Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/EASPNET/0/323430353a353630303a3a2f33322d3336203d3e203130313335.roa
File:                     323430353a353630303a3a2f33322d3336203d3e203130313335.roa (raw, json)
Hash identifier:          fOgwAyiLx83HUI1JzEco2MfT11ur+EBsmosxrJY6pOE=
Subject key identifier:   04:10:C0:5D:3A:20:29:55:2B:55:0B:6D:46:02:3D:73:14:D2:50:AA
Certificate issuer:       /CN=26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B
Certificate serial:       6B126A4DB485478034A2858D49CCE28AA1219358
Authority key identifier: 26:AF:7E:02:E7:E3:AA:97:EA:8F:02:F7:FA:0A:3B:DD:4C:9A:08:4B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/EASPNET/0/323430353a353630303a3a2f33322d3336203d3e203130313335.roa
Signing time:             Mon 11 May 2026 16:48:59 +0000
ROA not before:           Mon 11 May 2026 16:43:59 +0000
ROA not after:            Mon 10 May 2027 16:48:59 +0000
asID:                     10135
IP address blocks:        2405:5600::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.crl
                          rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:12:6a:4d:b4:85:47:80:34:a2:85:8d:49:cc:e2:8a:a1:21:93:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B
        Validity
            Not Before: May 11 16:43:59 2026 GMT
            Not After : May 10 16:48:59 2027 GMT
        Subject: CN=0410C05D3A2029552B550B6D46023D7314D250AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a7:e2:e4:25:74:8e:5e:78:a2:b1:75:ac:bc:
                    d9:7c:d2:bd:87:44:64:47:fc:59:cf:0e:92:7d:fd:
                    40:97:da:eb:e8:ed:30:f8:02:eb:31:70:6d:3a:c9:
                    81:12:c2:c4:87:68:b2:17:f9:e4:26:e6:a7:25:58:
                    c6:0b:4c:0e:cc:88:fa:d5:4b:27:5e:fd:5c:69:0f:
                    bd:35:c3:b3:54:c0:29:90:fd:eb:08:4c:9d:7a:26:
                    fc:c0:7e:22:59:6d:b4:9e:92:00:48:88:49:e5:37:
                    66:81:8f:fb:66:5c:4f:79:fa:7d:60:1b:51:70:62:
                    3e:46:58:c0:c5:1c:1e:4a:c4:9b:dc:01:4d:1b:24:
                    6e:38:b7:9b:e1:31:5f:a2:ba:11:17:6f:ca:42:86:
                    87:01:d3:fa:75:69:2e:43:cf:cf:06:bc:a8:e8:1a:
                    db:b0:7c:c7:3e:99:cb:5e:b2:7a:19:a3:1c:2f:b1:
                    ac:02:7a:9b:ca:e0:9e:09:f6:db:78:4f:9c:3e:04:
                    83:cd:13:48:a4:54:e7:5e:43:50:b3:ed:7d:40:e5:
                    92:50:0d:a9:b8:7f:d2:f7:6a:06:dd:54:cd:8e:a8:
                    22:5c:4d:82:97:44:42:a3:54:d7:a5:7e:12:e3:36:
                    e1:d4:f6:ec:a6:bb:c4:5b:72:34:e8:85:fb:45:aa:
                    60:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:10:C0:5D:3A:20:29:55:2B:55:0B:6D:46:02:3D:73:14:D2:50:AA
            X509v3 Authority Key Identifier:
                keyid:26:AF:7E:02:E7:E3:AA:97:EA:8F:02:F7:FA:0A:3B:DD:4C:9A:08:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/EASPNET/0/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/26AF7E02E7E3AA97EA8F02F7FA0A3BDD4C9A084B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EASPNET/0/323430353a353630303a3a2f33322d3336203d3e203130313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:5600::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:9c:81:de:77:d4:6b:b4:b3:e2:26:a1:b9:7a:fd:94:52:
         48:42:6c:34:b2:50:78:72:48:98:50:9f:5b:e7:a7:b8:e6:5c:
         bf:67:69:ba:ab:61:d8:75:d0:43:d1:e6:30:4e:6c:48:d5:3f:
         2a:3c:5d:88:c2:ce:ec:0e:91:92:99:14:fb:5b:33:4f:ee:e3:
         d2:c1:fa:b8:5e:b0:f8:c8:32:83:25:37:a6:96:ec:9f:fe:cf:
         a3:1c:54:a8:93:db:b2:15:8f:df:78:19:84:ba:73:69:9e:d2:
         49:be:d6:d8:0a:d3:88:02:01:50:c0:d8:30:27:8d:49:51:d4:
         c9:cd:10:80:29:af:b8:15:2f:39:98:34:46:0d:f7:bf:70:2c:
         af:6e:0b:71:0a:32:41:57:40:9b:1d:55:47:e3:15:5d:4e:22:
         b9:52:45:22:fb:bc:3d:be:42:0f:1d:91:a6:6d:10:c2:7b:f1:
         47:eb:68:88:a8:bc:ba:54:29:27:1b:57:f1:fa:cb:ee:4f:be:
         2b:95:14:cf:cb:44:7c:f7:e7:59:54:fe:80:f7:2f:77:1b:15:
         b0:43:4c:66:da:4c:53:69:9d:3d:d6:e3:bf:32:a5:b0:66:9c:
         8f:28:05:10:71:32:04:50:c3:73:93:ff:74:bc:f6:10:aa:14:
         99:b8:9f:2f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:08:42 2026 by rpki-client