Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASSMAU/0/323430333a386563303a3a2f34382d3438203d3e20313437303335.roa
File:                     323430333a386563303a3a2f34382d3438203d3e20313437303335.roa (raw, json)
Hash identifier:          9CvrTtGtyc8UN6SssqMbyIsRz19VYE/WO8+Wvb73Rjw=
Subject key identifier:   BD:6F:2F:4C:C7:56:9E:7B:06:4C:31:59:67:B3:2C:0F:7E:21:3A:73
Certificate issuer:       /CN=E812027AE484273C81255DEF31441251E758ED82
Certificate serial:       335E22C1328AE8E9CDE464051A1DB6B3D5244A5A
Authority key identifier: E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASSMAU/0/323430333a386563303a3a2f34382d3438203d3e20313437303335.roa
Signing time:             Mon 11 May 2026 17:38:45 +0000
ROA not before:           Mon 11 May 2026 17:33:45 +0000
ROA not after:            Mon 10 May 2027 17:38:45 +0000
asID:                     147035
IP address blocks:        2403:8ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl
                          rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:22:c1:32:8a:e8:e9:cd:e4:64:05:1a:1d:b6:b3:d5:24:4a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E812027AE484273C81255DEF31441251E758ED82
        Validity
            Not Before: May 11 17:33:45 2026 GMT
            Not After : May 10 17:38:45 2027 GMT
        Subject: CN=BD6F2F4CC7569E7B064C315967B32C0F7E213A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:cd:51:d1:68:c5:6e:a2:42:49:99:90:26:
                    92:59:6e:db:07:ed:81:31:21:25:5d:c4:8e:b4:85:
                    8d:40:67:34:68:d2:8d:ca:4a:b6:db:a8:4a:2c:5c:
                    cb:3a:7a:cd:73:5a:78:09:a8:69:74:65:c7:53:4d:
                    08:9a:ef:b1:7a:a4:d2:42:f3:f5:3f:d2:69:cd:87:
                    5f:5b:ee:69:b7:dd:b3:ea:ce:35:0d:44:3a:ef:f5:
                    54:9e:d2:8b:a7:f8:9e:74:5b:85:0c:ec:70:5e:b7:
                    5c:65:66:ed:ee:16:cd:99:ab:df:0d:cf:13:56:4a:
                    77:6f:70:49:65:e2:5e:3f:81:bc:0b:02:66:e8:28:
                    fe:e2:9a:ba:ab:d3:6f:2a:d1:22:9d:81:b9:a8:7d:
                    08:3b:0f:8a:96:83:e6:55:56:b8:c8:39:be:30:a0:
                    2f:74:6f:be:82:fe:78:fe:4e:e2:e4:59:02:42:aa:
                    1e:3d:28:4c:08:08:47:71:90:cf:72:9f:8c:7c:4f:
                    ab:dc:93:01:ce:4f:6f:e6:ec:67:03:14:cc:f3:bb:
                    ec:82:0f:cc:45:62:ad:a0:3e:8f:51:3f:ae:28:e8:
                    14:40:75:0c:61:6f:40:9f:f7:6f:dd:a2:04:78:af:
                    09:9c:20:bb:d4:c4:ed:29:47:7e:82:4e:1c:fa:2e:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:2F:4C:C7:56:9E:7B:06:4C:31:59:67:B3:2C:0F:7E:21:3A:73
            X509v3 Authority Key Identifier:
                keyid:E8:12:02:7A:E4:84:27:3C:81:25:5D:EF:31:44:12:51:E7:58:ED:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/E812027AE484273C81255DEF31441251E758ED82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E812027AE484273C81255DEF31441251E758ED82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASSMAU/0/323430333a386563303a3a2f34382d3438203d3e20313437303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:a1:e8:b3:d3:c0:fd:82:fc:d3:69:46:f6:5c:2c:8b:80:
         fa:0f:62:f8:9b:b9:91:fd:0b:4f:00:17:b1:a5:25:c4:cc:96:
         4c:e6:e2:f2:a3:ff:97:a3:1e:5b:41:2b:4c:4a:bc:12:29:ea:
         8e:bf:6e:af:90:b4:89:2f:db:ae:17:b6:29:2b:8a:25:b3:ad:
         85:f4:0f:c3:ce:86:56:48:64:a7:d6:a9:62:84:8f:b2:de:36:
         ad:81:db:07:0d:34:50:4b:10:84:fa:a5:47:33:52:39:e5:3d:
         3b:9f:97:41:7e:f8:84:66:c0:d1:ff:9c:5e:12:6e:7a:04:64:
         15:51:12:58:df:13:9d:c0:21:5e:09:c2:e2:b2:8a:12:a2:fc:
         91:82:36:1f:af:4d:56:db:fd:74:3f:45:06:e5:7a:dd:16:4e:
         70:20:a9:ed:eb:5d:79:38:75:79:8a:03:bc:c3:a7:dc:53:51:
         da:1a:fb:1d:3c:25:5b:0a:75:76:d9:da:b9:11:cd:84:1e:61:
         76:05:f8:e5:cf:43:a9:72:e8:2d:5c:82:12:3d:32:d9:32:32:
         20:c2:0e:1a:75:ee:f8:83:9a:89:60:eb:99:c4:4b:8a:c9:42:
         a6:7a:b6:7d:b8:38:aa:fc:40:2a:63:33:72:07:a1:49:08:ea:
         b3:d4:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:20 2026 by rpki-client