Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a313a3a2f34382d3438203d3e20313530373636.roa
File:                     323430313a356461303a313a3a2f34382d3438203d3e20313530373636.roa (raw, json)
Hash identifier:          OOzMbXIJoHykIR4RwkZcCsJU45So7OmTmyIPk1uKG1o=
Subject key identifier:   DD:1F:11:68:04:F4:76:91:C8:31:6D:9D:BD:B1:36:04:AD:F1:D2:07
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       5F8D2DC6EBFEAC76BD6FDE8A28FA1D884041D8CB
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a313a3a2f34382d3438203d3e20313530373636.roa
Signing time:             Mon 11 May 2026 17:39:20 +0000
ROA not before:           Mon 11 May 2026 17:34:20 +0000
ROA not after:            Mon 10 May 2027 17:39:20 +0000
asID:                     150766
IP address blocks:        2401:5da0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
                          rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8d:2d:c6:eb:fe:ac:76:bd:6f:de:8a:28:fa:1d:88:40:41:d8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: May 11 17:34:20 2026 GMT
            Not After : May 10 17:39:20 2027 GMT
        Subject: CN=DD1F116804F47691C8316D9DBDB13604ADF1D207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:93:f8:fc:2f:16:bc:38:08:f7:52:8e:f6:
                    6a:81:ac:ff:c0:67:f5:b1:45:e8:05:50:a0:40:99:
                    79:48:56:f6:34:b0:f4:7f:82:ae:d0:8e:f5:6c:11:
                    1a:cd:17:e8:cd:3e:52:62:cb:c6:8d:f9:0b:e5:62:
                    37:f1:77:ec:c4:fc:db:79:a5:be:08:dd:52:a4:3d:
                    ad:1a:e7:5e:c1:ae:34:13:a4:f6:36:bd:d7:36:c8:
                    20:f8:49:5d:46:6c:1e:34:c8:bf:ac:23:1e:8b:6c:
                    ff:1b:07:6e:58:0d:97:4d:dc:17:e8:31:5e:6e:0d:
                    6a:ae:88:4f:0b:6e:f4:cd:64:dd:45:55:42:e8:e9:
                    a5:51:aa:00:62:a4:fc:16:f8:71:4b:e0:48:4c:6b:
                    2f:ad:19:96:d5:a4:08:59:42:f7:14:2c:84:7a:91:
                    d3:6e:46:9d:61:bd:b4:8e:a2:98:54:67:a9:52:a3:
                    67:fe:7e:c0:dd:17:ff:0e:7a:c2:82:91:23:51:a8:
                    18:da:f6:8b:2f:9e:3b:b7:23:e6:9e:31:d5:e0:34:
                    e7:d2:eb:d6:c5:33:81:d5:7c:eb:11:01:be:54:76:
                    ee:06:78:0c:76:6e:1c:58:8f:38:7b:8e:39:bf:07:
                    ac:58:b4:6c:9c:6c:69:4c:2d:44:a6:ee:d4:65:4e:
                    c3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1F:11:68:04:F4:76:91:C8:31:6D:9D:BD:B1:36:04:AD:F1:D2:07
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a313a3a2f34382d3438203d3e20313530373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:5e:e5:8f:93:71:32:28:d8:9d:53:bc:dc:90:cb:73:3a:
         d8:53:88:48:fe:10:75:08:cf:2c:d2:58:5b:4e:66:39:9c:4c:
         57:80:19:87:01:62:3f:41:b6:55:a5:d4:6c:30:30:6d:53:4e:
         6d:4c:27:de:61:dc:16:60:ae:cb:cb:1d:ec:9e:fa:47:5b:14:
         5b:80:bf:82:38:12:fd:d7:be:c2:33:c5:88:80:df:dc:d7:5a:
         71:cd:cc:ff:82:17:b2:83:ba:80:37:27:d5:f3:65:b6:86:cb:
         2c:f6:fe:7c:be:47:e9:76:b7:3f:53:d9:d2:16:19:c3:af:8b:
         62:5d:5f:7f:95:26:7e:7f:59:52:22:5d:71:ca:2c:8d:4a:32:
         54:a6:ba:7d:3d:5c:2f:42:0f:93:be:b1:93:50:b6:a2:64:ac:
         3f:2a:3e:45:62:16:a4:b2:a1:15:bc:c6:73:37:e2:8a:e0:8c:
         b0:b4:2e:15:ec:0c:af:50:e8:1a:ec:ee:8f:3b:2a:dd:d3:1a:
         4f:84:a4:44:bc:a6:77:ab:44:59:da:db:3d:52:9e:83:18:0a:
         5a:25:ca:74:d9:0f:54:f3:81:29:fe:a0:b2:39:ca:40:23:65:
         be:e4:c5:d4:e8:21:71:f8:4a:dd:80:ea:51:a1:80:dc:ce:da:
         9a:ea:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:02 2026 by rpki-client