Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430313a373038303a3a2f33322d3438203d3e203234313537.roa
File:                     323430313a373038303a3a2f33322d3438203d3e203234313537.roa (raw, json)
Hash identifier:          sUAW+ETrnkZR7GAqzPbTDbCxPMJfWQC7xxv8TXIMUxo=
Subject key identifier:   3E:CB:25:B4:BE:EF:FE:A0:02:86:8C:8E:EA:3A:A8:99:62:7E:66:8A
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       417E4A0EAD06C3912F206759716AFDE6EE3A2407
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430313a373038303a3a2f33322d3438203d3e203234313537.roa
Signing time:             Mon 11 May 2026 17:33:00 +0000
ROA not before:           Mon 11 May 2026 17:28:00 +0000
ROA not after:            Mon 10 May 2027 17:33:00 +0000
asID:                     24157
IP address blocks:        2401:7080::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7e:4a:0e:ad:06:c3:91:2f:20:67:59:71:6a:fd:e6:ee:3a:24:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:28:00 2026 GMT
            Not After : May 10 17:33:00 2027 GMT
        Subject: CN=3ECB25B4BEEFFEA002868C8EEA3AA899627E668A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:8a:2d:e6:12:ea:74:a5:20:96:38:ba:3b:
                    c3:9e:64:bf:eb:f2:49:da:cb:b3:59:7b:ef:75:58:
                    cc:f0:6b:e2:6d:37:70:03:f2:79:80:15:96:72:c5:
                    7b:d2:14:7e:0d:51:2c:e0:70:b5:66:ac:1e:47:2a:
                    e4:f5:84:c6:91:9a:19:e9:e7:f5:34:fc:8d:0c:92:
                    84:f4:4f:7e:df:13:1c:2b:95:c8:0c:5e:78:3d:73:
                    38:49:23:37:f9:4d:7d:0e:be:b5:59:3e:a7:c9:1a:
                    e4:c1:43:ef:cb:0f:0c:02:92:d7:df:30:eb:b7:ba:
                    3a:5f:29:4b:29:d1:c2:63:92:24:0c:b7:1e:97:f6:
                    a6:04:bb:88:8d:d9:f8:ba:74:83:45:31:6f:99:9d:
                    98:f3:c1:01:50:d4:5d:f5:fe:55:b1:e1:1f:23:68:
                    fd:43:43:b6:db:84:38:7d:f7:28:78:51:fc:8c:b8:
                    fd:c7:b9:77:24:2c:8e:cb:4d:4c:97:37:90:d9:5e:
                    3b:a6:c1:79:d9:e9:b8:25:8d:0c:3f:bb:a4:04:86:
                    ab:14:6a:db:1b:33:c0:b7:0c:c3:27:64:a2:10:52:
                    58:22:d0:0b:4b:4a:67:19:f5:47:2f:0a:cc:c4:c0:
                    ff:f0:a5:02:75:8e:ad:d1:02:fc:b9:e5:a1:4b:ff:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:25:B4:BE:EF:FE:A0:02:86:8C:8E:EA:3A:A8:99:62:7E:66:8A
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430313a373038303a3a2f33322d3438203d3e203234313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7080::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:e4:b4:ec:a2:b0:21:1d:77:e3:97:60:9f:29:a2:ff:ff:
         49:57:e0:40:56:a1:ae:aa:95:27:ab:48:81:f1:ea:44:77:08:
         8d:d7:c8:7e:d8:32:7d:06:47:ee:90:98:05:da:f2:a4:1b:55:
         ee:62:04:57:a6:34:08:7a:f0:0e:de:d3:19:65:23:f4:6e:5a:
         0c:6a:81:c3:c8:93:98:7c:9f:07:a6:44:19:43:da:e4:82:18:
         8a:ad:fb:24:31:03:94:ce:0b:5f:db:43:0a:e4:0f:09:b5:0c:
         4b:b3:f0:21:f2:eb:a1:4c:af:40:cd:6a:8a:61:57:1d:1b:74:
         0a:b7:b4:4f:25:ba:a6:dc:be:a4:28:b5:c6:7d:5e:73:1a:6c:
         2e:d8:ad:a3:dc:ec:b9:b9:43:36:6b:9a:e4:99:c7:42:95:df:
         96:db:78:db:cf:1b:c5:53:75:94:5d:d5:03:15:a6:64:96:8e:
         98:14:f4:b0:f3:5d:a1:d4:26:f3:8f:e9:51:af:7d:3c:b5:b2:
         42:72:64:f1:f6:02:52:68:4a:95:56:08:d6:a1:fa:fa:1b:f7:
         80:bf:e3:8e:df:58:d8:03:9a:58:23:fd:85:df:79:51:4b:47:
         d8:d6:14:d6:4d:bd:94:be:e0:e4:d9:54:44:94:89:bd:ec:9a:
         53:3b:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:32 2026 by rpki-client