Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3438203d3e20313334383233.roa
File:                     323430363a343863303a3a2f33322d3438203d3e20313334383233.roa (raw, json)
Hash identifier:          oRO45shBGeL9y1PJQy47rvgs0xkkCSWJaMqdKI1mJb4=
Subject key identifier:   03:35:8D:59:B2:09:55:F9:FB:8A:C7:D2:FE:51:22:DF:50:32:71:8F
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       75B4ABE61B812E8CEAF14DF7F184AC95E4117B7F
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3438203d3e20313334383233.roa
Signing time:             Mon 11 May 2026 17:08:04 +0000
ROA not before:           Mon 11 May 2026 17:03:04 +0000
ROA not after:            Mon 10 May 2027 17:08:04 +0000
asID:                     134823
IP address blocks:        2406:48c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b4:ab:e6:1b:81:2e:8c:ea:f1:4d:f7:f1:84:ac:95:e4:11:7b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:03:04 2026 GMT
            Not After : May 10 17:08:04 2027 GMT
        Subject: CN=03358D59B20955F9FB8AC7D2FE5122DF5032718F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:43:15:be:32:7d:1c:11:1f:d8:aa:4c:cb:
                    79:19:65:49:0e:ad:6a:08:86:f8:4a:00:27:56:ab:
                    d6:bf:38:49:8d:88:70:91:26:03:1c:97:d1:1d:61:
                    83:7c:42:2d:7a:f4:06:68:e8:65:9e:37:8f:c6:94:
                    c8:df:0e:bf:3f:87:a9:6c:1d:e9:dd:a4:33:6b:36:
                    c5:35:67:76:b5:ed:8e:45:81:6a:9e:c8:90:68:7e:
                    c9:e1:5e:14:2b:70:60:62:dc:62:31:37:5b:8f:35:
                    cc:53:83:4b:7a:71:61:b4:89:42:b8:6f:80:53:24:
                    d5:e6:ab:82:d4:fa:a1:b6:e5:23:b2:f8:ed:27:a1:
                    50:17:da:cf:66:52:40:89:2a:e0:9b:16:12:9d:48:
                    86:3e:21:85:51:4d:5b:12:9b:15:e7:52:84:4f:5e:
                    67:22:05:d8:bb:16:28:ce:ab:dc:11:68:43:f7:09:
                    6f:66:4a:34:3a:a9:82:b6:18:1e:25:93:76:c8:6c:
                    31:30:1e:1d:6b:1f:98:3a:af:65:0a:8c:61:bf:49:
                    bb:2e:af:95:dd:b3:0d:cf:ae:de:12:ad:d2:97:f4:
                    c6:58:ef:1a:6c:f7:c8:ce:3c:e5:e5:70:a0:ce:ff:
                    22:f7:b5:b3:04:d8:64:a7:22:0e:f5:c8:99:a7:a5:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:35:8D:59:B2:09:55:F9:FB:8A:C7:D2:FE:51:22:DF:50:32:71:8F
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3438203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:03:da:52:ea:b9:f8:c1:e0:89:55:98:75:22:45:d9:79:6b:
         58:23:b9:fd:ab:ab:da:7a:29:38:c3:5c:c3:e1:02:76:4e:34:
         e7:c8:c4:8f:37:f2:c2:e1:97:7d:94:e1:7d:af:f0:8b:7a:85:
         1a:a7:7b:f6:03:24:10:62:5d:79:4f:ed:44:a6:7a:3f:36:e0:
         8e:63:0e:ae:e6:af:9c:2d:13:c6:b2:dc:b9:f3:cc:55:0f:ac:
         8e:d3:f0:6f:9e:35:58:7b:d0:ff:72:e3:dc:68:f5:17:36:19:
         22:30:ad:0f:31:0a:39:c0:49:b9:eb:37:5b:e9:f8:a1:06:1c:
         23:d9:13:46:b9:23:41:52:be:7d:08:30:5b:54:4a:12:77:0e:
         4d:b2:65:a9:11:16:48:98:65:c0:ea:61:38:92:cc:d6:fe:3f:
         32:ff:96:0d:86:fe:90:53:d4:ca:74:45:e6:57:0d:1e:b9:c9:
         f9:42:48:a6:39:d7:19:db:12:07:75:bb:fa:15:47:a6:07:10:
         c0:ef:da:c1:3f:00:c6:b5:3d:7d:ad:ee:58:19:33:99:f6:6a:
         79:9c:3f:c7:80:3d:04:af:e4:0e:c2:7a:d4:85:0f:29:9d:6d:
         5c:8c:f2:4a:8f:2a:29:0e:79:78:bc:fd:36:b2:e4:d1:fd:8a:
         92:45:2a:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:11:29 2026 by rpki-client