Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3332203d3e20313331363537.roa
File:                     323430363a343863303a3a2f33322d3332203d3e20313331363537.roa (raw, json)
Hash identifier:          zy1kd7Ws13BsCv5D8FzujqOa6942foEJBZ3swsp58RQ=
Subject key identifier:   44:9D:A7:D5:26:B8:37:F2:00:49:61:5F:54:16:1B:C9:03:14:63:C0
Certificate issuer:       /CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
Certificate serial:       3438970CE598EBDE9E35B0B02D929CC043803E5E
Authority key identifier: 5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3332203d3e20313331363537.roa
Signing time:             Mon 11 May 2026 17:06:52 +0000
ROA not before:           Mon 11 May 2026 17:01:52 +0000
ROA not after:            Mon 10 May 2027 17:06:52 +0000
asID:                     131657
IP address blocks:        2406:48c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl
                          rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:38:97:0c:e5:98:eb:de:9e:35:b0:b0:2d:92:9c:c0:43:80:3e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DC63487889E3FB8E7939478413D4C0BA2B7FA71
        Validity
            Not Before: May 11 17:01:52 2026 GMT
            Not After : May 10 17:06:52 2027 GMT
        Subject: CN=449DA7D526B837F20049615F54161BC9031463C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:2f:45:df:8f:c1:ff:e8:24:ab:d0:51:c1:
                    2e:df:78:7d:bc:8a:f0:35:6b:a5:c6:87:85:89:43:
                    74:06:a9:1a:d3:45:09:e4:16:74:86:17:ed:09:fe:
                    de:fb:ae:60:16:57:b5:a5:f2:95:7a:ab:31:6e:10:
                    29:f2:09:97:d2:97:c1:3b:a6:e5:df:0b:8c:b8:7a:
                    1c:45:05:73:11:04:f9:05:81:4b:05:cc:98:cb:ad:
                    f0:5f:58:11:cf:c8:20:62:ff:d8:35:80:52:ea:d1:
                    63:90:6b:1f:46:e0:0f:79:d5:b2:19:53:62:30:8d:
                    a5:c3:3c:fb:25:59:d8:eb:f2:6e:5c:a4:1b:68:03:
                    e6:01:57:53:35:78:3c:e1:eb:6a:de:e8:3f:a7:e3:
                    ea:67:a8:c7:bc:47:65:56:f2:3c:c4:7a:22:7a:4c:
                    15:e2:23:45:9d:fa:1e:2e:f9:84:ea:09:a8:43:b0:
                    c6:be:77:9c:49:73:8a:e3:d6:10:4a:91:9a:57:85:
                    ce:b3:f0:d6:35:9f:39:c9:8e:69:5c:e4:27:d8:3d:
                    60:73:a1:35:6f:56:c3:1b:13:2b:31:71:87:5a:61:
                    a2:87:b0:07:6c:8b:36:14:5b:53:c0:dd:03:1a:55:
                    6b:a0:20:cf:7a:ff:d3:84:8f:6b:a3:75:7c:5b:29:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9D:A7:D5:26:B8:37:F2:00:49:61:5F:54:16:1B:C9:03:14:63:C0
            X509v3 Authority Key Identifier:
                keyid:5D:C6:34:87:88:9E:3F:B8:E7:93:94:78:41:3D:4C:0B:A2:B7:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5DC63487889E3FB8E7939478413D4C0BA2B7FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HONGDA/0/323430363a343863303a3a2f33322d3332203d3e20313331363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:4d:b3:81:81:f6:27:f6:ee:a6:d0:fd:87:ad:71:d4:1e:b2:
         e5:6b:53:7e:d1:e6:3c:ce:ce:49:6a:12:a8:3e:14:ef:c4:0d:
         36:ab:ae:12:ed:3b:95:65:7b:c3:c2:58:74:13:c6:36:39:ad:
         f6:d1:0b:54:ed:87:37:b5:ea:f1:65:20:24:c0:e3:0d:ff:ef:
         31:6e:0d:01:5d:ed:3a:02:a5:13:26:ac:9e:bb:96:6c:20:4d:
         e2:98:1d:aa:8b:8a:53:71:5b:4f:86:93:6c:fe:f8:82:17:a6:
         84:eb:34:39:69:ad:71:77:7e:9e:bb:79:96:7c:c8:45:ad:a5:
         d3:23:4a:1c:3d:f1:23:52:58:21:52:6e:e4:fa:ac:d7:4b:53:
         d3:d2:46:d3:c8:36:61:54:d5:a2:fd:51:a2:47:9c:6c:38:12:
         26:03:ea:f7:1c:90:8c:25:66:71:22:39:05:b3:90:6c:df:1d:
         37:49:55:f1:3e:49:2b:59:6f:5d:ae:e5:2f:e0:98:c3:0e:3b:
         63:65:26:ed:f5:a0:0b:cd:f5:6e:f6:16:c7:e9:c0:a7:f8:c7:
         15:99:3a:73:88:b8:c9:71:e1:ad:78:59:03:96:ca:8c:74:56:
         8f:9e:f6:db:c1:4f:7c:d9:2c:31:3a:b1:94:a7:0f:cd:88:25:
         a8:30:8d:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 05:44:26 2026 by rpki-client