Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/E7_U6JGK8hIEHCZrtS1vv4NIY9M.roa
File:                     E7_U6JGK8hIEHCZrtS1vv4NIY9M.roa (raw, json)
Hash identifier:          ky02pAWdNa8UqDFKHzxe13+X/aduqkxZBu/MOKpcqlo=
Subject key identifier:   13:BF:D4:E8:91:8A:F2:12:04:1C:26:6B:B5:2D:6F:BF:83:48:63:D3
Certificate issuer:       /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial:       077C
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/E7_U6JGK8hIEHCZrtS1vv4NIY9M.roa
Signing time:             Mon 20 Apr 2026 05:57:24 +0000
ROA not before:           Mon 20 Apr 2026 05:57:24 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     23456
IP address blocks:        2406:8dc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1916 (0x77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
        Validity
            Not Before: Apr 20 05:57:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=13BFD4E8918AF212041C266BB52D6FBF834863D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:c4:09:90:43:99:e5:f2:eb:32:b4:39:89:
                    26:f4:0f:83:52:e5:08:72:0b:be:0c:23:2a:c0:5a:
                    0a:8b:dc:a9:6d:e7:6f:b3:94:95:c5:85:6b:39:ca:
                    26:03:bd:e9:39:04:b9:35:a0:d6:ac:e9:ca:ae:50:
                    4b:07:d7:e0:60:44:8a:36:0b:e6:62:9a:9b:56:30:
                    c8:73:7d:89:d6:72:3e:18:89:76:1a:5b:c4:c3:38:
                    b2:d4:0c:d3:4b:0b:06:62:91:52:00:0b:d0:68:25:
                    e6:f1:f5:5c:ca:3d:8a:6d:aa:f3:59:7e:6c:c9:ea:
                    18:36:01:f4:74:c2:11:b5:71:19:02:22:92:4a:af:
                    89:cc:e4:45:d5:c5:96:ef:e4:88:4d:22:04:25:8b:
                    8f:0b:bf:24:cb:a1:4d:00:7d:47:8b:79:36:75:25:
                    eb:38:93:cd:5c:42:8d:47:91:5d:40:21:38:21:60:
                    1d:27:05:e7:ce:b2:82:14:bd:06:39:e2:f7:14:06:
                    8f:cf:6b:27:0e:6e:07:42:c9:5d:c3:87:44:ca:64:
                    66:e8:01:c4:11:af:54:6d:7e:45:34:2c:2b:e5:da:
                    0b:49:00:c9:ee:5b:48:87:c0:c5:9d:fd:db:49:30:
                    6f:07:7b:aa:73:5a:b3:05:c1:bc:38:d1:d0:08:05:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:D4:E8:91:8A:F2:12:04:1C:26:6B:B5:2D:6F:BF:83:48:63:D3
            X509v3 Authority Key Identifier:
                keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/E7_U6JGK8hIEHCZrtS1vv4NIY9M.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:c4:44:ef:c9:74:44:78:d2:83:b5:9d:c6:29:68:3e:06:51:
         38:2d:a7:64:a8:7b:1c:a0:b7:92:3d:8e:a7:33:7b:ed:82:cb:
         e6:be:1c:fa:29:57:cb:9b:10:31:a7:2c:2d:6c:fd:f7:8b:f0:
         5f:53:03:c8:36:e2:5f:24:1b:ad:ea:14:06:87:87:7e:bf:2f:
         63:13:cd:3c:82:11:8f:38:3c:03:ea:83:5d:19:f4:29:0f:c3:
         68:7a:da:d0:ed:73:4d:e1:ef:27:62:24:80:7b:59:ba:41:68:
         b6:59:c4:ed:5e:56:4e:de:5b:71:ea:aa:b8:68:a2:4d:98:f6:
         70:fe:bf:72:39:a1:a0:65:b9:1e:2e:0c:a2:4c:8c:98:6a:c2:
         8b:d0:f0:53:b9:2b:8d:88:4b:f7:e1:c9:f4:a4:4d:15:57:a0:
         b6:b9:33:2f:37:53:96:26:89:94:72:71:a4:7c:44:da:d4:84:
         ef:8c:40:2a:36:d2:29:21:39:6e:cf:38:b2:42:fa:9a:2b:93:
         3d:84:f3:15:33:39:a8:45:40:e0:25:e0:11:7a:72:11:97:ca:
         cd:eb:2e:03:ab:b1:f4:bb:5b:24:3e:a4:81:83:cc:83:a0:26:
         3c:3f:0e:e4:c8:53:21:a2:b7:84:39:b3:50:91:23:9d:bb:56:
         f8:1d:83:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 22:33:19 2026 by rpki-client