Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa
File:                     323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa (raw, json)
Hash identifier:          jCyDqTwyynUAj0Cq2T29ZHOBjRuvY31Wq/Ivps7Y/mI=
Subject key identifier:   49:F8:04:19:B3:BB:8A:8B:17:40:89:F1:92:06:3D:E5:A6:50:AD:F7
Certificate issuer:       /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial:       4AE65662E7EE273C2EF23F5F51625048B9E8429C
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa
Signing time:             Mon 11 May 2026 17:39:44 +0000
ROA not before:           Mon 11 May 2026 17:34:44 +0000
ROA not after:            Mon 10 May 2027 17:39:44 +0000
asID:                     152619
IP address blocks:        2401:e3e0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
                          rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e6:56:62:e7:ee:27:3c:2e:f2:3f:5f:51:62:50:48:b9:e8:42:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
        Validity
            Not Before: May 11 17:34:44 2026 GMT
            Not After : May 10 17:39:44 2027 GMT
        Subject: CN=49F80419B3BB8A8B174089F192063DE5A650ADF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:9a:ab:53:14:ee:d1:aa:80:8e:25:f5:eb:
                    68:93:66:ac:da:91:48:80:a4:2f:0f:09:c3:77:17:
                    59:cd:4e:79:c5:fa:cd:a9:82:19:4b:94:30:be:89:
                    8c:ba:ea:84:79:5e:79:81:8b:94:1f:7c:b6:81:8e:
                    a6:ed:05:f0:fb:3d:d1:7f:fb:07:98:49:a6:32:22:
                    c9:2b:ce:d2:d9:16:d2:38:72:58:89:2a:9f:8d:d3:
                    a2:01:c2:4a:3c:d1:52:0e:bd:10:03:b2:dd:e0:d9:
                    ef:78:47:c5:6b:f9:15:d3:8e:c3:fe:16:09:30:38:
                    c6:e2:04:6f:d6:15:f6:44:df:93:0c:d8:d9:d5:4f:
                    0f:4c:e1:e6:69:85:b4:03:fb:e1:24:7c:a7:5c:b9:
                    20:05:ac:14:c0:22:75:ef:41:ab:c4:2f:cd:be:e5:
                    3e:75:9a:db:fe:27:0b:b9:d6:3f:e6:86:90:f1:da:
                    f3:fb:52:6f:5b:2a:f4:42:38:9f:19:8b:28:2d:23:
                    b2:12:20:bf:44:8e:f3:6c:5f:b2:e0:04:e8:e5:26:
                    3e:e4:b3:47:46:b9:e1:bd:9c:a2:ba:1b:15:ab:17:
                    28:07:c6:50:7d:63:61:2f:b2:8f:e7:8c:61:51:a3:
                    29:39:6a:3a:cf:b0:c0:b9:9c:88:0f:c3:33:e1:44:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:04:19:B3:BB:8A:8B:17:40:89:F1:92:06:3D:E5:A6:50:AD:F7
            X509v3 Authority Key Identifier:
                keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:35:01:26:e7:76:28:42:e7:23:ae:45:1e:32:b7:0a:15:d6:
         02:25:c4:05:41:78:6e:ce:3c:6c:c1:4a:2b:22:f8:7d:9b:8a:
         4c:59:29:8f:17:08:b5:ec:06:46:9a:e5:35:4e:8b:52:44:5a:
         83:19:03:ca:29:fb:99:95:39:44:53:42:0b:3e:68:a3:f5:90:
         fe:cc:59:bc:d9:24:bd:56:39:39:04:49:c1:30:de:5b:23:8b:
         b4:0d:3b:4a:bc:16:c1:92:79:ea:99:54:f7:65:3a:0d:dc:92:
         10:97:5c:6e:10:49:95:9c:e8:d3:2a:26:97:cd:14:e9:2b:9d:
         c9:34:3c:68:af:fb:b1:a8:e3:c6:24:5b:54:e8:99:a3:a2:4f:
         15:61:b2:b0:74:b1:fe:03:f8:9c:9c:91:94:b7:47:09:8a:66:
         d6:0b:e4:8b:ef:52:c7:72:0f:e4:71:8d:5b:1f:db:81:bc:19:
         c9:13:30:be:26:3d:90:c8:d4:a1:eb:44:46:ed:2f:ce:4d:c2:
         0e:b2:ad:89:8a:72:a8:6f:67:f8:11:05:4a:9a:57:a9:1a:59:
         a9:bd:4f:c2:74:7b:05:74:5c:3a:8c:3b:17:e2:5f:de:ab:f7:
         bc:a6:56:56:51:f9:7f:33:22:f9:5b:ad:ca:14:ff:e9:65:ae:
         e8:a1:72:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:11 2026 by rpki-client