Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/323430303a343436303a3a2f33322d3332203d3e203633383937.roa
File:                     323430303a343436303a3a2f33322d3332203d3e203633383937.roa (raw, json)
Hash identifier:          E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY=
Subject key identifier:   1B:BD:1D:B9:99:EA:B6:CF:7A:0C:5E:49:AF:B3:8E:0F:41:12:90:F0
Certificate issuer:       /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
Certificate serial:       6E3A9DA6AB431AD85AC489B8984B828F6D5213AE
Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VOCOM/0/323430303a343436303a3a2f33322d3332203d3e203633383937.roa
Signing time:             Mon 11 May 2026 17:31:30 +0000
ROA not before:           Mon 11 May 2026 17:26:30 +0000
ROA not after:            Mon 10 May 2027 17:31:30 +0000
asID:                     63897
IP address blocks:        2400:4460::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl
                          rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:9d:a6:ab:43:1a:d8:5a:c4:89:b8:98:4b:82:8f:6d:52:13:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697
        Validity
            Not Before: May 11 17:26:30 2026 GMT
            Not After : May 10 17:31:30 2027 GMT
        Subject: CN=1BBD1DB999EAB6CF7A0C5E49AFB38E0F411290F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:d2:54:80:38:25:dd:6f:7f:73:9b:8c:34:
                    4a:07:ea:96:87:c4:13:cf:29:95:a2:31:e7:01:8d:
                    1b:54:a3:d5:c1:d3:cc:3b:64:d4:f3:e1:76:13:d0:
                    3f:55:20:29:fb:2b:a1:af:f4:f2:e3:ad:81:25:73:
                    33:04:cf:97:6c:91:bb:9a:8e:77:6a:79:5b:e6:d8:
                    5c:fa:cb:6a:a6:c2:b4:bd:f5:60:21:e2:83:46:f8:
                    5c:55:8d:5b:64:74:29:31:57:39:a5:e4:c8:65:08:
                    f5:07:96:c3:71:17:64:1e:1f:05:5a:6b:e4:e0:88:
                    b4:21:53:40:7e:aa:78:79:d3:bb:5b:78:15:4d:62:
                    91:06:19:ad:91:06:da:58:b7:8d:e4:42:55:50:90:
                    17:f1:9b:0b:4b:5c:ca:cc:e3:90:af:3a:52:c6:30:
                    6f:8d:dc:fd:4a:05:1a:63:b1:fc:be:40:f3:61:15:
                    ad:c5:29:51:03:21:c5:3c:cc:57:e3:3d:6e:8f:8a:
                    7c:d6:5e:cf:6d:ac:5b:94:c2:66:c0:63:45:44:f3:
                    8f:96:03:97:98:49:04:97:c6:70:33:cd:fc:b2:56:
                    50:5a:8b:f6:10:34:bc:b9:f9:72:39:35:39:2b:d7:
                    e7:bf:64:04:99:c4:97:18:2d:b0:de:2b:7f:6a:5f:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:1D:B9:99:EA:B6:CF:7A:0C:5E:49:AF:B3:8E:0F:41:12:90:F0
            X509v3 Authority Key Identifier:
                keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/323430303a343436303a3a2f33322d3332203d3e203633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4460::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:04:47:6a:b3:1a:d0:97:0c:47:f9:5c:db:b6:79:9a:4f:92:
         db:5a:26:a5:be:82:b9:43:c6:5a:8f:1f:82:ac:d8:42:40:bc:
         0f:6f:05:d9:14:52:45:04:3f:5e:c1:27:c7:35:0d:bb:b7:20:
         a3:62:4b:f0:55:2c:c5:c6:de:9d:67:c2:d5:1c:ab:46:56:e4:
         51:a7:24:3d:b3:02:4f:89:c5:55:06:22:b2:d5:b1:2c:c2:29:
         87:fc:2c:bc:7e:58:3b:32:f5:b0:13:67:94:3b:5b:ca:63:88:
         4d:9e:43:bf:1e:1d:ba:34:3c:3a:78:d3:3e:12:a6:6e:4d:dc:
         8c:4a:e7:f2:1d:d0:50:05:43:16:91:16:d3:d6:ae:95:49:b4:
         6c:1c:0e:c2:fc:1c:23:61:24:49:d2:c9:94:f0:92:57:2f:32:
         7a:46:8e:79:da:9c:91:38:78:1d:6b:fa:51:72:73:31:cf:b6:
         b2:88:6c:9f:5a:12:c5:73:85:08:38:38:1b:97:32:96:e6:1e:
         6f:fd:93:c9:9f:ef:35:a7:78:96:fc:71:b2:99:b5:ff:1e:36:
         d1:82:d6:5f:5c:33:19:41:df:a6:5e:a4:69:63:a2:b6:55:3f:
         64:fd:69:7f:c9:f8:4f:6f:5e:b4:32:6a:a5:3d:17:f8:c0:11:
         d6:fa:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:14:28 2026 by rpki-client