Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/FUYU/0/323430313a383161303a3a2f33322d3438203d3e203633393036.roa
File:                     323430313a383161303a3a2f33322d3438203d3e203633393036.roa (raw, json)
Hash identifier:          Ju4DqHvSFIioLMuTjNEvnpdvtmCTfOVdOTTLP/H3etk=
Subject key identifier:   EE:C5:FA:E6:E2:0A:81:2C:38:47:1A:01:72:EF:DC:F7:84:88:16:90
Certificate issuer:       /CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0
Certificate serial:       3AF2F5D5298BE26DEC92CFC07F2410D3D17B87A5
Authority key identifier: 0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FUYU/0/323430313a383161303a3a2f33322d3438203d3e203633393036.roa
Signing time:             Mon 11 May 2026 17:55:28 +0000
ROA not before:           Mon 11 May 2026 17:50:28 +0000
ROA not after:            Mon 10 May 2027 17:55:28 +0000
asID:                     63906
IP address blocks:        2401:81a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl
                          rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f2:f5:d5:29:8b:e2:6d:ec:92:cf:c0:7f:24:10:d3:d1:7b:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C164CEABA2AC58B2541F90471E09C21EF4702B0
        Validity
            Not Before: May 11 17:50:28 2026 GMT
            Not After : May 10 17:55:28 2027 GMT
        Subject: CN=EEC5FAE6E20A812C38471A0172EFDCF784881690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:19:d6:3e:c0:aa:51:99:1c:fe:aa:60:24:
                    4a:ca:74:01:d2:a9:c7:1a:dc:f9:76:01:7b:06:fb:
                    86:cd:f5:1d:df:2f:25:23:10:d4:ab:79:cd:c5:c2:
                    32:cd:29:a0:a9:6e:03:6a:e5:4e:df:92:a9:60:f6:
                    98:a1:e4:92:c8:88:24:3f:bc:bc:be:30:be:f0:a7:
                    54:f3:23:86:84:fe:fa:23:42:3d:83:0e:ec:6f:7e:
                    a8:fa:53:6a:da:26:ec:7a:fd:00:41:7e:56:2d:28:
                    be:41:08:e1:be:9b:ce:33:b5:89:d6:37:62:c5:e7:
                    87:2a:cc:9a:c6:d8:ad:6f:4e:56:1c:61:a8:05:f9:
                    a6:6c:3b:33:b8:a3:89:7e:2e:0e:0f:51:21:58:84:
                    d6:bc:95:20:7b:08:9a:b3:c1:b9:56:48:e9:71:d2:
                    64:14:dc:23:21:34:d4:d2:17:72:88:e1:b8:01:c8:
                    5e:dd:6e:c6:4c:45:d7:15:20:29:26:44:7f:2c:bd:
                    d9:88:a9:04:3a:92:eb:f2:58:f8:32:35:c0:56:f0:
                    9f:2e:91:05:8e:67:09:d3:e4:98:01:7d:c4:ac:d5:
                    51:b0:0c:52:85:6a:bd:03:da:9c:b9:9a:7c:6d:7f:
                    a3:cc:f7:a4:38:cb:2b:ef:4a:f2:20:ba:31:c6:01:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:FA:E6:E2:0A:81:2C:38:47:1A:01:72:EF:DC:F7:84:88:16:90
            X509v3 Authority Key Identifier:
                keyid:0C:16:4C:EA:BA:2A:C5:8B:25:41:F9:04:71:E0:9C:21:EF:47:02:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/0C164CEABA2AC58B2541F90471E09C21EF4702B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0C164CEABA2AC58B2541F90471E09C21EF4702B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FUYU/0/323430313a383161303a3a2f33322d3438203d3e203633393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:81a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:13:94:1e:71:97:da:6a:31:f4:25:86:7a:9a:5a:b0:c7:
         7f:71:e7:11:b2:ad:ea:26:ad:5e:bb:29:12:46:49:a2:96:4e:
         83:b6:81:ef:81:05:e5:7d:56:28:b0:12:1b:ca:04:cd:54:f3:
         5d:6d:94:22:97:12:ab:1a:d6:83:01:31:53:fb:88:13:69:34:
         14:08:9e:64:65:b4:95:08:d5:ae:b9:9b:ca:73:6b:57:2c:f8:
         f2:3c:34:88:d7:30:29:95:91:08:22:01:3b:fb:13:a8:dc:1c:
         cd:c7:54:62:f5:f4:78:8a:c4:ab:f3:1f:5e:cc:c7:db:76:9f:
         f0:6b:46:a3:f1:f1:7b:d7:c3:17:ab:b3:b4:dd:6c:f9:fa:bc:
         ea:6a:48:53:e8:bc:9a:d3:98:e7:c8:43:06:b4:75:80:19:c4:
         31:5c:ea:8a:c9:c4:6f:12:6c:a9:1a:26:a5:8d:f0:b5:5c:d6:
         e3:d5:d6:ea:6f:22:45:c4:29:40:df:8d:73:b4:dd:5f:9d:6e:
         6e:8c:95:33:32:84:4e:6b:14:d9:ad:f7:d6:f1:5a:eb:4a:e4:
         1f:fc:b4:66:a8:90:65:d6:4f:a1:90:08:8b:90:b6:e3:dd:1d:
         60:16:44:63:a3:67:61:b6:3f:5c:b8:0c:9b:ba:a9:68:37:4f:
         df:56:06:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:36 2026 by rpki-client