Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HCCG_HCEB/0/323430323a336365303a3a2f33322d3438203d3e203138303433.roa
File:                     323430323a336365303a3a2f33322d3438203d3e203138303433.roa (raw, json)
Hash identifier:          kou5TkjScUT8me0v1XqzHwgdWT9m4lkBG9XROC9VU+0=
Subject key identifier:   BE:42:E9:CD:67:6C:36:48:4D:0F:E1:24:44:67:95:C8:27:79:AF:78
Certificate issuer:       /CN=F382B7314BE5F96FAB63C6934F221809499142AF
Certificate serial:       5665DFA3A9C1B02CCCECED204A33EAB88E461094
Authority key identifier: F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/323430323a336365303a3a2f33322d3438203d3e203138303433.roa
Signing time:             Mon 11 May 2026 17:57:21 +0000
ROA not before:           Mon 11 May 2026 17:52:21 +0000
ROA not after:            Mon 10 May 2027 17:57:21 +0000
asID:                     18043
IP address blocks:        2402:3ce0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.crl
                          rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:df:a3:a9:c1:b0:2c:cc:ec:ed:20:4a:33:ea:b8:8e:46:10:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F382B7314BE5F96FAB63C6934F221809499142AF
        Validity
            Not Before: May 11 17:52:21 2026 GMT
            Not After : May 10 17:57:21 2027 GMT
        Subject: CN=BE42E9CD676C36484D0FE124446795C82779AF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:a7:83:a4:cc:b7:ab:08:70:10:b7:93:e6:
                    05:fe:dc:6c:7a:15:e1:e6:b9:5b:7d:c0:94:3b:e3:
                    b3:98:93:03:fc:6e:12:40:9b:38:bc:fd:7e:f3:09:
                    64:40:a6:b7:41:3c:ef:98:a5:24:c6:b8:fc:25:0e:
                    11:61:00:29:f3:04:2a:86:28:83:2c:a8:44:c8:17:
                    b5:44:bd:53:13:2f:9b:26:d5:0e:a8:76:ad:a9:90:
                    6d:bc:50:5c:a2:05:8a:b7:ab:f2:31:ed:77:cb:7f:
                    79:14:3b:d0:f5:ca:e1:59:5b:33:ba:b7:ec:d5:9b:
                    59:f3:c7:e8:3d:d5:51:f6:45:35:18:fe:8a:f5:4c:
                    69:04:54:64:d0:36:7c:f9:86:f4:82:c4:a0:a6:d6:
                    ec:f2:f9:58:98:db:82:31:b6:3e:9e:57:44:5d:bf:
                    b5:69:72:60:6d:1b:6a:d0:5c:7a:62:41:80:e4:99:
                    57:84:65:7a:db:37:91:18:ff:d9:73:f1:40:9e:cd:
                    b0:a5:5b:b0:ee:ea:49:c2:2b:dc:17:b9:68:46:45:
                    43:c8:42:9f:90:de:64:19:87:ad:9c:e9:dc:02:78:
                    07:f5:40:20:00:e9:ad:d8:be:fd:bd:7f:e9:35:d9:
                    33:3a:5c:e8:01:82:2a:d4:dd:bc:a9:21:e1:f5:40:
                    85:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:42:E9:CD:67:6C:36:48:4D:0F:E1:24:44:67:95:C8:27:79:AF:78
            X509v3 Authority Key Identifier:
                keyid:F3:82:B7:31:4B:E5:F9:6F:AB:63:C6:93:4F:22:18:09:49:91:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/F382B7314BE5F96FAB63C6934F221809499142AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F382B7314BE5F96FAB63C6934F221809499142AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCCG_HCEB/0/323430323a336365303a3a2f33322d3438203d3e203138303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:34:51:f2:a3:30:ed:61:33:f9:99:15:c3:30:aa:34:89:
         00:07:ce:a3:d9:e2:ef:b4:d2:de:b0:21:eb:44:34:d4:04:8d:
         aa:ee:7b:55:ad:ae:9f:20:9f:95:3e:82:17:f5:a8:e9:e3:b4:
         c1:91:39:5f:3e:71:06:11:13:01:5b:a8:8a:76:e2:74:4b:38:
         d1:ab:5e:3a:44:a0:f4:d0:18:bd:9e:01:9c:ce:8b:80:54:99:
         39:37:60:86:2b:a3:81:96:22:99:d1:97:89:78:4a:3c:df:86:
         0b:44:53:85:5e:31:cf:8d:b9:00:c4:12:dd:49:e0:04:ea:eb:
         c7:fa:3f:80:45:df:bf:7f:21:e6:fb:6b:cf:3e:13:6d:a2:45:
         56:c7:f4:4a:1f:a2:41:00:19:54:e8:c6:30:c8:a3:1b:a2:68:
         ec:0b:87:a0:7e:42:74:40:2a:aa:eb:9d:bb:29:23:fd:9a:5f:
         66:01:00:bb:4e:a7:ed:10:70:28:04:68:a0:1f:d3:80:1a:db:
         9c:f5:51:30:fb:07:2b:03:8d:dc:b0:4f:b1:1c:53:63:63:d4:
         36:96:40:10:cc:5d:05:7c:6a:ed:79:0c:2b:1d:72:c3:7d:69:
         92:8b:e5:9c:cf:3a:c8:07:90:b6:d5:f7:4e:b5:69:25:95:da:
         6d:be:b9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:52 2026 by rpki-client