Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a343332313a3a2f34382d3438203d3e20313530373636.roa
File:                     323430313a356461303a343332313a3a2f34382d3438203d3e20313530373636.roa (raw, json)
Hash identifier:          OuqYERdV1bVJFr1rcLxzR5JbOTcvxxSn6vkHoQjVfvg=
Subject key identifier:   A0:A8:B9:49:E9:F1:01:B2:74:89:F3:4C:E8:12:81:57:6B:F5:3B:11
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       47A9F04B4DBAB286FA6D38CEE3388F02290CEA53
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a343332313a3a2f34382d3438203d3e20313530373636.roa
Signing time:             Mon 11 May 2026 17:58:03 +0000
ROA not before:           Mon 11 May 2026 17:53:03 +0000
ROA not after:            Mon 10 May 2027 17:58:03 +0000
asID:                     150766
IP address blocks:        2401:5da0:4321::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
                          rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a9:f0:4b:4d:ba:b2:86:fa:6d:38:ce:e3:38:8f:02:29:0c:ea:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: May 11 17:53:03 2026 GMT
            Not After : May 10 17:58:03 2027 GMT
        Subject: CN=A0A8B949E9F101B27489F34CE81281576BF53B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:48:69:61:56:f7:b9:24:c2:46:ed:dd:8a:
                    18:5d:d8:4d:70:f2:88:87:55:2a:2d:5a:66:32:8b:
                    1b:30:ec:4b:2f:35:49:35:7f:d3:32:3b:55:ac:ac:
                    a0:bf:9f:a7:db:5e:fa:74:c0:f5:8d:2a:af:97:64:
                    9c:b1:1b:ce:d7:76:18:b5:43:f2:28:f3:06:9d:dc:
                    a1:5d:74:a0:e2:10:28:e6:d5:05:b1:0b:ce:da:5a:
                    79:8e:91:0d:36:fc:fc:5f:82:09:c7:5b:80:53:77:
                    7c:34:2b:1a:67:d5:c1:61:71:09:56:76:67:c6:28:
                    2f:cd:a6:de:c4:aa:8b:f4:32:f4:14:78:6b:b5:02:
                    a8:14:39:8e:b2:1e:3a:08:ea:d4:a5:3a:84:48:d8:
                    ee:ac:90:87:b0:47:b1:62:5d:04:d6:d3:5f:1e:ba:
                    6d:32:63:c2:0f:f1:ef:e4:a9:6a:98:d5:c4:ea:28:
                    d2:38:41:61:dd:49:14:1c:5f:40:9f:b0:f1:d8:60:
                    27:b6:94:28:0a:ae:e3:84:5e:82:a7:e2:a8:9c:23:
                    e6:f5:d1:60:ed:6c:bd:d7:8c:26:2e:02:7f:67:32:
                    f0:22:6e:b4:6e:6d:e7:fd:ac:e5:fb:bd:b5:bc:dc:
                    6f:cf:38:25:99:19:78:c2:69:d2:1b:46:17:f4:d5:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A8:B9:49:E9:F1:01:B2:74:89:F3:4C:E8:12:81:57:6B:F5:3B:11
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a343332313a3a2f34382d3438203d3e20313530373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0:4321::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:0a:c3:f4:1a:2c:4d:14:4c:9d:52:5f:b4:6e:e4:12:89:
         f9:71:f0:2e:d1:b4:9d:b4:90:7a:af:03:27:5d:85:d4:ab:c4:
         63:6e:97:20:6b:93:6e:87:95:ee:01:a9:a2:5c:cd:e4:8c:88:
         ea:33:c9:53:8e:70:d8:3d:4f:5f:03:cd:70:a4:05:8e:2d:5b:
         1b:4a:1e:86:8f:f2:49:c9:b6:0b:85:0a:99:08:40:2d:f9:12:
         72:81:ba:d6:93:3a:fb:e2:1f:43:1e:39:6c:fd:d4:38:13:df:
         ec:10:a8:a8:de:88:66:a9:de:6e:e0:49:14:7e:d6:51:b6:4a:
         58:1f:a4:5e:8e:df:d1:c4:3c:49:ea:92:99:32:58:f7:bf:d9:
         af:e1:2a:ac:24:48:bd:44:4c:d7:71:95:1b:53:8b:1e:d9:39:
         a4:5a:7a:6e:aa:58:22:f6:ce:dc:61:34:9f:20:45:30:2e:fe:
         d1:b7:d6:09:2e:e7:af:27:8b:30:c4:4d:dc:cb:e8:33:6f:09:
         92:94:1a:71:82:c5:81:6d:b2:b7:e9:85:7d:d9:39:9a:9b:fe:
         89:97:cc:80:3a:b4:dc:5e:e6:da:38:74:f1:0d:8c:4a:8e:3e:
         1c:8a:97:31:0b:73:80:78:2c:9e:1e:91:f8:c3:c2:7f:54:13:
         83:67:99:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:00 2026 by rpki-client