Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DWT/0/323430343a386363303a3a2f33322d3332203d3e20313331363431.roa
File:                     323430343a386363303a3a2f33322d3332203d3e20313331363431.roa (raw, json)
Hash identifier:          TTxEQWNw4Ylcg7PTpqG/OPT7xRY1c5reCSbYb5rmm9c=
Subject key identifier:   12:29:5B:80:48:F0:12:84:05:77:38:30:D4:E8:2F:58:4D:A6:05:1A
Certificate issuer:       /CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
Certificate serial:       63FDF02C551C9428D5F33C16FECF02037DAD4C9C
Authority key identifier: 27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DWT/0/323430343a386363303a3a2f33322d3332203d3e20313331363431.roa
Signing time:             Mon 11 May 2026 16:45:52 +0000
ROA not before:           Mon 11 May 2026 16:40:52 +0000
ROA not after:            Mon 10 May 2027 16:45:52 +0000
asID:                     131641
IP address blocks:        2404:8cc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl
                          rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:f0:2c:55:1c:94:28:d5:f3:3c:16:fe:cf:02:03:7d:ad:4c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27CCE49F4A9C14852B3A304359D3CB1E4E332C3E
        Validity
            Not Before: May 11 16:40:52 2026 GMT
            Not After : May 10 16:45:52 2027 GMT
        Subject: CN=12295B8048F0128405773830D4E82F584DA6051A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:25:c0:0f:8d:cd:e6:58:8c:39:e0:3b:73:
                    59:75:a1:27:ac:22:db:d3:54:c2:cb:92:14:56:cd:
                    3f:6e:b1:70:f6:c1:70:49:9a:07:b3:b7:86:cc:47:
                    7c:42:a5:1b:94:96:63:84:37:b0:fa:64:fd:3d:83:
                    21:bd:b4:7e:3d:85:8c:a5:38:85:e8:c0:72:1e:23:
                    80:ac:c4:ca:27:bf:d1:38:4b:a6:e3:c5:2d:91:32:
                    f2:6b:d7:f3:4d:64:64:bc:08:a6:78:05:bd:61:1d:
                    20:cc:36:25:52:df:5d:ed:72:bc:3d:f7:95:64:04:
                    8f:10:6b:7c:8b:84:12:b5:d6:82:e4:2e:c7:d0:b1:
                    50:c5:37:8d:0b:1c:44:fc:be:dc:81:26:95:ea:37:
                    b0:86:78:9a:9f:e3:29:d8:92:88:ed:18:a3:cf:c7:
                    be:8b:cc:b1:bb:73:0c:ad:30:da:89:75:15:d6:a2:
                    81:b3:51:2b:8e:ad:20:9a:00:0d:4b:c1:ab:e5:f3:
                    e8:09:9f:f9:3d:ea:0e:b2:e5:2a:24:d7:dc:7e:08:
                    72:81:eb:e4:21:1c:46:ed:d2:fb:3e:ee:63:86:f9:
                    34:24:51:1a:a0:42:06:5e:61:94:19:06:21:f0:3c:
                    39:53:24:5e:b0:76:f0:33:cc:51:f5:cc:65:e7:bd:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:5B:80:48:F0:12:84:05:77:38:30:D4:E8:2F:58:4D:A6:05:1A
            X509v3 Authority Key Identifier:
                keyid:27:CC:E4:9F:4A:9C:14:85:2B:3A:30:43:59:D3:CB:1E:4E:33:2C:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DWT/0/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/27CCE49F4A9C14852B3A304359D3CB1E4E332C3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DWT/0/323430343a386363303a3a2f33322d3332203d3e20313331363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:ee:c9:30:34:bc:bc:04:f7:3c:c0:20:d7:82:32:ed:ff:6c:
         bc:12:72:ae:72:59:0f:f1:96:d3:9c:77:04:4a:cd:bd:4d:8e:
         84:1d:20:a4:38:0e:57:2b:f4:54:dc:16:a8:52:6e:f8:95:d3:
         ff:0f:02:8b:8d:8f:0a:30:e5:e0:5b:75:28:b2:21:82:9e:86:
         ae:b7:39:29:87:0f:6f:c3:ed:61:52:43:c4:13:e2:cc:81:15:
         b2:da:61:30:d7:83:1b:56:b5:e6:dc:71:5a:73:4b:f7:89:6f:
         8d:b6:84:a6:a4:85:32:04:21:75:a3:c3:e4:ba:f6:1e:c1:a4:
         1b:5c:06:50:5f:7d:00:34:48:ba:7b:b0:89:20:51:3e:a7:a8:
         c6:73:a8:b8:68:49:4c:7f:a4:b6:0a:3e:80:d7:9f:a4:a4:94:
         a2:52:91:2d:63:66:39:c8:72:32:5e:f6:5e:44:0b:8e:6d:b1:
         94:19:41:f4:e6:cd:b2:42:54:f2:4d:92:54:2e:d7:f4:f4:3b:
         53:8a:60:c7:03:54:4b:fc:cd:17:31:b9:8c:51:ca:29:5a:06:
         1b:cf:66:fb:a2:95:7d:cf:ee:ea:c3:7a:67:7b:3b:0c:6f:c1:
         b9:a7:fa:85:ab:25:b6:06:f8:5d:5d:88:33:03:6e:27:7d:c9:
         b4:4a:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:52 2026 by rpki-client