Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430323a373530303a666166663a3a2f34382d3634203d3e203234313538.roa
File:                     323430323a373530303a666166663a3a2f34382d3634203d3e203234313538.roa (raw, json)
Hash identifier:          w0/KSjcML7s7cQxrvgz7Y83ewwTuu2IckPTCd2tea+A=
Subject key identifier:   4E:26:5A:AE:56:02:AF:9E:06:48:0D:5A:76:E2:30:41:DE:B5:74:A5
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       29BE1BA15B7CCCF59F4C39DC01B5632FD174C914
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430323a373530303a666166663a3a2f34382d3634203d3e203234313538.roa
Signing time:             Mon 11 May 2026 17:09:08 +0000
ROA not before:           Mon 11 May 2026 17:04:08 +0000
ROA not after:            Mon 10 May 2027 17:09:08 +0000
asID:                     24158
IP address blocks:        2402:7500:faff::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:be:1b:a1:5b:7c:cc:f5:9f:4c:39:dc:01:b5:63:2f:d1:74:c9:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:04:08 2026 GMT
            Not After : May 10 17:09:08 2027 GMT
        Subject: CN=4E265AAE5602AF9E06480D5A76E23041DEB574A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:1a:90:94:52:83:fe:0b:ee:71:a5:43:34:
                    54:a7:e1:c0:20:22:4d:09:f8:fa:dc:54:c7:3e:c6:
                    6c:7c:8f:a8:91:74:1f:4f:92:9c:21:97:ee:a7:db:
                    02:f0:95:68:d4:73:e2:00:65:68:af:c0:ac:ff:d7:
                    98:05:f8:ad:ad:55:be:7a:79:ea:47:ad:10:cf:d0:
                    cd:fe:3a:a5:93:65:71:74:ba:71:ec:54:c2:07:73:
                    48:42:63:55:8a:58:7b:b8:d3:d0:e0:99:f9:6b:27:
                    c9:60:50:ad:d2:2f:74:76:f4:11:28:56:5e:92:74:
                    fb:eb:b4:5c:8b:e1:65:f1:f5:0d:13:cf:c8:b3:aa:
                    42:7f:47:e8:ef:fb:5d:f7:17:86:2f:bd:a1:7b:20:
                    be:86:a7:93:94:24:b7:60:79:2f:88:fe:1e:37:07:
                    f7:34:d5:e3:b1:c0:af:c7:74:72:bb:a2:f4:51:23:
                    17:1b:73:62:41:f4:2f:3d:c1:6b:07:d7:b7:dd:78:
                    26:e0:ce:77:1a:03:d8:75:22:33:bd:07:20:f0:e1:
                    f3:8c:6b:dd:34:4c:02:c3:c1:d8:92:64:8c:b5:3c:
                    26:55:3d:b1:3e:0e:63:51:23:db:c1:5d:e0:9f:1c:
                    e4:f2:e5:ab:96:0d:c7:50:9c:79:9c:a1:c1:00:cb:
                    f0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:26:5A:AE:56:02:AF:9E:06:48:0D:5A:76:E2:30:41:DE:B5:74:A5
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430323a373530303a666166663a3a2f34382d3634203d3e203234313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7500:faff::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:ba:bb:50:6e:12:b8:10:49:3a:ce:18:58:af:3a:8f:f8:81:
         c4:6e:0d:ce:a6:4f:49:03:5d:b2:3d:ef:fa:d8:00:c1:3d:87:
         c6:09:4b:44:c2:5f:60:f4:ef:30:9f:5d:69:a4:ed:dd:98:7b:
         59:78:5c:25:03:14:40:19:6e:37:20:00:0a:42:21:b3:fc:30:
         da:0a:75:f0:ca:39:fa:1b:f5:14:1e:14:47:c3:ba:bb:38:99:
         d1:a2:d5:20:0a:46:c4:17:74:74:33:7a:62:5d:dc:06:e6:27:
         6e:c8:4d:1b:d2:0f:5a:33:9c:d6:96:0f:d9:ac:7a:6f:b0:d2:
         64:70:fd:59:ca:e1:2e:81:7c:1d:ec:5c:3c:6e:77:a0:bb:46:
         56:c3:47:60:0c:ba:c6:af:0f:ba:5a:04:96:26:3b:a6:d6:bc:
         14:57:a2:f3:3a:1f:26:0a:ff:02:1b:75:d8:d6:87:f7:4c:7e:
         04:7d:fd:43:aa:c8:62:03:fc:54:31:ec:40:04:27:3e:ef:66:
         39:39:c1:b7:9f:34:97:87:be:66:35:89:da:1b:2d:fe:d4:b1:
         9f:90:2e:91:df:5f:5d:33:73:6a:0b:be:27:32:df:6e:3c:13:
         70:d7:5d:d9:7b:9d:09:41:34:78:45:a7:de:72:45:90:95:12:
         6d:0d:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:53 2026 by rpki-client