Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a35333a3a2f34382d3438203d3e20313530373636.roa
File:                     323430313a356461303a35333a3a2f34382d3438203d3e20313530373636.roa (raw, json)
Hash identifier:          7WqQWTj//FEHw5O7ojAG9FzQ18cgyaGKpJXreC70Wvo=
Subject key identifier:   5C:26:A0:45:50:0D:F9:B0:84:07:48:3E:F0:C6:4F:91:EE:FF:45:83
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       49203BC38946DF25A772AAD59F3F32C4B254F200
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a35333a3a2f34382d3438203d3e20313530373636.roa
Signing time:             Mon 11 May 2026 17:58:04 +0000
ROA not before:           Mon 11 May 2026 17:53:04 +0000
ROA not after:            Mon 10 May 2027 17:58:04 +0000
asID:                     150766
IP address blocks:        2401:5da0:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
                          rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:20:3b:c3:89:46:df:25:a7:72:aa:d5:9f:3f:32:c4:b2:54:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: May 11 17:53:04 2026 GMT
            Not After : May 10 17:58:04 2027 GMT
        Subject: CN=5C26A045500DF9B08407483EF0C64F91EEFF4583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:65:8f:2a:e6:26:1b:2a:49:e5:c1:d0:0b:20:
                    ff:69:6a:7e:9e:6c:b0:53:3f:09:d3:87:64:4f:7c:
                    86:6e:99:b9:19:18:1f:f9:cf:1d:6c:5f:0c:c5:14:
                    b0:5e:c4:d5:df:ba:ad:9b:2f:f1:cd:f0:16:06:fe:
                    ec:4e:c2:a3:04:6e:4c:c5:1d:72:61:98:29:0a:73:
                    be:f8:43:37:1e:c1:ec:63:8a:85:c1:bc:af:6f:b6:
                    f4:cf:5a:ef:3b:99:b1:94:e1:98:33:41:09:cd:20:
                    85:c6:1d:4b:91:c1:31:cb:25:c3:b7:bd:2a:e2:47:
                    68:60:f4:1a:58:01:4d:2e:de:c3:07:c0:fa:53:26:
                    0e:17:91:e3:3d:3b:0b:03:c9:17:f1:a5:c3:96:c9:
                    03:d4:60:f4:47:04:5c:f0:6a:9f:53:a1:e4:24:28:
                    a9:d3:6f:77:5e:61:be:cc:79:64:c3:11:44:ba:17:
                    66:f3:64:4a:58:40:20:49:f2:7b:4f:50:01:9f:2c:
                    f7:64:fe:9b:2d:42:2a:f7:f2:bb:f8:e0:09:54:e6:
                    be:de:6f:ef:5c:6c:d6:a5:ae:20:47:f4:e0:da:06:
                    d1:9a:47:94:65:00:f8:5f:ca:4c:f1:24:d4:40:c2:
                    84:a0:60:bb:26:50:3d:2c:29:94:e8:9d:ea:7f:8d:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:26:A0:45:50:0D:F9:B0:84:07:48:3E:F0:C6:4F:91:EE:FF:45:83
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a35333a3a2f34382d3438203d3e20313530373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:69:5e:cc:97:5e:e6:34:fc:46:6e:2b:44:1c:ff:48:32:db:
         95:02:9b:99:10:da:bb:60:a2:96:2e:d4:26:02:30:0a:d0:51:
         ba:b2:18:22:4c:8b:8a:85:59:d7:c3:c1:e1:16:d9:5c:f7:2f:
         ec:78:56:58:73:a5:ec:fb:49:ed:47:82:e2:30:c6:bd:89:87:
         c6:e4:2b:3b:2d:b9:9e:06:e9:a0:19:a8:d9:00:45:a7:0e:c4:
         57:9a:91:31:e9:06:a6:1c:72:91:86:f7:dc:d7:e4:c8:21:84:
         19:b3:39:53:38:8f:42:fe:ce:dd:ea:ac:39:f5:a9:04:d5:84:
         0e:f5:b8:64:e8:d6:b2:67:3b:0f:d4:8a:7b:ab:86:34:3a:4e:
         e6:8d:c3:c4:c4:81:97:2e:04:32:d0:9f:7a:5d:a8:02:bb:0c:
         8a:cc:02:0e:fb:5c:2f:4a:4d:65:97:17:70:29:19:f5:a6:f4:
         83:99:6c:25:49:0d:58:da:14:70:21:70:8b:b7:97:9e:25:e4:
         84:fd:b9:6d:5a:be:ae:58:16:83:a0:90:1c:6d:08:61:a0:f3:
         31:6c:42:d9:90:35:71:88:f7:d6:8f:85:80:82:83:20:32:2b:
         e5:1b:cb:94:59:41:8b:7c:ce:2b:b7:74:68:2c:dd:a8:0f:76:
         26:fd:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:22 2026 by rpki-client