Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CODEUPTECH/0/323430313a626636303a346666393a3a2f34382d3438203d3e20313532363133.roa
File:                     323430313a626636303a346666393a3a2f34382d3438203d3e20313532363133.roa (raw, json)
Hash identifier:          7RPw3Chr3h8yZMkr/DeW5oQPc4L1QCoz+bWQZrYZqrI=
Subject key identifier:   8C:D5:80:1C:F7:18:84:AC:4C:09:FD:3F:D8:69:E4:68:4F:BB:24:E4
Certificate issuer:       /CN=F5A640326B228EA83BEE8FECCD06A6CF7E64D657
Certificate serial:       149613677370F49F5C1BDE0979E2CEE6D2E3EDFA
Authority key identifier: F5:A6:40:32:6B:22:8E:A8:3B:EE:8F:EC:CD:06:A6:CF:7E:64:D6:57
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/323430313a626636303a346666393a3a2f34382d3438203d3e20313532363133.roa
Signing time:             Mon 11 May 2026 17:40:28 +0000
ROA not before:           Mon 11 May 2026 17:35:28 +0000
ROA not after:            Mon 10 May 2027 17:40:28 +0000
asID:                     152613
IP address blocks:        2401:bf60:4ff9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.crl
                          rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:96:13:67:73:70:f4:9f:5c:1b:de:09:79:e2:ce:e6:d2:e3:ed:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A640326B228EA83BEE8FECCD06A6CF7E64D657
        Validity
            Not Before: May 11 17:35:28 2026 GMT
            Not After : May 10 17:40:28 2027 GMT
        Subject: CN=8CD5801CF71884AC4C09FD3FD869E4684FBB24E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:ef:0f:36:6b:70:7a:a8:67:7b:96:34:39:
                    38:c3:65:82:83:06:14:2c:45:40:a3:8e:38:b7:0d:
                    15:a4:74:2a:ad:43:8c:eb:af:71:1f:95:cb:60:a5:
                    7b:61:2a:da:fb:cc:28:f7:0c:a7:da:ed:18:d2:53:
                    63:04:56:35:9f:90:89:5b:2a:75:88:3d:56:1c:36:
                    6d:1a:26:8a:27:0e:6b:fa:74:85:e7:c5:bd:b0:1a:
                    a0:f6:b0:d6:59:e5:7b:6b:4a:2d:ad:81:ac:f8:f9:
                    d5:3d:32:72:ac:f1:57:73:c5:4d:d6:5c:81:a6:77:
                    79:ee:a3:82:f8:fa:81:09:da:e4:9e:fc:40:20:61:
                    7d:23:e3:00:d4:44:ee:9b:63:d4:49:4f:df:b0:b4:
                    a1:bd:f3:a7:ca:a0:d8:10:64:a7:9a:7d:f0:ce:97:
                    7d:af:fd:c8:2e:81:1f:cf:8e:92:89:09:c3:39:97:
                    a7:18:ad:1d:44:90:53:c3:f7:0e:d5:04:aa:a4:85:
                    c3:0b:7e:32:d2:59:b6:84:30:7e:f8:25:fe:01:63:
                    cb:d8:e3:35:85:c9:c1:43:b2:88:6a:f1:4e:42:87:
                    0b:ba:2c:bc:bb:10:32:29:56:b8:3a:4e:26:57:a7:
                    d5:34:82:07:c8:f9:66:fa:fd:ea:c3:6c:12:fe:19:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:80:1C:F7:18:84:AC:4C:09:FD:3F:D8:69:E4:68:4F:BB:24:E4
            X509v3 Authority Key Identifier:
                keyid:F5:A6:40:32:6B:22:8E:A8:3B:EE:8F:EC:CD:06:A6:CF:7E:64:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/323430313a626636303a346666393a3a2f34382d3438203d3e20313532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf60:4ff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:c1:d8:9c:f3:19:ce:e9:4e:b9:cc:a3:2a:3f:11:cb:7e:
         da:e3:56:e9:64:d2:41:a3:cc:8c:b6:b3:b9:05:ae:d3:79:4c:
         6d:a1:cf:bb:cd:ce:01:86:84:8a:ce:4b:6d:11:2c:5e:ef:4e:
         2a:63:e2:bc:76:54:8a:c6:30:1d:a1:f4:ba:d8:dd:9a:50:f9:
         1f:cb:9f:ab:1f:6c:2d:c7:fe:f7:ad:c6:e3:98:a5:8d:f5:b7:
         b5:bf:71:b0:60:09:cd:f7:a1:e4:cd:00:19:4e:37:77:02:0d:
         c7:53:4c:6c:13:53:f3:83:b7:38:5a:2f:2f:0a:72:a0:30:18:
         ec:ef:70:25:9e:8c:0d:f0:73:6d:20:ee:68:37:c7:80:9f:d5:
         e0:0f:9a:23:8a:2c:fa:1a:ae:7a:71:70:1c:dd:69:c6:5c:67:
         d3:4f:14:18:7f:83:20:3f:bb:71:e9:13:e9:ee:da:32:c4:9f:
         38:ac:22:f5:0a:e0:f7:9d:c7:8c:57:1f:3f:d3:c6:43:dd:17:
         60:ca:e1:8c:f3:b7:ba:51:19:ef:88:8a:24:a3:e6:fa:dc:71:
         e6:ea:3e:72:3d:ea:d8:6f:3e:f6:05:a3:c9:72:28:88:c1:8a:
         e4:cb:37:f2:85:4e:36:4f:80:61:d3:fb:ce:20:75:ca:eb:64:
         a4:b9:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:16 2026 by rpki-client