Route Origin Authorization

$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6463303a3a2f34382d3438203d3e203138303430.roa
File:                     323430323a343365303a6463303a3a2f34382d3438203d3e203138303430.roa (raw, json)
Hash identifier:          r5iZ2BkGq0KNcDV4Zu/Nu2wpilNttsDrZdWEdAiF7UA=
Subject key identifier:   6F:31:09:29:84:66:A2:65:0E:42:B8:75:76:FA:E3:F1:2F:20:01:EF
Certificate issuer:       /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial:       3C0DACB9737BC042AB8A6B02D2CA7A2090CEB8D0
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6463303a3a2f34382d3438203d3e203138303430.roa
Signing time:             Mon 09 Nov 2026 17:44:02 +0000
ROA not before:           Mon 09 Nov 2026 17:39:02 +0000
ROA not after:            Mon 08 Nov 2027 17:44:02 +0000
asID:                     18040
IP address blocks:        2402:43e0:dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
                          rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 04:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0d:ac:b9:73:7b:c0:42:ab:8a:6b:02:d2:ca:7a:20:90:ce:b8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
        Validity
            Not Before: Nov  9 17:39:02 2026 GMT
            Not After : Nov  8 17:44:02 2027 GMT
        Subject: CN=6F3109298466A2650E42B87576FAE3F12F2001EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:db:0c:7c:26:29:96:a2:40:05:49:31:25:
                    fd:d6:e8:8a:8b:df:1e:78:27:9a:f0:dc:a5:55:63:
                    1b:2f:91:33:67:ab:cd:7a:00:71:72:b4:32:62:1c:
                    34:17:10:4c:8f:ea:71:d7:d1:bc:8b:fe:00:2b:77:
                    e5:2b:1a:94:ac:f6:7f:ff:12:1e:9a:5b:f5:f8:90:
                    34:03:23:17:3f:b7:80:21:df:9f:54:49:20:95:a9:
                    c7:28:18:36:f6:24:20:c3:4a:cf:c8:d4:de:29:d0:
                    90:db:ef:11:9a:64:45:5f:88:be:2a:ce:8d:6e:19:
                    a8:57:78:cb:dd:08:5a:9b:58:05:33:f7:d5:5d:64:
                    49:50:6b:4d:28:43:d0:7e:f6:07:d7:b3:9d:73:f2:
                    b2:49:a3:a6:a4:14:9b:ee:01:d2:d9:9f:3a:c1:5c:
                    bb:31:da:71:59:3f:3d:d1:a7:01:de:33:97:35:19:
                    ce:20:27:b5:53:73:2d:ac:6e:3e:67:ab:7d:ee:7a:
                    f5:be:01:22:5f:59:fe:ee:30:70:34:22:2f:b7:09:
                    7e:93:72:e4:11:87:8b:88:0c:de:87:15:ac:b9:d9:
                    46:05:17:d6:50:1d:ba:96:c0:d1:b9:3c:d5:17:a4:
                    13:03:3d:a5:f7:25:ad:f0:83:18:9b:d4:38:43:82:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:09:29:84:66:A2:65:0E:42:B8:75:76:FA:E3:F1:2F:20:01:EF
            X509v3 Authority Key Identifier:
                keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6463303a3a2f34382d3438203d3e203138303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:43e0:dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:12:b4:98:48:2c:aa:dc:31:63:00:70:14:26:e2:7a:43:
         e6:c6:32:de:f9:ce:d3:9a:7c:6f:38:76:fe:21:6a:f8:19:26:
         0f:65:36:f5:b8:e3:68:49:a8:45:a1:10:45:fa:e6:7d:fa:a1:
         6c:23:06:5c:9a:cc:c8:93:f2:bd:12:cc:cd:41:f0:8f:a4:35:
         48:74:7b:cc:82:bc:64:8e:87:d4:b0:e0:06:3a:82:54:a2:1b:
         71:b8:7b:d5:0b:bc:92:0f:fe:8b:fe:8b:eb:cf:ee:c7:a0:d3:
         23:fc:cb:81:8b:f3:40:b3:39:be:07:9d:ee:59:61:d7:c1:e1:
         e2:93:48:da:ca:ef:a0:6d:12:bf:0d:e1:53:03:b2:6a:3c:d4:
         d3:b9:86:fc:ab:4b:8f:22:f4:3f:d1:81:ed:62:d8:69:f6:5e:
         97:ce:5c:53:40:e8:94:6b:27:80:79:dc:65:98:ca:09:4c:a7:
         87:7f:7c:09:f6:c0:db:1f:b9:60:c6:61:bf:c2:1f:50:41:af:
         50:dc:66:34:cd:aa:9f:7b:6c:ca:87:bf:e4:70:35:d7:3f:b0:
         74:bf:c8:8e:ec:41:0f:5c:e4:62:52:ed:0f:74:9f:a1:78:00:
         20:8f:5e:9d:db:ae:3a:55:b0:e0:72:5c:d3:d8:d4:25:8c:77:
         33:78:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:50 2026 by rpki-client