Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SAELW/0/323430313a396536303a3a2f33322d3332203d3e20313532363130.roa
File:                     323430313a396536303a3a2f33322d3332203d3e20313532363130.roa (raw, json)
Hash identifier:          E56+hzTXbNkt4aLzCh5vj/t9pBndJNLPMkIErA3bzpE=
Subject key identifier:   BC:93:14:47:94:77:48:3D:14:47:0C:70:51:A7:1B:8A:53:45:E2:C9
Certificate issuer:       /CN=2D63D0213010A74651A161277EB9CBDC9CF65853
Certificate serial:       3B7ACD52998D147277783D9F0B7ACBA37DBB5B73
Authority key identifier: 2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SAELW/0/323430313a396536303a3a2f33322d3332203d3e20313532363130.roa
Signing time:             Mon 11 May 2026 17:37:18 +0000
ROA not before:           Mon 11 May 2026 17:32:18 +0000
ROA not after:            Mon 10 May 2027 17:37:18 +0000
asID:                     152610
IP address blocks:        2401:9e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl
                          rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7a:cd:52:99:8d:14:72:77:78:3d:9f:0b:7a:cb:a3:7d:bb:5b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D63D0213010A74651A161277EB9CBDC9CF65853
        Validity
            Not Before: May 11 17:32:18 2026 GMT
            Not After : May 10 17:37:18 2027 GMT
        Subject: CN=BC9314479477483D14470C7051A71B8A5345E2C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:1b:fa:13:b1:d3:88:62:75:fe:cd:05:c2:
                    ab:45:67:25:63:02:1c:9d:85:b3:93:87:b5:76:ce:
                    2f:34:b3:b5:4b:e9:c9:c4:f5:8f:31:94:4b:9f:61:
                    4e:bf:f8:ea:a5:77:b4:73:60:be:6a:9f:7e:25:61:
                    bc:35:12:e2:52:7a:63:04:24:94:cb:54:c4:c3:62:
                    98:b5:24:4e:2a:8e:12:85:ce:54:03:28:62:e1:b3:
                    74:ce:9d:6c:5c:30:fd:a3:62:3b:5b:c7:78:4e:28:
                    00:64:c1:b6:2b:80:d4:13:5b:16:b1:66:5a:03:92:
                    1c:1c:e0:2e:2a:2d:00:1a:d5:17:4c:fd:b6:02:77:
                    9b:cd:96:87:ce:f3:ef:ea:f2:b1:b5:f1:f1:20:21:
                    9b:62:38:2d:34:65:07:ea:0b:66:f8:89:b9:a2:df:
                    5c:9f:6e:c7:de:27:9b:fd:48:9c:99:8c:58:a1:30:
                    6e:05:91:d7:fb:f5:00:65:fd:ab:9d:24:c4:8e:cf:
                    93:3d:1b:2d:25:54:81:0a:9e:3b:a2:bd:03:c4:f4:
                    79:91:6a:ae:43:eb:44:44:31:14:61:46:c6:74:0d:
                    b3:b3:07:a3:c9:51:1f:fc:46:05:cc:52:27:e9:e1:
                    56:b9:24:71:48:ec:01:03:ac:80:ac:bf:44:99:39:
                    cf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:93:14:47:94:77:48:3D:14:47:0C:70:51:A7:1B:8A:53:45:E2:C9
            X509v3 Authority Key Identifier:
                keyid:2D:63:D0:21:30:10:A7:46:51:A1:61:27:7E:B9:CB:DC:9C:F6:58:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/2D63D0213010A74651A161277EB9CBDC9CF65853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2D63D0213010A74651A161277EB9CBDC9CF65853.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SAELW/0/323430313a396536303a3a2f33322d3332203d3e20313532363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:ce:62:d0:a3:34:3d:2b:b3:bc:88:2d:29:80:38:b6:7b:
         6a:dd:3e:53:c6:00:0d:ac:e6:9a:e3:7b:69:f2:6c:48:74:b4:
         e4:05:2d:bf:ec:cf:dc:c5:7e:9b:00:57:6a:57:a4:08:33:8c:
         32:38:2e:a9:f3:f6:2b:6e:11:56:df:6e:04:5b:4f:40:9a:62:
         5d:fd:be:d3:86:34:97:d9:ac:8b:e1:ac:43:46:d3:5f:ac:2f:
         1d:39:8f:a4:fc:bb:52:61:65:e4:23:64:da:90:cc:50:33:b5:
         9e:b8:bf:eb:45:da:53:d4:8a:b0:25:6a:5b:72:3a:3f:dc:c0:
         fa:87:ea:d0:27:f6:92:5a:ce:5e:f1:47:4e:30:86:76:ab:45:
         db:8f:b8:4c:7d:89:f1:b9:20:f0:1c:76:f8:7f:5c:7f:c8:d5:
         97:ec:2a:a5:74:f7:7a:1a:07:49:87:58:b3:02:50:e7:72:44:
         fd:83:c0:3c:1d:4f:0a:6c:46:1b:12:d5:36:0b:58:ca:47:51:
         c5:92:2f:ea:55:6a:0c:f7:ca:97:39:49:93:5e:15:2a:ba:4e:
         db:49:1d:b2:63:a1:95:ae:2e:53:5e:6c:5b:ac:6b:07:54:a7:
         c9:6d:02:e6:8d:90:9a:b4:b7:14:1c:9c:26:35:97:14:e3:3e:
         a5:d2:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:04 2026 by rpki-client