Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa
File:                     323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa (raw, json)
Hash identifier:          sExiRNuVZ6Y/PqJdBLwrUGBsgr3jsRNlzqkEQKoiTeI=
Subject key identifier:   36:10:79:14:0C:AA:9B:A2:2C:82:EC:1D:BA:FA:69:B1:2C:BF:BB:0F
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       2F0E80A33C79BE88F4CE8ADDFA356D01DF04A74E
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa
Signing time:             Mon 11 May 2026 17:38:42 +0000
ROA not before:           Mon 11 May 2026 17:33:42 +0000
ROA not after:            Mon 10 May 2027 17:38:42 +0000
asID:                     32595
IP address blocks:        2401:5f20:1000::/36 maxlen: 127
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0e:80:a3:3c:79:be:88:f4:ce:8a:dd:fa:35:6d:01:df:04:a7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: May 11 17:33:42 2026 GMT
            Not After : May 10 17:38:42 2027 GMT
        Subject: CN=361079140CAA9BA22C82EC1DBAFA69B12CBFBB0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:8f:45:c2:62:f3:59:0f:ef:d0:b0:d7:f8:
                    02:df:9c:e9:e8:27:83:d6:f1:b5:b0:5a:ae:dc:32:
                    dd:cb:d4:1e:1c:e0:eb:67:c5:be:d3:3c:a6:8f:50:
                    06:87:1e:1d:2b:76:7e:01:db:d6:56:93:1e:f9:68:
                    06:6f:c4:1d:f4:5e:21:21:4d:61:51:2a:4a:3e:dc:
                    ec:4e:f3:c5:aa:9a:89:a7:74:35:37:da:de:5d:7c:
                    3c:8b:94:fb:dc:dd:b2:50:01:7f:ac:58:39:f9:be:
                    26:5f:12:06:79:db:ea:7e:1c:2c:d0:ad:87:93:ea:
                    75:7b:1f:3a:4a:94:cc:0d:24:03:a5:83:14:2c:70:
                    7c:0e:a3:1c:90:dc:2e:d1:5a:31:3c:8e:2d:de:bd:
                    61:70:a8:b7:2a:e6:5a:0c:e9:1d:31:a7:9e:b8:1a:
                    62:a0:12:f5:00:6d:96:0e:e9:ac:be:3a:ed:ab:25:
                    68:53:ce:39:35:79:32:6b:25:3e:5d:3d:ff:0d:6e:
                    5b:58:34:a8:51:fd:ef:14:0a:73:ba:f3:4f:17:23:
                    39:f0:ad:93:c9:b6:41:97:e3:b7:4e:dc:7e:48:24:
                    9e:3d:57:ab:6d:55:61:cc:0e:04:ff:4c:06:f5:6b:
                    c7:fe:4d:4b:d4:e0:ab:5e:5e:1f:c9:cd:ba:d6:44:
                    cf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:10:79:14:0C:AA:9B:A2:2C:82:EC:1D:BA:FA:69:B1:2C:BF:BB:0F
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a313030303a3a2f33362d313237203d3e203332353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5f20:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:71:8b:57:dd:0e:56:c6:22:44:4a:fd:78:e9:77:a0:2d:
