Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFU/0/323430323a323665303a3a2f33322d3438203d3e2039393138.roa
File:                     323430323a323665303a3a2f33322d3438203d3e2039393138.roa (raw, json)
Hash identifier:          P3RZ+5yR615iUMzqbYBESP/TjGRguu5CcQeQgKFVanc=
Subject key identifier:   82:E7:FB:3A:24:CD:13:E4:9F:EF:CD:09:70:89:19:93:80:90:53:B4
Certificate issuer:       /CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
Certificate serial:       01E04FFA9D79276FC5DB6E44265FAB78A5356597
Authority key identifier: CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIFU/0/323430323a323665303a3a2f33322d3438203d3e2039393138.roa
Signing time:             Mon 11 May 2026 17:56:20 +0000
ROA not before:           Mon 11 May 2026 17:51:20 +0000
ROA not after:            Mon 10 May 2027 17:56:20 +0000
asID:                     9918
IP address blocks:        2402:26e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl
                          rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e0:4f:fa:9d:79:27:6f:c5:db:6e:44:26:5f:ab:78:a5:35:65:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEF74285903EEA3346FB1E74872895A4CE8D1742
        Validity
            Not Before: May 11 17:51:20 2026 GMT
            Not After : May 10 17:56:20 2027 GMT
        Subject: CN=82E7FB3A24CD13E49FEFCD0970891993809053B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bb:4e:06:84:c5:f0:6a:d9:ec:23:1c:26:d4:
                    de:b8:4a:bf:67:cf:3a:6f:db:a6:39:77:fe:11:d4:
                    07:e3:1e:48:65:39:9c:2b:ea:65:a0:79:6c:49:8b:
                    f5:96:b5:bb:7f:94:5a:0e:b1:01:b9:95:17:33:3e:
                    ed:2b:b1:69:d2:05:5b:8f:40:e3:96:8f:ba:90:8e:
                    62:88:be:99:48:8b:c4:49:08:4f:7c:2d:3c:14:45:
                    b4:dd:74:7a:42:54:31:84:fe:d2:40:52:4c:ac:85:
                    06:fb:65:1b:d4:32:40:6a:53:e5:84:58:b2:01:9e:
                    07:01:87:21:f1:03:8c:8e:02:c9:83:f8:80:5a:63:
                    8f:d2:69:3e:83:fe:b3:d3:e9:4b:9a:71:ad:3e:9b:
                    31:6c:3f:2f:13:31:76:b6:25:58:a6:5e:2f:f4:30:
                    81:39:df:b8:fd:60:61:34:00:c9:69:10:ef:67:45:
                    d4:8f:25:b6:2d:68:e4:e3:15:c1:b2:60:f4:66:70:
                    47:ec:0c:4f:a1:1c:2b:ea:bb:46:9d:f2:9d:ff:4b:
                    9b:82:e9:81:74:45:ae:cd:50:18:4d:13:af:ab:de:
                    64:ae:8a:05:a8:ea:60:0a:79:75:92:33:56:72:5f:
                    88:d4:24:7d:51:8f:58:34:e7:55:2d:ab:f2:8e:9e:
                    b3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E7:FB:3A:24:CD:13:E4:9F:EF:CD:09:70:89:19:93:80:90:53:B4
            X509v3 Authority Key Identifier:
                keyid:CE:F7:42:85:90:3E:EA:33:46:FB:1E:74:87:28:95:A4:CE:8D:17:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/CEF74285903EEA3346FB1E74872895A4CE8D1742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CEF74285903EEA3346FB1E74872895A4CE8D1742.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFU/0/323430323a323665303a3a2f33322d3438203d3e2039393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e0:32:35:16:b9:29:1b:f3:a0:29:76:04:77:f7:7d:5a:3e:
         47:3e:3a:f7:0d:89:b1:f4:63:3a:c2:9b:26:b2:f2:48:fb:cb:
         cb:48:c6:38:23:d3:2c:fe:ff:5b:6e:ea:e2:9d:5a:f8:e7:aa:
         9b:28:01:3e:66:f3:d4:1c:f6:cd:54:5a:c4:f1:7c:2b:1a:99:
         5e:7d:86:44:ed:24:26:46:ed:ee:ad:cc:fd:84:71:9c:b2:91:
         37:97:7a:47:72:9f:38:c4:3c:cc:5f:fe:b5:a2:d5:74:81:0e:
         25:ea:f2:61:2d:3f:97:22:b2:90:07:0f:9d:e5:7a:a9:7b:6c:
         41:50:19:c4:6d:54:cc:28:d8:be:75:81:7f:20:de:b0:45:5e:
         6e:79:46:e2:17:b3:62:1d:ad:09:9c:19:18:be:be:c0:b3:a5:
         d7:e9:22:5d:9d:4d:d9:de:ae:41:01:99:a7:a8:c9:62:f4:25:
         00:9f:ff:8f:d7:cb:0a:dc:d4:6b:a0:ce:83:73:ee:3b:03:2e:
         f2:65:2c:05:a7:a9:1a:11:81:13:85:43:52:5c:06:06:c1:fa:
         bc:c1:f8:37:f9:56:46:06:68:be:aa:4a:21:77:5f:1c:2c:59:
         47:b0:8a:75:83:8b:bf:2b:c9:85:bb:de:cf:52:80:08:63:ad:
         40:31:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:54 2026 by rpki-client