Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa
File:                     323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa (raw, json)
Hash identifier:          wMvsew2RnQ9XsFmTB5Pg7iVUsYQynUYE5w0hakYcv90=
Subject key identifier:   CF:64:30:EF:0C:AE:1E:BE:69:D6:39:61:2A:3D:3B:EB:FB:B8:FB:18
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       548FE9B38515612E802C6176FF202E12112B8C47
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa
Signing time:             Mon 11 May 2026 17:15:46 +0000
ROA not before:           Mon 11 May 2026 17:10:46 +0000
ROA not after:            Mon 10 May 2027 17:15:46 +0000
asID:                     206729
IP address blocks:        2401:95c0:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8f:e9:b3:85:15:61:2e:80:2c:61:76:ff:20:2e:12:11:2b:8c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:10:46 2026 GMT
            Not After : May 10 17:15:46 2027 GMT
        Subject: CN=CF6430EF0CAE1EBE69D639612A3D3BEBFBB8FB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:97:7a:d1:f1:d0:1f:f5:1b:86:2c:1c:16:
                    d2:35:68:7e:53:0c:14:5b:0e:a1:de:3b:02:5e:c5:
                    7f:5d:5f:5b:97:9c:e3:90:28:92:8c:7f:8c:a7:05:
                    54:cd:0d:4f:b9:27:e1:4c:7d:6c:f8:22:a9:d7:72:
                    98:48:1c:82:b6:6f:42:e8:64:20:21:4b:27:ac:c7:
                    52:6f:ab:ba:68:3d:b3:24:0f:ef:d8:bd:76:8a:54:
                    2f:87:76:2a:0b:61:9e:49:0b:10:8e:80:02:1c:dc:
                    9f:01:53:e3:99:18:49:04:94:ad:a1:b7:20:3d:ef:
                    1d:e5:1f:99:ba:24:a4:c0:16:97:e8:01:ef:f1:37:
                    b5:d6:85:1b:6c:04:8b:2b:18:d3:29:f2:d1:e5:de:
                    e7:02:2a:10:c1:ad:7d:b7:a1:0c:49:fc:ca:72:61:
                    33:00:4c:d8:f7:36:54:a9:d3:75:01:1b:f2:05:72:
                    9b:6c:5a:de:ad:e1:d4:03:b5:13:20:5a:86:ea:c0:
                    bf:10:08:60:55:8b:90:d6:52:31:1b:90:83:b0:5e:
                    d4:49:f5:6d:43:c2:44:66:36:a3:5c:dd:e4:fd:06:
                    2c:a3:5a:57:fa:94:aa:e2:41:4a:bc:f3:4b:1d:60:
                    5d:30:ad:a0:0a:c2:ff:e0:90:ea:75:0b:7b:80:91:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:64:30:EF:0C:AE:1E:BE:69:D6:39:61:2A:3D:3B:EB:FB:B8:FB:18
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:95c0:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:52:eb:b8:5a:5a:34:1c:f3:41:1c:54:86:b4:15:8a:f5:
         e7:3c:6e:a6:b6:2b:cf:8e:b8:ca:ee:75:21:f1:d0:92:15:1b:
         ff:ec:89:03:b2:c2:1b:57:3d:1f:26:25:4d:da:83:aa:f3:cf:
         30:53:ac:d3:73:0e:98:11:65:ef:94:a2:2d:ce:3a:a1:c2:f6:
         81:a1:64:64:8d:84:5d:ad:8a:74:3e:f2:2d:52:c9:88:48:11:
         dd:99:bf:ca:0a:7f:4e:e5:bc:40:65:dc:ff:10:5f:e3:8d:ee:
         14:e3:f8:aa:ba:67:b7:f5:3f:b1:05:95:41:1e:ad:83:d8:ce:
         8a:9b:89:4b:00:bb:55:37:e8:ac:9e:61:64:1a:57:52:93:cf:
         e8:99:ec:5f:97:e0:98:bc:89:51:dd:c6:9c:1c:ee:4f:b0:8c:
         96:de:80:b7:4b:a3:72:b0:c0:7e:5e:8c:85:6d:5b:2d:73:9c:
         7e:7c:bc:2e:51:bf:e0:69:70:b4:a8:0f:ed:8a:a1:16:3c:31:
         80:0f:9b:9f:f3:8a:72:5c:3e:3e:bd:40:11:f0:00:98:8e:a5:
         9c:78:05:54:7a:35:2b:29:8f:d5:c6:10:79:35:ac:dc:79:65:
         02:f5:12:94:43:e7:f4:37:db:88:50:d8:8c:96:ee:f4:a7:68:
         eb:2c:8a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:50 2026 by rpki-client