Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/323430333a613363303a3a2f33322d3634203d3e20313331363030.roa
File:                     323430333a613363303a3a2f33322d3634203d3e20313331363030.roa (raw, json)
Hash identifier:          YRy2uONSplRfIX6wYvcL6ju1JnuSbWlYj0VFYl1Cy7Y=
Subject key identifier:   E9:16:D5:B2:8C:2B:C6:E6:C1:34:DA:50:15:F6:5F:32:E3:2A:A5:C0
Certificate issuer:       /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
Certificate serial:       3D57E1C092206E08B194FD42B996F6F124C4697D
Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a613363303a3a2f33322d3634203d3e20313331363030.roa
Signing time:             Mon 11 May 2026 17:44:45 +0000
ROA not before:           Mon 11 May 2026 17:39:45 +0000
ROA not after:            Mon 10 May 2027 17:44:45 +0000
asID:                     131600
IP address blocks:        2403:a3c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl
                          rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:57:e1:c0:92:20:6e:08:b1:94:fd:42:b9:96:f6:f1:24:c4:69:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE
        Validity
            Not Before: May 11 17:39:45 2026 GMT
            Not After : May 10 17:44:45 2027 GMT
        Subject: CN=E916D5B28C2BC6E6C134DA5015F65F32E32AA5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:d7:f1:81:f1:02:e2:fb:a3:ca:17:ad:90:
                    ef:2f:3b:b6:a3:e2:0b:b2:92:75:36:55:3f:fb:70:
                    ac:11:26:a2:54:2e:85:8d:51:66:55:aa:eb:db:b3:
                    bc:60:4a:b0:4e:a0:d9:70:f5:9b:38:c5:df:e9:3c:
                    28:6a:4c:02:e3:01:47:8d:67:b1:9f:6d:7d:e3:70:
                    be:54:5b:a6:73:a5:88:d3:36:d1:77:ee:4a:26:0f:
                    6c:98:69:6a:e9:27:65:d3:0a:00:ef:05:02:b2:0c:
                    88:55:eb:14:18:93:51:ee:f4:24:e8:b7:f5:41:ef:
                    a7:a6:d8:e3:f3:5e:7c:40:bc:9b:45:84:0a:6b:e6:
                    98:ba:bf:56:a0:56:01:5e:8a:58:d0:c6:ad:fd:8a:
                    4a:1d:68:2c:b6:e7:36:ec:d1:6c:23:66:4f:0a:6c:
                    52:fe:70:a3:7e:e6:ba:a9:e3:80:1b:ce:8d:56:f3:
                    e6:02:2b:5d:42:82:5b:86:1d:ca:14:5e:68:74:b2:
                    38:6d:1f:d5:29:43:b9:09:27:a9:3f:da:d5:fe:25:
                    49:f8:a3:70:11:7f:28:86:62:6f:18:99:7d:19:9c:
                    e9:fc:fc:c9:a8:b7:0a:bf:81:a9:84:17:50:f1:8f:
                    be:80:6b:b0:0f:5f:f4:84:fc:00:5e:72:ea:b4:3f:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:16:D5:B2:8C:2B:C6:E6:C1:34:DA:50:15:F6:5F:32:E3:2A:A5:C0
            X509v3 Authority Key Identifier:
                keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/323430333a613363303a3a2f33322d3634203d3e20313331363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:69:7b:2d:57:02:a6:56:3c:ea:f2:21:bb:94:e6:b8:bd:f1:
         25:cd:75:ef:c4:0e:f9:6d:f1:84:4b:77:60:12:9f:a1:7a:41:
         39:49:9a:50:c2:cb:2b:15:f2:dc:63:69:ab:fd:36:35:e8:0d:
         90:d7:dd:40:e3:3a:59:46:bf:50:ef:4c:54:fd:1d:5c:79:2d:
         ea:f9:73:20:e3:63:c5:93:9d:f7:cf:eb:9b:2a:36:c1:33:2a:
         13:28:ac:54:6f:7f:5e:be:02:42:fe:9b:1c:dd:91:23:98:1a:
         b5:54:76:c6:21:e7:1f:d9:c1:77:84:b2:e9:b6:62:be:2c:d0:
         0a:95:44:4b:ad:10:13:12:f1:89:7d:56:4e:86:73:11:ca:0d:
         83:76:5a:bf:7f:03:a3:2f:3d:b4:6f:37:f7:60:49:5e:99:fe:
         dc:cd:75:25:ef:78:5d:ae:aa:54:3e:ce:a6:6a:95:ee:ff:4c:
         b6:21:93:94:78:19:5a:ed:af:52:78:24:5a:6a:84:de:4b:80:
         58:1a:92:db:65:98:91:be:f0:ec:ff:39:aa:2b:df:46:b6:30:
         45:79:f4:fd:15:ea:b7:a9:b0:85:18:ef:2e:b6:00:95:ea:d4:
         0a:b9:02:33:e5:18:8e:eb:70:d1:41:45:67:d5:99:08:17:14:
         8e:ee:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:17:51 2026 by rpki-client