         22:a0:46:ff:e4:34:7d:4a:07:1a:3d:9f:8f:28:f0:bb:36:38:
         da:05:f8:0c:b7:6e:67:ec:14:f0:bb:8d:5e:07:b0:4f:81:77:
         12:fe:c9:96:f3:58:64:31:91:f4:75:5a:97:1e:c6:56:15:9e:
         65:47:a7:cf:6b:e0:e4:65:6b:5b:33:07:a5:ec:89:fe:df:45:
         c3:e1:cb:63:3d:db:d8:87:b1:f8:ce:3c:dc:77:d6:b2:5c:51:
         68:fd:33:6d:62:cb:a0:5d:ea:2c:ff:5c:ca:ae:51:e0:9a:9e:
         ff:35:62:b5:4e:ae:f0:30:fd:c7:68:7d:06:e4:4f:fa:e7:ce:
         c0:fb:97:d7:af:55:74:ba:06:db:2d:4f:00:35:8a:80:30:f5:
         ce:8b:a0:f7:54:80:a3:42:70:52:29:69:1e:23:1b:91:4e:3f:
         4a:4d:47:e8:d2:a1:e4:df:10:79:12:4a:82:d4:9c:8e:a9:98:
         c8:2e:16:06:38:f1:8e:fc:b5:ff:dc:ce:22:64:a9:0f:aa:5a:
         3a:bb:ad:aa:57:ad:46:b6:b6:71:ca:73:6a:7c:71:64:59:7c:
         e1:5f:54:bc:b8:e5:0e:22:77:69:a8:bf:3f:4a:64:70:93:f3:
         3e:dd:ed:47
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIULw6Aozx5voj0zord+jVtAd8Ep04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE1REUwQjVDNzJFMDJFMkEyMzgwQ0EyN0NFREEzMzI5
OTU5QzUzMjAeFw0yNjA1MTExNzMzNDJaFw0yNzA1MTAxNzM4NDJaMDMxMTAvBgNV
BAMTKDM2MTA3OTE0MENBQTlCQTIyQzgyRUMxREJBRkE2OUIxMkNCRkJCMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMI9FwmLzWQ/v0LDX+ALfnOno
J4PW8bWwWq7cMt3L1B4c4Otnxb7TPKaPUAaHHh0rdn4B29ZWkx75aAZvxB30XiEh
TWFRKko+3OxO88WqmomndDU32t5dfDyLlPvc3bJQAX+sWDn5viZfEgZ52+p+HCzQ
rYeT6nV7HzpKlMwNJAOlgxQscHwOoxyQ3C7RWjE8ji3evWFwqLcq5loM6R0xp564
GmKgEvUAbZYO6ay+Ou2rJWhTzjk1eTJrJT5dPf8NbltYNKhR/e8UCnO6808XIznw
rZPJtkGX47dO3H5IJJ49V6ttVWHMDgT/TAb1a8f+TUvU4KteXh/JzbrWRM/RAgMB
AAGjggH4MIIB9DAdBgNVHQ4EFgQUNhB5FAyqm6IsguwduvppsSy/uw8wHwYDVR0j
BBgwFoAUGl3gtccuAuKiOAyifO2jMplZxTIwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0hJSklD
T0xURC8wLzFBNURFMEI1QzcyRTAyRTJBMjM4MENBMjdDRURBMzMyOTk1OUM1MzIu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvMUE1REUwQjVDNzJFMDJFMkEyMzgwQ0Ey
N0NFREEzMzI5OTU5QzUzMi5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcw
C4ZucnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSElKSUNPTFRELzAvMzIz
NDMwMzEzYTM1NjYzMjMwM2EzMTMwMzAzMDNhM2EyZjMzMzYyZDMxMzIzNzIwM2Qz
ZTIwMzMzMjM1MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQBXyAQMA0GCSqGSIb3DQEBCwUAA4IB
AQBm/3GLV90OVsYiREr9eOl3oC0ioEb/5DR9SgcaPZ+PKPC7NjjaBfgMt25n7BTw
u41eB7BPgXcS/smW81hkMZH0dVqXHsZWFZ5lR6fPa+DkZWtbMwel7In+30XD4ctj
PdvYh7H4zjzcd9ayXFFo/TNtYsugXeos/1zKrlHgmp7/NWK1Tq7wMP3HaH0G5E/6
587A+5fXr1V0ugbbLU8ANYqAMPXOi6D3VICjQnBSKWkeIxuRTj9KTUfo0qHk3xB5
EkqC1JyOqZjILhYGOPGO/LX/3M4iZKkPqlo6u62qV61GtrZxynNqfHFkWXzhX1S8
uOUOIndpqL8/SmRwk/M+3e1H
-----END CERTIFICATE-----
Generated at Wed May 13 21:15:13 2026 by rpki-client