Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa
File:                     323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa (raw, json)
Hash identifier:          inMxOGvmxhpz+t2U+aw17poC114ZD09uaitT0n/sR38=
Subject key identifier:   F5:C5:B2:38:A1:05:0D:13:01:75:93:D8:2C:33:BA:EE:6C:20:72:12
Certificate issuer:       /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial:       4AA5B10D0C924199EEC086288C8FA5FE28707F6A
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa
Signing time:             Mon 11 May 2026 17:56:47 +0000
ROA not before:           Mon 11 May 2026 17:51:47 +0000
ROA not after:            Mon 10 May 2027 17:56:47 +0000
asID:                     152619
IP address blocks:        2401:e3e0:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl
                          rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a5:b1:0d:0c:92:41:99:ee:c0:86:28:8c:8f:a5:fe:28:70:7f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
        Validity
            Not Before: May 11 17:51:47 2026 GMT
            Not After : May 10 17:56:47 2027 GMT
        Subject: CN=F5C5B238A1050D13017593D82C33BAEE6C207212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:40:a7:bb:38:5c:1f:36:cd:0c:ab:a9:87:
                    67:f8:0a:a3:78:21:55:2e:b8:97:2d:04:d2:bc:22:
                    3f:17:76:66:a7:3f:ff:03:7b:9f:f6:31:8c:3b:12:
                    e3:b1:59:b6:e5:26:6d:f6:4b:b2:39:d0:b4:ab:12:
                    98:dd:f9:c7:66:25:12:37:72:e4:af:cf:5a:d6:27:
                    bf:0b:2c:34:20:69:76:33:fd:aa:6d:07:a7:5d:20:
                    43:a8:1d:4e:23:cf:01:b5:d7:18:b9:b8:59:38:51:
                    c4:ff:90:cd:03:79:8e:58:6b:c1:d6:db:6c:4f:6f:
                    9c:b8:68:13:9c:5c:b0:7a:ba:86:8b:f3:2a:59:89:
                    48:bc:46:64:43:cd:66:cd:fa:53:b7:11:a0:ac:a3:
                    c4:a5:25:61:07:c4:f6:18:8a:d4:66:c3:c3:b6:00:
                    68:bd:57:b3:67:22:0b:c0:f0:cc:92:b3:f1:bb:00:
                    65:52:91:0c:0d:ba:f3:7d:05:73:64:5c:71:cb:48:
                    b8:9b:21:1d:dd:38:ef:fb:6a:ba:b1:40:53:8f:2f:
                    a5:c5:b1:e4:eb:98:54:9f:61:f6:d1:0e:01:ab:e2:
                    79:6e:3f:44:cc:95:c2:5f:db:f7:a7:2e:3e:ea:a7:
                    c9:da:36:b9:a9:76:9a:15:18:c5:0b:8e:19:e7:88:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:B2:38:A1:05:0D:13:01:75:93:D8:2C:33:BA:EE:6C:20:72:12
            X509v3 Authority Key Identifier:
                keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e3e0:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:a8:c1:11:21:ee:da:d0:e7:5e:31:32:ab:d8:1b:42:b4:e5:
         0e:0d:a2:d3:2b:01:25:fb:4c:f5:30:9a:91:b8:4d:d1:96:5c:
         33:5b:5f:1a:6d:ca:2c:a9:81:1d:b5:1a:cd:e2:e0:37:d2:2c:
         aa:cf:78:16:c7:6e:48:3e:10:26:fa:d9:72:ea:da:60:ba:74:
         53:e8:77:dc:1e:c1:ea:13:fa:21:36:51:f1:0b:86:f4:50:57:
         7b:bb:55:49:56:63:da:1f:f8:73:7e:d7:b0:a9:87:84:48:20:
         86:1a:2c:78:b9:3d:46:50:b3:b4:a1:f0:8b:8b:4d:35:62:8c:
         68:c7:e8:57:33:bf:7e:53:bd:99:6d:e1:d0:db:16:21:9d:b9:
         85:8d:ab:41:f2:9f:f3:8e:9c:44:66:eb:24:2c:ad:ca:b9:8a:
         3f:96:26:bc:8e:d4:9e:4a:29:5e:98:82:cd:40:31:51:56:93:
         45:a5:4c:bd:21:ed:18:8e:88:22:9a:92:f8:ef:e4:a1:21:30:
         60:68:3f:ef:79:36:30:f8:21:82:d6:38:5f:48:06:79:fa:06:
         99:ea:3b:c1:dc:17:61:c5:90:b1:d5:be:17:4c:9f:20:49:d9:
         f3:a8:bd:e4:d6:1c:b7:51:ce:e4:c6:ca:e2:65:41:85:f2:15:
         16:bd:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:12:27 2026 by rpki-client