Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/CODEUPTECH/0/323430313a626636303a346666353a3a2f34382d3438203d3e20333936393832.roa
File:                     323430313a626636303a346666353a3a2f34382d3438203d3e20333936393832.roa (raw, json)
Hash identifier:          ijmsDMqqr0J+18KYSrqQFZnYmvLtg15PQeQJuLxf88U=
Subject key identifier:   3B:BB:94:F5:78:00:79:5D:31:F0:A3:D7:E2:B5:6C:F4:2E:11:66:DE
Certificate issuer:       /CN=F5A640326B228EA83BEE8FECCD06A6CF7E64D657
Certificate serial:       10BA2CEA8EF71B542AE8DE87BB966E76C3004266
Authority key identifier: F5:A6:40:32:6B:22:8E:A8:3B:EE:8F:EC:CD:06:A6:CF:7E:64:D6:57
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/323430313a626636303a346666353a3a2f34382d3438203d3e20333936393832.roa
Signing time:             Mon 11 May 2026 17:55:23 +0000
ROA not before:           Mon 11 May 2026 17:50:23 +0000
ROA not after:            Mon 10 May 2027 17:55:23 +0000
asID:                     396982
IP address blocks:        2401:bf60:4ff5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.crl
                          rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ba:2c:ea:8e:f7:1b:54:2a:e8:de:87:bb:96:6e:76:c3:00:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A640326B228EA83BEE8FECCD06A6CF7E64D657
        Validity
            Not Before: May 11 17:50:23 2026 GMT
            Not After : May 10 17:55:23 2027 GMT
        Subject: CN=3BBB94F57800795D31F0A3D7E2B56CF42E1166DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:e3:92:51:20:a1:01:56:85:0a:e2:5e:31:
                    92:e0:3b:9d:0a:11:6d:f7:92:e0:8b:c6:75:6c:32:
                    72:ac:4e:1b:9e:2f:f9:d4:0a:85:35:a3:e3:c6:26:
                    a7:19:ee:bd:9e:bf:59:a6:98:29:eb:68:c1:10:14:
                    8b:d2:a3:36:73:80:8b:9a:59:08:3d:b2:89:c9:f3:
                    da:50:19:7a:39:1e:ae:32:b3:07:96:5e:2a:ed:6c:
                    5e:aa:78:57:22:89:b2:29:36:86:15:ed:a9:b5:75:
                    34:6f:03:42:d9:11:18:f2:cc:f3:d8:25:0e:77:d2:
                    31:ad:4f:d2:8b:44:1c:85:4f:e1:6c:c8:aa:4c:3a:
                    23:11:41:55:28:67:37:15:c4:28:77:a8:6b:12:a1:
                    85:b6:d4:8f:68:72:fc:22:de:cd:02:9d:6b:d9:fd:
                    43:32:24:69:71:d0:a6:13:4c:51:67:12:ec:6d:38:
                    31:c6:55:4a:b0:f9:fe:3c:2d:a5:80:e7:12:34:43:
                    94:22:f0:9f:2d:2c:90:da:14:7b:4f:ca:44:9b:ac:
                    b4:7f:22:00:fa:fc:0b:77:b7:23:c7:0f:d9:b4:fd:
                    73:6b:bd:42:f6:65:98:36:d4:1c:4e:38:8b:09:b9:
                    25:f1:4f:5e:0d:40:4a:39:25:a3:e2:00:47:a2:6f:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:94:F5:78:00:79:5D:31:F0:A3:D7:E2:B5:6C:F4:2E:11:66:DE
            X509v3 Authority Key Identifier:
                keyid:F5:A6:40:32:6B:22:8E:A8:3B:EE:8F:EC:CD:06:A6:CF:7E:64:D6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5A640326B228EA83BEE8FECCD06A6CF7E64D657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CODEUPTECH/0/323430313a626636303a346666353a3a2f34382d3438203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bf60:4ff5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:38:7a:9f:0f:6e:d4:09:f8:f9:00:8d:66:f0:a1:f9:0f:2a:
         f6:9e:d0:34:99:4e:ec:a0:8b:57:ce:67:37:91:f2:48:6e:f3:
         b3:00:f1:4c:e5:59:af:91:a4:72:fa:7f:fb:e0:3e:18:85:e2:
         f6:87:5f:3e:5d:38:f6:82:7d:9e:f0:5e:0d:61:b0:e9:6c:48:
         99:05:f8:eb:95:46:25:7d:e4:ad:8e:d4:96:b5:7a:dd:6d:f3:
         bd:65:80:15:a0:50:18:40:88:56:af:20:87:22:c8:34:c4:de:
         c2:90:02:af:7c:5a:12:7e:9b:45:3d:34:fb:c3:dd:bd:8d:c4:
         b4:3e:f8:f9:af:b2:74:ad:e6:aa:3d:79:bd:c4:98:e8:56:9e:
         cb:1f:e3:7b:44:91:f5:7c:c6:df:f2:7c:f5:0a:a5:b0:6e:5e:
         80:5d:d0:3e:0f:5f:ca:ec:ed:37:c5:0a:b9:7b:e0:a2:4e:97:
         e4:f7:7b:e8:a5:c6:36:a9:d0:7b:95:0b:6a:25:b8:e8:97:1c:
         4b:09:82:22:8b:d3:e4:ad:ae:a2:f2:89:3e:04:a1:af:1b:ac:
         c4:70:36:f9:2a:09:10:72:84:47:b2:8b:6f:43:19:24:23:36:
         5b:2b:8a:a2:2f:ee:cc:b8:17:38:43:7e:d6:88:4c:21:d0:c1:
         22:03:11:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:17:56 2026 by rpki-client