Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa
File:                     323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa (raw, json)
Hash identifier:          XBZlZFNoLpm2lmpxhtAjCP6zIGu3Dhyf7TwvCzJtd+8=
Subject key identifier:   E1:AA:AF:1C:BC:35:A3:28:FD:07:92:1B:35:25:4A:EE:9D:96:90:10
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       4195D5EC5182FFE240400D90839296BD18A2664B
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:11:36 +0000
ROA not before:           Mon 11 May 2026 17:06:36 +0000
ROA not after:            Mon 10 May 2027 17:11:36 +0000
asID:                     9678
IP address blocks:        2401:95c0:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:95:d5:ec:51:82:ff:e2:40:40:0d:90:83:92:96:bd:18:a2:66:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:06:36 2026 GMT
            Not After : May 10 17:11:36 2027 GMT
        Subject: CN=E1AAAF1CBC35A328FD07921B35254AEE9D969010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:2a:e0:6a:a1:39:00:3d:f5:f5:16:86:f6:
                    b3:b2:8a:b9:79:e2:6e:33:3d:7e:5f:fb:3a:06:f0:
                    8a:0b:58:56:be:4e:b4:17:da:67:c3:da:0a:f0:53:
                    7c:d4:a7:37:db:59:ff:85:d7:a7:31:db:ba:e7:cb:
                    ae:7f:ba:9b:c1:f7:53:16:20:16:8d:e0:17:15:6a:
                    0b:8b:f5:a3:9b:2c:d6:4b:e9:5d:d5:77:14:61:0f:
                    b8:5f:6d:47:c2:fa:49:be:d4:b7:50:71:9a:63:44:
                    28:fa:f3:12:b4:67:5b:82:5d:20:7c:f5:d6:15:4d:
                    d8:00:ec:a9:34:6e:f9:42:16:40:3e:ad:ea:f6:08:
                    72:42:de:2c:91:c2:10:47:5f:98:4e:61:cf:6d:49:
                    b4:74:8c:19:12:6a:3d:43:8a:e7:9b:37:ad:0c:6f:
                    69:55:ca:6c:41:3a:fa:72:1b:01:49:d8:b2:d5:88:
                    c4:6a:cb:aa:de:23:2d:96:4a:b1:a9:b5:35:88:19:
                    93:a9:24:0c:e1:ae:01:59:16:e8:9b:12:0d:7a:ad:
                    10:80:0b:c1:f1:9d:99:a8:79:ff:78:07:f1:b3:0f:
                    20:36:32:4e:d6:10:f8:d0:cd:f3:5a:be:66:69:d6:
                    18:1a:46:6b:78:ef:b4:e0:36:61:ca:3b:bf:6a:27:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:AF:1C:BC:35:A3:28:FD:07:92:1B:35:25:4A:EE:9D:96:90:10
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:95c0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         47:85:23:be:3b:ef:8e:46:6c:46:27:9b:f2:74:c9:7a:fd:37:
         4a:0e:ec:60:e3:17:f1:72:ad:50:b6:f3:36:97:ce:eb:d9:eb:
         b6:01:56:66:ef:64:7e:e9:56:c9:24:08:b4:fc:46:43:f0:24:
         3d:3f:dc:9c:17:9d:ce:88:48:f1:73:a4:22:99:bb:b4:fa:fc:
         c2:55:3e:da:99:a2:68:0f:15:fc:5b:02:91:83:5e:08:e1:4d:
         9f:4f:4f:96:86:c3:82:bf:f3:26:ff:2d:9b:12:e5:55:2b:66:
         84:15:e9:67:1b:18:99:4a:b3:3b:d8:39:56:f5:77:73:9e:46:
         c3:fa:a4:43:07:76:d3:c0:09:e8:48:8d:be:8a:4b:1b:4a:bc:
         2b:19:65:b2:99:85:5e:05:99:81:8c:73:65:f9:dd:1d:3f:e8:
         40:01:8d:3e:fd:17:05:95:4a:71:74:9e:08:5c:ae:03:6d:fa:
         cb:a7:09:7c:07:65:55:c2:d8:2b:f0:85:5e:26:2c:5a:c8:08:
         e3:8a:32:4a:7e:37:ce:db:39:b1:86:6d:38:c6:59:80:ec:b5:
         8a:84:91:fe:2c:ee:7d:90:01:18:62:92:84:b3:ff:f9:22:82:
         d8:99:45:9e:e3:58:2e:69:1f:d8:62:d6:f8:9c:fb:a4:b3:f3:
         5a:0c:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:40:02 2026 by rpki-client