23 Oct 2027 14:04:01 +0000
asID:                     210932
IP address blocks:        2401:af20:41c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.crl
                          rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 16:12:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6f:87:00:37:4d:2c:b4:39:05:87:2e:7d:2d:b0:6a:90:6e:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300F45147A453EAC44093ADD500AE22112A608EF
        Validity
            Not Before: Oct 24 13:59:01 2026 GMT
            Not After : Oct 23 14:04:01 2027 GMT
        Subject: CN=C0A8E8E55427CD4500DA692CD279698B5343A294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:1b:ba:73:08:21:8c:55:2a:bd:86:9c:96:
                    0c:47:03:f0:a1:c0:89:47:4d:d8:f3:d1:88:50:6e:
                    69:7b:f4:ee:89:38:fa:c8:90:ed:a0:63:c4:a3:c7:
                    28:60:c1:df:96:b4:c5:29:5c:ae:d5:b4:93:72:6c:
                    ee:03:5a:df:5b:32:ce:80:69:a4:6f:7c:08:81:1f:
                    5d:42:25:ad:f3:43:2b:02:92:b0:50:39:b9:dc:42:
                    9f:a8:92:20:ce:70:9d:5d:f8:cd:f3:82:f6:36:03:
                    4e:45:13:d9:e7:03:b8:74:a4:0a:4d:09:e3:1f:83:
                    8c:20:42:b4:a7:2e:da:60:91:07:c1:32:9f:dc:e6:
                    9a:87:93:f8:1f:9b:5d:02:05:5a:8e:21:5b:f2:68:
                    de:5e:6b:23:4d:c4:a4:d3:a5:93:3b:0e:4c:83:c1:
                    1c:26:2d:14:c2:52:d9:87:31:46:1a:ad:11:4d:fe:
                    1f:f9:e6:45:ec:7b:e6:79:34:3e:c3:9e:54:cc:8b:
                    0d:ed:d9:44:1d:be:69:49:24:cd:b6:7b:58:ea:d1:
                    20:38:01:b1:bc:50:bb:f0:22:cf:88:ab:ac:54:ba:
                    2a:0d:3c:5f:36:ff:c5:4e:34:1a:69:09:dc:c4:7c:
                    1f:a3:a6:78:89:42:f6:e7:0d:22:36:53:1d:4d:26:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A8:E8:E5:54:27:CD:45:00:DA:69:2C:D2:79:69:8B:53:43:A2:94
            X509v3 Authority Key Identifier:
                keyid:30:0F:45:14:7A:45:3E:AC:44:09:3A:DD:50:0A:E2:21:12:A6:08:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCETECH/0/300F45147A453EAC44093ADD500AE22112A608EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/300F45147A453EAC44093ADD500AE22112A608EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/0/323430313a616632303a3431633a3a2f34362d3436203d3e20323130393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af20:41c::/46

    Signature Algorithm: sha256WithRSAEncryption
         af:40:d2:24:31:45:e4:b1:b1:7b:9a:56:65:2e:c7:08:a8:17:
         67:09:fd:96:af:06:6f:27:1a:24:60:58:17:bb:e0:98:54:ca:
         15:76:5b:5a:6a:10:89:da:bc:80:d0:e7:dd:32:92:1c:1b:cf:
         a9:ef:ea:5f:ea:f4:f9:d7:4c:7c:40:2d:ab:32:a3:10:c1:bd:
         4c:c9:bf:62:a9:c0:4c:e3:71:be:a1:38:99:51:67:63:19:09:
         41:19:f1:9e:1c:c0:e1:8b:1b:f8:c3:b6:34:70:aa:68:13:d2:
         19:85:b4:33:4a:98:c5:38:52:5b:d8:85:59:47:1c:6f:04:9f:
         f7:38:de:e9:ce:dd:3a:42:0d:8c:4b:69:08:27:92:29:9a:a8:
         ab:7d:34:38:f1:fb:67:96:58:9b:8a:2a:a2:29:dd:38:7a:f2:
         eb:a6:e6:b3:16:00:91:91:a6:e4:5e:cd:1b:37:f1:e9:61:50:
         9e:53:25:f7:96:f2:f7:5e:cb:f4:ca:a7:7e:c6:3e:88:0b:30:
         62:fb:3f:32:c0:a0:fd:08:89:dd:82:eb:88:a1:38:c0:63:50:
         03:ea:01:ae:74:17:a1:96:3f:a9:a1:cd:5e:38:db:ca:12:8d:
         5f:44:76:9d:3d:21:0d:01:48:f7:d8:41:6f:af:70:e8:47:ca:
         18:6c:de:03
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUWG+HADdNLLQ5BYcufS2wapBuJdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzAwRjQ1MTQ3QTQ1M0VBQzQ0MDkzQURENTAwQUUyMjEx
MkE2MDhFRjAeFw0yNjEwMjQxMzU5MDFaFw0yNzEwMjMxNDA0MDFaMDMxMTAvBgNV
BAMTKEMwQThFOEU1NTQyN0NENDUwMERBNjkyQ0QyNzk2OThCNTM0M0EyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnnRu6cwghjFUqvYaclgxHA/Ch
wIlHTdjz0YhQbml79O6JOPrIkO2gY8Sjxyhgwd+WtMUpXK7VtJNybO4DWt9bMs6A
aaRvfAiBH11CJa3zQysCkrBQObncQp+okiDOcJ1d+M3zgvY2A05FE9nnA7h0pApN
CeMfg4wgQrSnLtpgkQfBMp/c5pqHk/gfm10CBVqOIVvyaN5eayNNxKTTpZM7DkyD
wRwmLRTCUtmHMUYarRFN/h/55kXse+Z5ND7DnlTMiw3t2UQdvmlJJM22e1jq0SA4
AbG8ULvwIs+Iq6xUuioNPF82/8VONBppCdzEfB+jpniJQvbnDSI2Ux1NJpmdAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUwKjo5VQnzUUA2mks0nlpi1NDopQwHwYDVR0j
BBgwFoAUMA9FFHpFPqxECTrdUAriIRKmCO8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD
SC8wLzMwMEY0NTE0N0E0NTNFQUM0NDA5M0FERDUwMEFFMjIxMTJBNjA4RUYuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMzAwRjQ1MTQ3QTQ1M0VBQzQ0MDkzQURENTAw
QUUyMjExMkE2MDhFRi5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DQ0VURUNILzAvMzIzNDMwMzEz
YTYxNjYzMjMwM2EzNDMxNjMzYTNhMmYzNDM2MmQzNDM2MjAzZDNlMjAzMjMxMzAz
OTMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwIkAa8gBBwwDQYJKoZIhvcNAQELBQADggEBAK9A0iQx
ReSxsXuaVmUuxwioF2cJ/ZavBm8nGiRgWBe74JhUyhV2W1pqEInavIDQ590ykhwb
z6nv6l/q9PnXTHxALasyoxDBvUzJv2KpwEzjcb6hOJlRZ2MZCUEZ8Z4cwOGLG/jD
tjRwqmgT0hmFtDNKmMU4UlvYhVlHHG8En/c43unO3TpCDYxLaQgnkimaqKt9NDjx
+2eWWJuKKqIp3Th68uum5rMWAJGRpuRezRs38elhUJ5TJfeW8vdey/TKp37GPogL
MGL7PzLAoP0Iid2C64ihOMBjUAPqAa50F6GWP6mhzV4428oSjV9Edp09IQ0BSPfY
QW+vcOhHyhhs3gM=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:45:01 2026 by rpki-client