Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430333a633330303a3a2f33322d3438203d3e203234313537.roa
File:                     323430333a633330303a3a2f33322d3438203d3e203234313537.roa (raw, json)
Hash identifier:          U6MNymM4RHc8jpdCQ/EIUpHV7xHQAxweUpYSWb+O7jU=
Subject key identifier:   6A:FF:FF:CD:99:49:E3:5B:66:00:4E:48:69:33:F0:54:25:95:39:B4
Certificate issuer:       /CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
Certificate serial:       7C2F67F99B4E3C32528D0EAFA10C07A3031BECB0
Authority key identifier: 86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430333a633330303a3a2f33322d3438203d3e203234313537.roa
Signing time:             Mon 11 May 2026 17:33:00 +0000
ROA not before:           Mon 11 May 2026 17:28:00 +0000
ROA not after:            Mon 10 May 2027 17:33:00 +0000
asID:                     24157
IP address blocks:        2403:c300::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl
                          rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:67:f9:9b:4e:3c:32:52:8d:0e:af:a1:0c:07:a3:03:1b:ec:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619
        Validity
            Not Before: May 11 17:28:00 2026 GMT
            Not After : May 10 17:33:00 2027 GMT
        Subject: CN=6AFFFFCD9949E35B66004E486933F054259539B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:22:ba:90:cd:34:3d:04:4b:27:d3:39:5a:
                    01:16:94:b0:99:fb:f6:f4:ad:f4:a9:6c:f7:68:1a:
                    bb:d5:44:fd:2c:4e:d7:f9:be:44:2d:10:36:0c:96:
                    8a:25:b8:94:0e:87:a8:b5:ac:d9:39:31:4e:82:6f:
                    82:af:58:7c:91:fd:1f:0e:06:9c:f8:61:4f:75:6b:
                    de:dc:f8:f3:9f:b3:da:f7:df:a9:87:a8:a8:45:84:
                    4a:f9:4a:81:c4:69:8b:a1:11:fc:ef:65:a6:70:b1:
                    a3:04:63:cc:58:86:cc:f4:dc:ad:7d:bf:e5:10:b3:
                    92:3a:bb:b0:a6:af:88:6f:dd:95:8c:5d:e7:50:81:
                    f1:de:9a:2a:c4:8d:5c:8a:9f:53:8a:16:a4:48:aa:
                    7c:27:9d:92:a7:d3:db:a9:ce:96:14:4b:56:36:ab:
                    7a:c9:16:0f:bf:03:36:04:2d:b0:46:a0:3e:ca:ce:
                    f5:5d:ed:ce:cf:3f:c0:b7:83:5d:bf:56:48:5d:20:
                    62:20:fd:00:c8:41:c4:fd:8d:c4:6d:fa:11:66:73:
                    68:26:6f:69:05:f3:b0:93:09:fe:39:6a:52:72:6d:
                    b9:2f:c0:85:df:92:15:de:57:01:9f:fe:85:56:c4:
                    ed:b0:71:a8:11:14:7c:12:88:1b:d7:d5:4c:5b:3e:
                    09:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FF:FF:CD:99:49:E3:5B:66:00:4E:48:69:33:F0:54:25:95:39:B4
            X509v3 Authority Key Identifier:
                keyid:86:F4:E6:4E:28:55:B2:FD:00:FE:E4:92:F6:FB:82:D7:ED:5C:46:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/86F4E64E2855B2FD00FEE492F6FB82D7ED5C4619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIWANMOBILE/0/323430333a633330303a3a2f33322d3438203d3e203234313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c300::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:19:b3:8e:72:69:be:7b:4b:90:a7:73:c8:7f:a0:0a:29:0d:
         64:e2:68:2c:7e:d9:29:f7:8d:04:93:6e:97:31:4e:0d:53:11:
         4d:26:df:67:1c:03:c0:1a:49:e8:6a:89:6d:77:e6:e3:c6:5b:
         8a:32:55:b8:55:44:ac:0b:0b:3e:6a:2f:4d:35:71:8d:ef:dd:
         94:78:61:62:bb:40:05:b6:6a:1f:61:c3:ff:54:7d:bc:a5:ca:
         9b:5f:6f:e9:d0:7c:48:e6:2e:59:f3:30:52:15:53:ac:75:fc:
         b9:e5:27:14:b4:91:50:e4:d8:22:8c:11:90:25:fa:d4:64:15:
         10:b9:43:f1:f7:40:d4:98:9e:1b:0f:36:f3:d0:a2:53:7a:5f:
         e9:3b:bb:5f:a8:ff:8c:54:50:ab:c1:55:15:e1:0f:b6:91:7c:
         cc:a4:e6:d4:9d:be:da:34:08:b0:f0:02:f1:46:4b:cf:da:33:
         db:c5:66:1e:f7:9a:33:c0:ed:b2:cd:f0:c6:00:2e:72:eb:f6:
         e7:03:8c:d8:cc:d7:52:3f:e7:26:c6:56:e2:1e:21:61:24:eb:
         c0:fb:d6:47:ed:84:94:af:fb:ed:1c:88:57:95:d6:d9:0d:15:
         58:0b:cb:87:50:4a:30:9e:92:81:73:4c:94:52:6c:62:e2:19:
         35:af:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:40 2026 by rpki-client