Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20323035333239.roa
File:                     323430313a356632303a3a2f33322d313237203d3e20323035333239.roa (raw, json)
Hash identifier:          8yGamJRav/ZDHTFcB9LQPl8vcZJDC9UL92XjkdKbALk=
Subject key identifier:   B5:58:97:3E:95:39:6A:05:79:36:97:5C:2C:72:C1:77:15:F9:C4:D9
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       1F6100C857FCFD6ABA091FA9EE72DB49FFBBC4FD
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20323035333239.roa
Signing time:             Mon 11 May 2026 17:38:41 +0000
ROA not before:           Mon 11 May 2026 17:33:41 +0000
ROA not after:            Mon 10 May 2027 17:38:41 +0000
asID:                     205329
IP address blocks:        2401:5f20::/32 maxlen: 127
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:61:00:c8:57:fc:fd:6a:ba:09:1f:a9:ee:72:db:49:ff:bb:c4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: May 11 17:33:41 2026 GMT
            Not After : May 10 17:38:41 2027 GMT
        Subject: CN=B558973E95396A057936975C2C72C17715F9C4D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3c:06:02:92:2f:92:3f:03:1b:19:38:16:f1:
                    e6:79:25:12:64:91:ab:9e:9b:fc:88:a9:cc:f4:33:
                    33:26:b9:8c:14:ee:1c:75:85:ba:47:a6:1c:50:70:
                    5a:f6:f4:68:59:bd:11:12:f7:87:99:90:85:8f:46:
                    5e:47:10:f1:03:ab:98:a6:67:42:31:32:9a:06:c6:
                    06:a9:c7:75:3b:c8:c5:04:39:c2:b3:47:03:6a:9d:
                    c3:78:d6:26:09:fa:00:0a:32:e4:6e:a1:67:3a:b1:
                    72:6b:dd:c6:60:dd:7a:97:2b:0f:4d:a5:7e:29:28:
                    fd:88:e2:f9:eb:4f:dc:64:ac:b5:e5:d2:03:35:0c:
                    6a:18:9c:19:df:fe:56:27:86:7b:3a:68:64:8a:11:
                    36:6f:eb:dd:48:c8:fa:92:b7:0e:95:4d:82:f3:65:
                    c4:9e:be:28:11:8e:c6:f1:3a:7c:0c:0b:0e:b3:b8:
                    14:40:07:37:80:4c:cf:ac:5e:2b:b2:8e:9d:22:56:
                    cb:2e:8a:e0:53:89:97:da:ec:2c:2e:ee:d6:6c:3c:
                    3c:8d:d0:79:7c:7f:b3:d4:9e:52:1b:d8:c2:59:cc:
                    84:7f:7b:99:c7:75:b9:cd:7b:be:99:ca:e7:5c:2f:
                    21:91:52:ff:2c:de:db:81:0a:d9:b4:ac:3f:97:2c:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:58:97:3E:95:39:6A:05:79:36:97:5C:2C:72:C1:77:15:F9:C4:D9
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20323035333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:8e:c4:55:cd:c0:26:7a:25:4c:31:e3:b3:26:bf:17:b9:
         26:d0:9a:07:f0:d0:cd:58:37:d2:e3:df:d9:36:ae:39:8e:42:
         f5:c3:45:d7:08:45:d9:d7:39:d1:e3:c1:0c:e5:cb:a8:cc:83:
         ea:db:6c:52:0d:a7:d6:5e:6f:9d:7d:d4:94:ee:70:46:5b:23:
         3e:8a:e2:07:16:4b:e0:37:b3:9d:2b:de:6c:3c:1e:07:fd:80:
         5a:76:ec:f4:40:4a:45:48:ae:d4:8f:c7:21:50:e2:0e:3e:cd:
         6a:a1:22:32:93:b8:ff:38:ee:22:03:ca:41:a8:bd:1e:76:13:
         e5:46:24:59:30:54:72:44:a9:35:8d:6e:c0:45:7c:f6:cc:f7:
         c7:bc:44:0b:19:c4:ab:d4:11:ef:b1:db:ca:cd:de:70:18:24:
         27:d8:59:8f:e6:49:e7:60:a9:51:dc:53:13:78:e1:c7:51:2c:
         4c:cd:48:a5:ce:2d:b1:5b:17:66:db:90:9b:3c:05:f5:8b:a1:
         7a:32:e3:ec:83:7f:c0:5f:a1:6f:0b:a2:64:90:6b:38:aa:64:
         32:5d:db:9e:38:56:4b:28:fd:ee:f8:ee:24:90:54:cc:f5:a1:
         e5:b0:87:48:94:89:16:12:b9:6c:ef:da:87:f2:73:77:a6:5c:
         a8:f7:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:15:09 2026 by rpki-client