Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/34352e3132332e3131372e302f32342d3234203d3e2039363738.roa
File:                     34352e3132332e3131372e302f32342d3234203d3e2039363738.roa (raw, json)
Hash identifier:          82X06y/IQI1U7QhH2lytUIOSUSyVA1T9xDh0/oPZYg0=
Subject key identifier:   F9:8A:F1:D6:48:98:29:0B:65:A0:4C:B6:F8:1E:3F:47:B3:7D:63:C2
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       74CADB68CBB058E049354606968A6F9BAF875920
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/34352e3132332e3131372e302f32342d3234203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:37:42 +0000
ROA not before:           Mon 11 May 2026 17:32:42 +0000
ROA not after:            Mon 10 May 2027 17:37:42 +0000
asID:                     9678
IP address blocks:        45.123.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 12:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ca:db:68:cb:b0:58:e0:49:35:46:06:96:8a:6f:9b:af:87:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:32:42 2026 GMT
            Not After : May 10 17:37:42 2027 GMT
        Subject: CN=F98AF1D64898290B65A04CB6F81E3F47B37D63C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:f7:17:bf:aa:e6:0f:a2:6a:93:88:ae:49:
                    ae:75:77:be:11:b4:49:2a:40:c1:26:fc:fa:ab:5e:
                    ea:c6:fa:1e:6f:17:22:56:ae:d8:a6:1c:a6:70:42:
                    c3:61:3e:3d:da:f0:6c:02:47:d6:ed:63:53:7d:1c:
                    31:f9:d2:8f:7a:69:2a:01:43:a7:fe:30:2f:4e:e1:
                    6e:f4:35:cd:9d:e7:e2:d4:20:08:ed:48:a9:2c:c8:
                    91:89:90:c7:64:1e:c9:15:34:e7:a0:8f:d1:c3:31:
                    8b:c6:da:bd:51:cb:3a:51:a7:fa:c4:93:f2:84:78:
                    1a:7e:d0:8f:34:7a:8f:cc:33:20:4e:d8:14:7f:af:
                    35:c6:24:07:b3:79:d5:09:01:de:6d:9b:8b:8e:13:
                    ed:76:2e:fb:78:41:2c:9a:b8:52:33:66:2e:46:f9:
                    4d:bb:e6:1f:62:f2:87:ee:7c:4d:30:a0:c8:30:1b:
                    df:3b:a0:4b:63:30:7e:21:4c:67:7a:2e:5c:de:b5:
                    6a:67:73:bf:b6:77:7c:0c:90:dc:d9:56:55:84:eb:
                    8a:99:56:6a:c6:f1:f7:97:ae:05:d4:9f:0b:f5:6a:
                    19:69:51:88:1d:6c:3c:53:df:e8:c0:47:23:6e:04:
                    d9:6c:6e:14:e3:a6:32:e2:7a:26:7e:6c:0c:5d:fc:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8A:F1:D6:48:98:29:0B:65:A0:4C:B6:F8:1E:3F:47:B3:7D:63:C2
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/34352e3132332e3131372e302f32342d3234203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:21:67:d7:74:53:57:da:10:5f:86:04:5c:4a:de:5c:88:dd:
         10:9a:9f:0c:2a:cd:76:41:86:df:8c:15:23:41:7e:ea:77:10:
         b3:27:2a:8b:8c:22:15:64:72:cd:3e:ea:6d:ae:42:b4:93:75:
         39:74:bc:41:f1:4f:69:57:48:84:bb:43:72:ca:63:9d:32:6d:
         7a:62:53:0b:0d:5c:b7:eb:2a:ea:11:9a:5d:91:14:ff:f1:18:
         01:7a:ea:85:c1:78:5a:30:81:04:c5:8d:36:69:07:14:48:12:
         5f:6f:4b:00:76:0c:ea:0c:64:af:8c:df:17:88:9e:05:b6:0d:
         f2:7f:33:88:e1:e2:7b:ad:f3:5d:7c:83:d7:30:36:16:e1:06:
         ab:d2:87:01:5f:82:be:7a:16:ac:1d:37:e6:78:d0:ce:c1:a4:
         01:a4:24:1b:ef:f6:e4:f9:c6:64:53:db:7e:54:7a:31:93:b0:
         9e:b0:be:4f:d3:bd:41:c5:46:39:5a:8c:a1:07:fe:46:0e:67:
         e0:7a:8a:51:eb:a9:fe:cd:da:85:98:9d:95:05:db:29:38:b7:
         bd:67:08:c6:bd:a1:c5:85:35:df:4a:f9:c9:67:8e:97:4a:33:
         b0:ad:84:e9:6c:89:30:77:b2:61:a9:39:db:8d:ce:69:b0:c9:
         82:b0:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:16:52 2026 by rpki-client