Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/323430363a643763303a3a2f33322d3438203d3e203338383339.roa
File:                     323430363a643763303a3a2f33322d3438203d3e203338383339.roa (raw, json)
Hash identifier:          Z694/6d2G+L3RUACrnL4ZOBmDtfn2t+JQdVIPZHPNRw=
Subject key identifier:   EE:0C:64:88:99:86:65:62:AE:4A:82:9E:E9:D8:AA:17:3B:82:3E:48
Certificate issuer:       /CN=8F1212A19454D2A49786359CAC45368F821417D6
Certificate serial:       7D4A22FCFE5BE9E9553974B6D26E8E2FC17B61BD
Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CSPTEK/0/323430363a643763303a3a2f33322d3438203d3e203338383339.roa
Signing time:             Mon 11 May 2026 17:08:13 +0000
ROA not before:           Mon 11 May 2026 17:03:13 +0000
ROA not after:            Mon 10 May 2027 17:08:13 +0000
asID:                     38839
IP address blocks:        2406:d7c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl
                          rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:4a:22:fc:fe:5b:e9:e9:55:39:74:b6:d2:6e:8e:2f:c1:7b:61:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6
        Validity
            Not Before: May 11 17:03:13 2026 GMT
            Not After : May 10 17:08:13 2027 GMT
        Subject: CN=EE0C648899866562AE4A829EE9D8AA173B823E48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:87:ff:10:5b:3d:53:80:a9:23:95:d3:46:
                    a2:84:cc:f2:c4:fb:3b:aa:a6:5d:69:db:c3:2d:ef:
                    31:58:8c:38:a0:75:48:a5:27:15:2e:fc:53:c6:a3:
                    b4:bb:3e:6a:0e:04:46:03:ae:5b:a3:88:13:b0:95:
                    9d:33:ec:ea:78:b0:06:2e:ba:64:c6:61:c5:cb:8a:
                    80:ae:7b:37:ea:a8:0e:63:40:f3:8e:4a:b4:3f:8a:
                    27:52:5e:71:80:c2:c5:1d:ca:8c:27:3c:fb:13:6e:
                    40:b5:d7:e7:de:ff:48:ff:7b:0d:05:5a:2e:43:e5:
                    ff:af:74:f6:83:4b:ed:8e:7f:b0:9c:cf:34:bb:b4:
                    a9:b7:5d:86:44:e1:cb:ce:92:20:c2:21:05:82:3b:
                    b2:e0:1f:a8:f4:e4:fd:1c:d5:2a:dd:29:11:c6:af:
                    ab:84:ee:15:0c:8d:2e:90:a1:2a:27:89:75:75:19:
                    13:77:68:01:5b:ed:22:9d:fb:1e:6c:1c:f1:d7:10:
                    81:ca:2e:93:fd:e6:7e:7c:ee:41:d5:85:9a:67:2a:
                    06:43:09:e5:3b:d3:4e:56:68:56:7f:93:99:e5:d7:
                    de:0f:11:78:94:9e:bc:e8:39:e9:49:9a:03:9a:df:
                    f1:80:ce:8d:e0:84:85:d3:b0:4e:32:fb:3a:b4:a8:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:64:88:99:86:65:62:AE:4A:82:9E:E9:D8:AA:17:3B:82:3E:48
            X509v3 Authority Key Identifier:
                keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/323430363a643763303a3a2f33322d3438203d3e203338383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:c7:30:ce:31:a6:67:a0:45:0d:c2:ab:13:c4:7e:99:bd:b5:
         3a:63:c1:28:6e:2e:ef:ec:2a:b2:9e:83:84:d2:32:06:ce:bb:
         a7:74:dd:d1:f1:5a:a5:d6:97:da:70:33:cb:bc:46:6b:3b:1b:
         26:97:4f:1a:d3:98:75:2e:75:4e:9f:67:80:9b:53:73:f3:41:
         59:ce:b1:c2:72:be:c1:3a:a7:c7:2f:e6:f7:be:1b:8d:ff:12:
         25:3b:3d:d9:e2:e1:2b:7f:d0:b0:0c:35:e3:26:dd:ce:b3:7d:
         ab:43:fb:ae:1b:14:01:bc:46:11:f2:fc:3a:e5:c9:ba:ba:d9:
         4a:7a:37:e2:48:cc:90:ab:3e:e7:b6:59:41:28:81:01:da:e4:
         00:36:61:b7:10:09:8e:6f:bc:49:35:21:cd:33:ee:d2:aa:9e:
         93:76:3d:b0:c8:da:6b:86:f7:ec:87:5b:81:58:87:7c:51:89:
         3d:ea:34:2d:f4:61:85:58:b4:8e:80:88:e5:64:26:f2:a0:95:
         9b:eb:c0:2d:b1:77:39:42:42:b5:7b:e5:7e:ed:56:d7:23:cc:
         e5:12:12:25:7e:8b:f4:1c:21:ce:d1:80:9e:f6:85:55:4f:d2:
         85:ef:3e:5c:b7:5b:a9:f3:ca:f5:e5:6d:a7:7e:eb:47:69:f9:
         39:ba:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:52:02 2026 by rpki-client