Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a3a2f33322d3438203d3e20313530373636.roa
File:                     323430313a356461303a3a2f33322d3438203d3e20313530373636.roa (raw, json)
Hash identifier:          yQrMfYe7IzxIC5rJr8YojtADOcobJOqjQ8VtQ4u/b44=
Subject key identifier:   4D:BF:85:A3:34:C5:44:EF:9B:6F:D8:41:FB:24:D5:F5:38:78:75:7A
Certificate issuer:       /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial:       094909F50D7D8C8E1B5C48D8A9CF968D4F78CC18
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a3a2f33322d3438203d3e20313530373636.roa
Signing time:             Mon 11 May 2026 17:58:28 +0000
ROA not before:           Mon 11 May 2026 17:53:28 +0000
ROA not after:            Mon 10 May 2027 17:58:28 +0000
asID:                     150766
IP address blocks:        2401:5da0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
                          rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:49:09:f5:0d:7d:8c:8e:1b:5c:48:d8:a9:cf:96:8d:4f:78:cc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
        Validity
            Not Before: May 11 17:53:28 2026 GMT
            Not After : May 10 17:58:28 2027 GMT
        Subject: CN=4DBF85A334C544EF9B6FD841FB24D5F53878757A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:38:10:1a:24:2b:45:65:b6:3d:7b:b5:94:
                    42:40:2c:3a:3a:de:a5:2e:02:24:62:01:8c:39:75:
                    4c:34:4c:1a:43:fa:e7:08:df:7b:4a:2d:a8:f6:5b:
                    c1:7a:f4:fc:60:10:11:cd:29:5e:d4:c6:14:13:12:
                    86:75:66:b4:a1:1b:bc:14:a9:97:b4:8a:ad:17:a8:
                    d6:f4:60:23:71:1a:c5:d6:cc:c7:59:98:36:f0:0e:
                    20:48:bc:17:e0:85:17:3f:93:ea:1e:f4:97:65:7b:
                    25:df:b4:76:ca:7b:f8:a9:18:d8:e2:f9:9c:e7:b1:
                    96:ca:f3:33:0c:84:c1:1a:0a:6e:b2:71:88:dd:14:
                    43:14:e9:ee:56:7a:c4:b4:71:31:d8:ae:2c:2d:d8:
                    1b:76:ff:aa:52:0a:73:dd:0a:95:59:87:75:d5:59:
                    8b:b6:ec:e8:46:d7:7d:31:2c:af:4f:f7:69:18:4c:
                    e6:1e:71:41:3f:13:55:b8:d3:15:ed:2c:64:62:56:
                    9a:88:ad:b1:1d:5f:35:d6:55:a4:c0:1c:52:7a:10:
                    5c:59:dd:7e:5b:31:96:f9:c3:3b:ca:3d:b2:0f:67:
                    ef:61:db:1b:b8:26:b5:9a:05:c8:d0:cf:1e:24:a4:
                    0c:4c:c8:09:31:a4:df:10:76:35:4a:55:53:00:61:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:85:A3:34:C5:44:EF:9B:6F:D8:41:FB:24:D5:F5:38:78:75:7A
            X509v3 Authority Key Identifier:
                keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a3a2f33322d3438203d3e20313530373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:e2:6f:c0:ac:7d:7f:4f:95:13:81:4a:8f:e2:1a:c8:20:
