Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/WEBTAIWAN/0/323430353a383730303a333030303a3a2f34382d3438203d3e2036393339.roa
File:                     323430353a383730303a333030303a3a2f34382d3438203d3e2036393339.roa (raw, json)
Hash identifier:          LLlJrswuLuF653xKkW0e80+9o/EQ1LWfY/m+foJYhfI=
Subject key identifier:   74:C5:35:DA:F6:74:76:09:70:53:67:B0:48:84:56:9E:C3:27:75:9A
Certificate issuer:       /CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
Certificate serial:       200D7C67E6B0D04B6EC3926B5AC50925336B5CD8
Authority key identifier: F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/323430353a383730303a333030303a3a2f34382d3438203d3e2036393339.roa
Signing time:             Mon 11 May 2026 16:45:48 +0000
ROA not before:           Mon 11 May 2026 16:40:48 +0000
ROA not after:            Mon 10 May 2027 16:45:48 +0000
asID:                     6939
IP address blocks:        2405:8700:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl
                          rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0d:7c:67:e6:b0:d0:4b:6e:c3:92:6b:5a:c5:09:25:33:6b:5c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8ECF7672302A7FAB5288522AD64D217665FEF67
        Validity
            Not Before: May 11 16:40:48 2026 GMT
            Not After : May 10 16:45:48 2027 GMT
        Subject: CN=74C535DAF6747609705367B04884569EC327759A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8e:52:47:8b:69:2d:c9:52:93:60:6a:5c:9f:
                    ab:22:0b:30:e5:be:7b:53:87:85:56:9d:04:8a:b8:
                    e4:33:ec:27:a0:00:84:65:99:00:d3:47:34:51:7a:
                    67:c9:c9:5a:73:d5:69:f2:56:03:1a:5e:e7:1f:f8:
                    b1:4b:a5:08:b8:86:54:41:eb:ff:ff:91:cb:5e:4d:
                    65:38:2c:15:45:9c:56:50:93:5d:53:0b:ea:18:40:
                    f2:55:50:95:0a:6b:cd:d5:3d:0e:b6:82:50:75:12:
                    4c:3c:78:1d:5c:c6:d1:7a:9d:38:e1:1e:e3:67:83:
                    33:21:d4:49:80:69:53:e2:64:c3:b7:45:50:a8:f3:
                    6a:e6:91:80:b8:60:9e:a4:e4:a6:e8:6a:8d:e3:22:
                    98:54:ed:8c:9f:39:70:7f:3f:df:fd:ab:29:27:b6:
                    32:88:dd:7c:9b:f3:df:e0:69:20:88:d4:0b:06:d9:
                    01:53:7a:11:47:5b:eb:1b:a2:47:a4:46:77:55:1a:
                    07:a7:6c:7d:f0:c9:96:f1:4e:a5:7b:f3:85:b7:fc:
                    92:fd:1d:ff:e3:69:c6:1c:96:c3:94:73:14:92:fd:
                    7c:56:d2:79:6e:70:ba:96:aa:9c:60:b8:7a:e7:80:
                    49:4a:52:23:c0:c1:bd:2e:ef:ee:a8:ab:43:df:05:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:35:DA:F6:74:76:09:70:53:67:B0:48:84:56:9E:C3:27:75:9A
            X509v3 Authority Key Identifier:
                keyid:F8:EC:F7:67:23:02:A7:FA:B5:28:85:22:AD:64:D2:17:66:5F:EF:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/F8ECF7672302A7FAB5288522AD64D217665FEF67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F8ECF7672302A7FAB5288522AD64D217665FEF67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WEBTAIWAN/0/323430353a383730303a333030303a3a2f34382d3438203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8700:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:99:46:3a:2e:59:9c:b6:ab:6b:dc:04:86:70:8a:40:05:
         fa:4e:cf:c6:27:6a:a5:56:0a:8b:d7:1a:c9:a0:26:f3:3d:2a:
         2c:eb:1e:c5:4b:bb:73:7f:6f:d8:f6:e4:77:4c:f7:9c:4a:ab:
         67:16:8a:a6:cc:a4:fe:9e:07:72:7e:dd:8c:e7:5f:44:fc:85:
         54:23:ef:41:e7:4f:36:fd:f8:3b:d1:7f:b7:fb:ed:0a:4c:7d:
         46:05:f8:f6:ba:e3:80:85:ab:8b:5f:71:6f:4a:12:ed:cd:79:
         5f:27:3c:bb:40:70:59:62:de:89:3a:3b:17:0f:74:82:72:89:
         62:71:b3:8a:ac:bb:e8:17:69:1d:e0:33:b9:77:02:11:85:6d:
         e0:af:30:69:6a:0a:33:20:96:77:d5:09:b8:04:00:a8:60:be:
         e8:fe:d9:84:d1:c1:a1:d6:a9:c7:ef:06:f2:e6:4e:4e:c8:59:
         de:48:4d:bb:5f:30:14:43:f0:99:a1:ec:72:93:dd:9f:3e:47:
         20:8c:c6:78:82:30:71:e1:8c:71:59:8e:24:7a:11:75:2f:dc:
         51:c0:68:72:8c:e2:0f:49:39:60:20:b3:fb:60:1e:30:d1:a6:
         3a:82:cb:cd:48:74:74:9a:dc:84:a2:82:99:b0:d5:9c:e2:c4:
         89:e7:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:10:12 2026 by rpki-client