Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa
File:                     323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (raw, json)
Hash identifier:          o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=
Subject key identifier:   CE:06:73:7F:50:A0:77:54:20:3C:8A:3B:B5:10:B5:3C:8B:C1:0C:A4
Certificate issuer:       /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Certificate serial:       5BFCFF63EE8D770ABB5E5F0DE7A0381E2201B151
Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TIH/0/323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa
Signing time:             Mon 11 May 2026 17:57:45 +0000
ROA not before:           Mon 11 May 2026 17:52:45 +0000
ROA not after:            Mon 10 May 2027 17:57:45 +0000
asID:                     38254
IP address blocks:        2403:7f40:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl
                          rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:04:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fc:ff:63:ee:8d:77:0a:bb:5e:5f:0d:e7:a0:38:1e:22:01:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
        Validity
            Not Before: May 11 17:52:45 2026 GMT
            Not After : May 10 17:57:45 2027 GMT
        Subject: CN=CE06737F50A07754203C8A3BB510B53C8BC10CA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:3a:fd:ca:30:73:c6:ef:da:f9:b8:37:74:
                    8a:87:80:fb:5f:cc:09:f1:1b:07:01:03:ab:5d:fb:
                    63:d7:5d:a8:09:80:0d:dd:12:fe:b0:54:ad:00:36:
                    3c:df:b3:35:d4:5f:3c:4c:62:8a:7f:cb:4e:e3:ba:
                    9b:1c:c3:3d:fd:20:50:80:34:0a:8c:f2:61:28:dc:
                    f0:48:38:91:72:f5:4a:bc:a9:a6:e3:58:4a:c2:9f:
                    2b:94:04:2f:6a:cf:aa:ea:aa:5e:2d:4d:24:fe:06:
                    bb:c2:dd:16:57:31:a5:98:2a:b3:49:c5:47:88:69:
                    06:08:1d:6e:63:c1:e0:81:d2:3a:8a:2f:5d:e5:ef:
                    a1:3d:bd:ee:db:6c:db:5e:42:d4:2e:b7:24:ac:b0:
                    a0:25:ff:cc:56:17:33:70:7f:ca:7d:43:92:bc:1c:
                    6e:77:57:cd:48:01:bc:ca:55:4f:04:8e:51:fc:96:
                    6b:b2:ea:65:4a:7e:63:2e:7a:b1:c0:4d:b0:f2:7a:
                    f7:b8:97:5d:3e:4e:db:f3:aa:91:c6:61:fb:54:f2:
                    37:13:15:a0:f0:25:a8:18:5b:4c:ce:2b:aa:96:64:
                    61:1f:94:0e:d1:01:25:fb:8b:33:75:4d:26:6f:0b:
                    4f:29:42:c6:50:e8:8c:92:55:63:b4:74:c2:3e:14:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:06:73:7F:50:A0:77:54:20:3C:8A:3B:B5:10:B5:3C:8B:C1:0C:A4
            X509v3 Authority Key Identifier:
                keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7f40:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b6:27:d9:28:47:c8:08:d8:a8:b3:3d:26:9d:f2:78:7d:9f:f2:
         9b:ed:08:ad:f9:88:8c:37:bb:7b:4a:40:bc:39:d1:e7:d9:0b:
         58:82:78:0e:e5:46:27:87:b1:95:22:f6:31:e0:e5:4c:f5:a4:
         b5:a8:79:67:42:e4:04:27:0e:de:b3:4e:4f:43:3b:05:e0:6f:
         c6:25:a8:a7:c1:61:78:05:61:95:24:62:d6:25:78:80:f1:6f:
         96:c7:47:fe:c1:09:77:06:24:77:0f:40:74:cc:5d:81:10:db:
         88:49:d6:00:03:ba:e8:fa:df:1c:8c:05:b3:57:eb:44:fc:aa:
         1b:cd:43:ad:d5:13:33:99:a6:02:b4:d4:83:5e:f1:26:64:be:
         02:6e:c7:36:6a:b9:00:6b:04:b6:4a:3e:c5:b9:b8:f5:4e:88:
         a2:3c:1b:23:8e:b5:70:f0:c4:e4:1a:06:53:df:f1:ab:1c:3e:
         2f:b9:5d:c2:01:52:90:92:73:4f:90:a3:85:cc:51:3b:e9:62:
         19:fe:53:2f:e8:c5:b3:cd:9a:44:a5:9c:34:e2:62:28:4f:15:
         c7:2b:88:f3:a3:70:63:59:90:af:11:6e:21:d3:54:19:fc:40:
         13:f3:e8:3d:16:35:df:be:90:66:f3:af:18:e0:f8:4f:a0:61:
         b4:82:5d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:33 2026 by rpki-client