Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/323030313a6465343a3a2f34382d3438203d3e2031363539.roa
File:                     323030313a6465343a3a2f34382d3438203d3e2031363539.roa (raw, json)
Hash identifier:          m4Q8w31INI3/BzV8LCIxEs+PquXpp6xay//BmzwHUsI=
Subject key identifier:   B2:88:3F:EA:79:2F:44:EF:FD:A6:C6:E9:43:00:93:E0:9C:6B:30:21
Certificate issuer:       /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
Certificate serial:       6637640DF6E9057F3FF487D71AA183968D4BAA35
Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6465343a3a2f34382d3438203d3e2031363539.roa
Signing time:             Mon 11 May 2026 17:55:22 +0000
ROA not before:           Mon 11 May 2026 17:50:22 +0000
ROA not after:            Mon 10 May 2027 17:55:22 +0000
asID:                     1659
IP address blocks:        2001:de4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl
                          rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:37:64:0d:f6:e9:05:7f:3f:f4:87:d7:1a:a1:83:96:8d:4b:aa:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99
        Validity
            Not Before: May 11 17:50:22 2026 GMT
            Not After : May 10 17:55:22 2027 GMT
        Subject: CN=B2883FEA792F44EFFDA6C6E9430093E09C6B3021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:43:d9:87:23:a2:f1:9d:03:5d:28:db:ed:
                    0d:30:c6:f4:a3:8e:82:29:8a:69:58:4c:be:60:9e:
                    7b:ef:7c:41:d6:83:73:02:f3:59:6e:f0:63:bd:a3:
                    9d:f7:99:f5:4b:29:50:47:d2:f6:b2:cd:b6:a5:eb:
                    07:91:5e:03:e9:17:b6:ec:a7:a7:79:d1:3b:aa:8d:
                    c1:37:6e:e8:32:1b:6d:61:eb:ef:47:27:8b:f2:84:
                    4d:58:94:6f:fd:0d:c9:2a:1d:27:63:c1:91:df:98:
                    59:57:91:0f:32:8e:4e:4e:00:f8:87:89:77:54:21:
                    f6:bb:63:a8:42:ca:ca:9d:56:5c:2f:61:47:14:ce:
                    ab:ec:59:71:6b:08:c8:24:40:8b:0b:15:74:a8:f9:
                    03:56:f4:e4:30:80:e6:7b:57:78:f2:84:c5:3a:ea:
                    e4:e5:94:ea:5b:37:3d:c5:88:fe:f5:95:81:98:66:
                    86:04:0e:a3:31:ba:6c:7e:79:3e:ec:67:f9:dd:b2:
                    76:f5:ad:38:d4:67:77:5d:c4:29:2f:fc:43:65:68:
                    8e:b0:7f:71:ee:a0:43:2f:ef:9b:a8:d2:92:8a:cd:
                    bd:44:99:42:09:a7:25:7a:20:96:29:42:3d:af:32:
                    15:c4:f9:d1:62:13:0c:ca:c8:ac:2b:5e:5f:50:65:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:88:3F:EA:79:2F:44:EF:FD:A6:C6:E9:43:00:93:E0:9C:6B:30:21
            X509v3 Authority Key Identifier:
                keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6465343a3a2f34382d3438203d3e2031363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:de4::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:da:01:c0:02:47:a9:2f:f7:01:4d:ae:48:1e:f1:c0:9f:
         e7:91:1c:d9:e1:ca:38:29:7d:e5:36:60:e3:70:0b:fa:05:50:
         43:43:85:1d:a7:f1:2a:05:be:f4:46:7d:37:49:c3:25:7f:95:
         be:72:b0:6f:e3:e9:b1:99:e9:e0:62:e7:e2:14:52:02:20:89:
         56:13:9e:09:40:b5:fe:bc:c4:e5:eb:09:2d:cb:b1:e9:ad:c2:
         7f:9d:03:5c:39:de:4f:1b:95:ee:63:ca:bc:e5:42:b7:57:e6:
         06:c8:d0:2d:81:1e:85:55:6a:34:e8:43:c9:29:32:85:9a:f1:
         2a:ff:2b:87:9b:31:ee:69:6b:63:f1:ba:a3:ac:02:3a:bb:df:
         df:34:da:d1:c1:8d:ef:aa:42:17:53:0a:4b:b7:23:f1:d6:46:
         57:cb:f8:d7:29:80:48:ba:98:bb:aa:4b:6a:fe:7f:bb:fc:48:
         77:f5:cf:b8:72:d4:15:d9:c6:e7:b9:92:be:e3:9d:86:2f:46:
         2e:7a:90:10:41:71:cc:21:8e:25:89:cf:3c:97:9f:ae:82:90:
         4c:96:14:84:2b:5f:41:97:f3:72:e8:8e:d3:c0:02:62:d8:3f:
         45:61:d6:4b:a7:a7:e9:12:c1:a4:01:3a:c8:ef:96:ce:c6:76:
         bf:20:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:13:27 2026 by rpki-client