Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f34302d3438203d3e20313331363738.roa
File:                     323430323a373165303a3a2f34302d3438203d3e20313331363738.roa (raw, json)
Hash identifier:          mTqEC6aiPcWHZSlk2Er8l9ki9WnEV+dwuhfO3oWs108=
Subject key identifier:   D9:4F:E0:E3:C4:C4:14:93:14:FA:59:1F:37:68:75:57:D6:33:BB:40
Certificate issuer:       /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
Certificate serial:       6DF18EDE37579186BDDCC32FF5C0086C73D61A59
Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f34302d3438203d3e20313331363738.roa
Signing time:             Wed 26 Aug 2026 03:44:01 +0000
ROA not before:           Wed 26 Aug 2026 03:39:01 +0000
ROA not after:            Wed 25 Aug 2027 03:44:01 +0000
asID:                     131678
IP address blocks:        2402:71e0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl
                          rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 15:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f1:8e:de:37:57:91:86:bd:dc:c3:2f:f5:c0:08:6c:73:d6:1a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE
        Validity
            Not Before: Aug 26 03:39:01 2026 GMT
            Not After : Aug 25 03:44:01 2027 GMT
        Subject: CN=D94FE0E3C4C4149314FA591F37687557D633BB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:0c:b8:db:d8:2f:d4:e1:8d:d3:92:91:86:
                    b6:10:a2:5e:26:fb:37:e2:89:bd:c5:da:f9:fe:89:
                    1e:8f:36:e2:bc:41:73:7c:f5:49:8f:61:15:85:89:
                    b5:82:4a:08:36:49:dc:e6:9a:07:b1:26:d3:a7:e2:
                    03:41:77:d2:13:f7:f2:d8:8d:1f:ea:38:f3:e4:cb:
                    45:80:21:46:a6:a1:f1:2c:3f:b7:5e:1b:30:39:3f:
                    7a:9e:ec:cb:a3:f6:a0:44:84:f6:fe:0c:4c:cc:42:
                    ec:5d:68:40:6f:75:cb:b5:b0:45:3d:e1:85:fc:ac:
                    9b:64:bd:be:11:0b:df:83:79:b3:65:b5:e7:29:33:
                    a9:78:f8:7d:d6:c0:35:af:2a:52:3f:f5:76:32:b1:
                    9a:8c:19:b9:ab:3e:d2:06:02:30:36:7d:55:66:e6:
                    96:ea:25:7f:f3:e7:c8:ea:9b:5e:24:06:73:75:3a:
                    0d:1f:90:eb:23:89:4b:97:0c:fe:b8:d6:7d:d4:7b:
                    04:82:36:dc:c6:47:71:da:61:e0:56:05:58:4e:3d:
                    b6:b3:1c:e7:2c:45:42:ff:82:84:ad:09:b9:a9:1d:
                    10:00:a8:e9:2f:b8:9e:97:65:ed:cd:87:f8:78:4a:
                    84:3a:65:a8:17:59:5f:a0:fd:1e:06:76:d2:27:c4:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:E0:E3:C4:C4:14:93:14:FA:59:1F:37:68:75:57:D6:33:BB:40
            X509v3 Authority Key Identifier:
                keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f34302d3438203d3e20313331363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:71e0::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:81:ae:ea:c3:c2:05:b9:cc:06:66:c6:e2:cd:22:6c:7c:
         70:6b:98:20:2d:1f:5b:86:ac:a7:59:89:e1:5a:31:d4:09:dd:
         b1:33:94:92:7a:26:0b:41:3d:64:25:13:a5:9b:ea:c3:14:e2:
         5f:de:2a:ff:ea:9e:0e:66:af:46:2a:48:5f:6e:c2:a4:1a:7c:
         93:b8:e7:01:4d:93:0c:c9:86:9e:66:ec:ce:8f:b6:da:5d:5e:
         0f:fa:97:82:70:c3:8f:df:a7:ba:1d:d5:1c:ec:84:12:28:1e:
         e6:71:8f:7a:f9:70:7d:a1:4e:35:73:c3:b9:41:52:bb:05:d9:
         9d:af:08:0c:f7:3f:09:2b:0f:d5:9f:89:fc:7e:f5:e5:64:2f:
         9c:32:43:65:e3:66:9f:27:99:14:fa:6d:e3:60:7d:b8:c2:2e:
         f6:23:5a:35:0a:f4:eb:95:9a:76:54:99:5f:88:ca:c5:86:8d:
         84:b6:eb:6b:29:2d:77:ad:63:0b:8b:2b:a9:9e:b2:98:d9:fa:
         02:b3:bb:1a:4b:ca:44:51:dc:5b:5c:07:eb:cf:fe:be:ae:22:
         9a:a3:fc:80:5e:33:9c:cb:a4:56:5b:a2:cd:48:67:d8:67:8f:
         9a:40:26:a4:a3:3c:db:15:da:0d:03:bc:1e:5a:de:45:0a:21:
         91:b1:e0:5c
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUbfGO3jdXkYa93MMv9cAIbHPWGlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE
MTQ0RkVBRTAeFw0yNjA4MjYwMzM5MDFaFw0yNzA4MjUwMzQ0MDFaMDMxMTAvBgNV
BAMTKEQ5NEZFMEUzQzRDNDE0OTMxNEZBNTkxRjM3Njg3NTU3RDYzM0JCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjBQy429gv1OGN05KRhrYQol4m
+zfiib3F2vn+iR6PNuK8QXN89UmPYRWFibWCSgg2SdzmmgexJtOn4gNBd9IT9/LY
jR/qOPPky0WAIUamofEsP7deGzA5P3qe7Muj9qBEhPb+DEzMQuxdaEBvdcu1sEU9
4YX8rJtkvb4RC9+DebNltecpM6l4+H3WwDWvKlI/9XYysZqMGbmrPtIGAjA2fVVm
5pbqJX/z58jqm14kBnN1Og0fkOsjiUuXDP641n3UewSCNtzGR3HaYeBWBVhOPbaz
HOcsRUL/goStCbmpHRAAqOkvuJ6XZe3Nh/h4SoQ6ZagXWV+g/R4GdtInxPVJAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQU2U/g48TEFJMU+lkfN2h1V9Yzu0AwHwYDVR0j
BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U
Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1
QzQ5OUZEMTQ0RkVBRS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC8zMjM0MzAzMjNh
MzczMTY1MzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMTMzMzEzNjM3Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkAnHgADANBgkqhkiG9w0BAQsFAAOCAQEAHA2BrurDwgW5zAZmxuLN
Imx8cGuYIC0fW4asp1mJ4Vox1AndsTOUknomC0E9ZCUTpZvqwxTiX94q/+qeDmav
RipIX27CpBp8k7jnAU2TDMmGnmbszo+22l1eD/qXgnDDj9+nuh3VHOyEEige5nGP
evlwfaFONXPDuUFSuwXZna8IDPc/CSsP1Z+J/H715WQvnDJDZeNmnyeZFPpt42B9
uMIu9iNaNQr065WadlSZX4jKxYaNhLbrayktd61jC4srqZ6ymNn6ArO7GkvKRFHc
W1wH68/+vq4imqP8gF4znMukVluizUhn2GePmkAmpKM82xXaDQO8HlreRQohkbHg
XA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:27:12 2026 by rpki-client