Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3231312e37362e3137382e302f32342d3234203d3e2039363738.roa
File:                     3231312e37362e3137382e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          JW2N4XkiPozF8gUK5wYhp6TMNn7yWqUe8luuRx51Dbk=
Subject key identifier:   A2:6D:12:0D:DD:97:84:1A:61:2B:59:F8:3F:B4:C4:86:F2:45:E3:B9
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       25F1221DF9A50F38F4813D905EF41FEA1435C830
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3231312e37362e3137382e302f32342d3234203d3e2039363738.roa
Signing time:             Thu 30 Jul 2026 06:04:00 +0000
ROA not before:           Thu 30 Jul 2026 05:59:00 +0000
ROA not after:            Thu 29 Jul 2027 06:04:00 +0000
asID:                     9678
IP address blocks:        211.76.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Aug 2026 22:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f1:22:1d:f9:a5:0f:38:f4:81:3d:90:5e:f4:1f:ea:14:35:c8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: Jul 30 05:59:00 2026 GMT
            Not After : Jul 29 06:04:00 2027 GMT
        Subject: CN=A26D120DDD97841A612B59F83FB4C486F245E3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:d2:0d:0a:01:04:1f:67:6a:03:3e:89:cc:
                    3a:27:7a:32:b8:b1:7b:22:25:98:97:27:fc:48:d5:
                    0d:9c:8d:9a:8c:e9:a7:3c:ac:f9:70:14:59:a6:f2:
                    86:e6:cb:08:c3:7f:f3:49:80:dc:72:f0:8b:d6:df:
                    37:70:b0:36:ae:53:61:f2:6a:a8:05:ad:57:ab:81:
                    ed:50:9c:8a:4e:28:27:30:c7:eb:d8:97:05:8f:64:
                    a2:95:dd:c0:87:4c:58:7d:de:c3:dc:f5:68:27:20:
                    fb:27:d4:ac:d1:9f:b7:d0:39:7e:38:eb:bb:3f:ab:
                    c1:f9:7e:2d:98:d1:08:8c:16:af:00:ce:e3:ed:d9:
                    60:06:10:38:1b:47:30:94:04:5b:b6:32:ee:66:08:
                    9b:7b:cd:c5:16:47:53:5c:e8:2f:4c:93:4e:c5:9b:
                    a1:3d:70:6c:8f:ff:ff:df:57:05:de:a1:2c:9f:1a:
                    28:b7:88:e2:54:62:58:d8:13:80:1a:65:f2:b3:c2:
                    a7:b6:b5:16:7e:b4:6f:6d:7e:c1:11:99:16:1b:08:
                    f2:81:00:11:9e:b7:59:c1:0e:84:60:54:6f:e7:59:
                    e0:4b:f4:01:d0:73:40:a7:b7:da:12:3b:57:e2:d6:
                    d6:fe:fa:72:ba:28:cb:13:12:c1:41:ae:49:d7:f5:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6D:12:0D:DD:97:84:1A:61:2B:59:F8:3F:B4:C4:86:F2:45:E3:B9
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3231312e37362e3137382e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.76.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:c7:fa:cb:8f:6a:96:ed:14:cf:63:fe:ed:34:25:ca:39:
         d7:b3:15:d6:bd:3f:22:8a:20:57:f4:36:79:d2:5b:63:88:9b:
         25:c0:04:b0:16:06:5b:f3:11:e7:94:a8:cf:d4:f2:f6:8b:00:
         59:bc:91:d1:83:01:5b:7d:53:b0:a1:66:72:45:e5:58:55:d2:
         97:59:3e:a4:f9:b7:f2:5f:df:7a:63:b2:40:a6:31:6a:3c:2e:
         4d:3b:9c:3a:df:19:26:10:f0:1e:d7:b4:7d:03:c1:4f:7c:45:
         3f:8e:ab:6c:cf:cc:39:88:5f:db:d3:bd:86:a9:e0:8a:32:5f:
         4b:4e:6d:66:e0:d4:56:b3:f3:47:b2:86:24:29:3b:20:57:ee:
         1a:e4:36:d4:d5:29:9c:10:60:7b:77:83:40:0a:9e:98:b9:19:
         e5:b8:ca:6a:20:c1:d2:69:c4:75:59:d8:32:cd:6a:7f:e3:1e:
         64:6a:f3:6d:0f:5b:71:7b:69:67:47:05:0e:78:dd:4c:61:da:
         9d:83:8d:13:34:52:16:d7:a6:00:e9:60:04:78:b5:63:55:b3:
         f3:7c:b5:73:75:8b:c0:00:68:3a:35:cc:2d:8d:97:a6:96:af:
         f1:0a:87:02:55:f1:ce:be:cd:72:07:bf:34:c2:68:ce:3a:2c:
         1b:9d:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 14:03:42 2026 by rpki-client