         f5:e7:99:0d:e9:47:5e:37:da:22:38:27:e9:18:90:cd:a7:5e:
         c7:2a:d1:55:cb:39:2b:38:3a:99:f1:ed:d0:34:88:23:35:a3:
         a4:5b:4b:24:65:49:b6:dc:0d:db:94:27:4b:a7:ee:44:f3:8f:
         af:13:c1:ea:fd:5d:48:3b:76:5d:f5:b7:88:e5:32:b1:fe:6e:
         df:b3:93:7f:64:75:d1:28:66:b0:13:8a:86:c2:4e:83:97:2d:
         58:bb:6c:99:cc:40:4a:9a:4f:c4:bb:f9:7e:b6:21:88:80:42:
         08:ca:f9:15:76:19:d7:58:23:95:a0:56:49:7b:34:18:a1:10:
         bb:03:30:9c:39:6a:6f:0f:7c:6d:15:bf:aa:1e:72:b5:6c:7e:
         8f:fb:e4:29:a1:27:8f:4a:e7:19:c7:90:d7:21:11:39:1b:e9:
         9a:04:fe:0e:7b:1c:dd:72:1a:ad:0e:e9:35:b2:6b:bc:35:f0:
         2c:e7:28:70:83:4b:17:6f:73:54:e8:f6:8e:e1:d7:c2:ba:44:
         dd:b5:21:3c:fc:db:fa:65:e8:83:af:2a:46:52:d4:23:b4:91:
         a2:8c:01:11:1f:64:10:bf:d1:6d:87:cf:1b:51:dd:70:74:fb:
         09:24:e1:a1
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUCUkJ9Q19jI4bXEjYqc+WjU94zBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgyNUQ4NTI3NDM0Q0FGMEZDRjlGNjU0NDZENkVCMDZD
QTg5OTNGNDAeFw0yNjA1MTExNzUzMjhaFw0yNzA1MTAxNzU4MjhaMDMxMTAvBgNV
BAMTKDREQkY4NUEzMzRDNTQ0RUY5QjZGRDg0MUZCMjRENUY1Mzg3ODc1N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHzgQGiQrRWW2PXu1lEJALDo6
3qUuAiRiAYw5dUw0TBpD+ucI33tKLaj2W8F69PxgEBHNKV7UxhQTEoZ1ZrShG7wU
qZe0iq0XqNb0YCNxGsXWzMdZmDbwDiBIvBfghRc/k+oe9JdleyXftHbKe/ipGNji
+ZznsZbK8zMMhMEaCm6ycYjdFEMU6e5WesS0cTHYriwt2Bt2/6pSCnPdCpVZh3XV
WYu27OhG130xLK9P92kYTOYecUE/E1W40xXtLGRiVpqIrbEdXzXWVaTAHFJ6EFxZ
3X5bMZb5wzvKPbIPZ+9h2xu4JrWaBcjQzx4kpAxMyAkxpN8QdjVKVVMAYftZAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUTb+FozTFRO+bb9hB+yTV9Th4dXowHwYDVR0j
BBgwFoAU+CXYUnQ0yvD8+fZURtbrBsqJk/QwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DT0RJ
R0lULzAvRjgyNUQ4NTI3NDM0Q0FGMEZDRjlGNjU0NDZENkVCMDZDQTg5OTNGNC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GODI1RDg1Mjc0MzRDQUYwRkNGOUY2NTQ0
NkQ2RUIwNkNBODk5M0Y0LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG
Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DT0RJR0lULzAvMzIzNDMw
MzEzYTM1NjQ2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzNTMwMzczNjM2
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAJAFdoDANBgkqhkiG9w0BAQsFAAOCAQEAqZLib8CsfX9PlROB
So/iGsgg9eeZDelHXjfaIjgn6RiQzadexyrRVcs5Kzg6mfHt0DSIIzWjpFtLJGVJ
ttwN25QnS6fuRPOPrxPB6v1dSDt2XfW3iOUysf5u37OTf2R10ShmsBOKhsJOg5ct
WLtsmcxASppPxLv5frYhiIBCCMr5FXYZ11gjlaBWSXs0GKEQuwMwnDlqbw98bRW/
qh5ytWx+j/vkKaEnj0rnGceQ1yERORvpmgT+Dnsc3XIarQ7pNbJrvDXwLOcocINL
F29zVOj2juHXwrpE3bUhPPzb+mXog68qRlLUI7SRoowBER9kEL/RbYfPG1HdcHT7
CSThoQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:52:05 2026 by rpki-client