Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa
File:                     323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa (raw, json)
Hash identifier:          jA7qImHOv7W5Hv0XzY9Mbd/TM/moy4CN/D4CXy9sCok=
Subject key identifier:   0B:1A:8C:A9:0A:EA:58:F5:7E:13:60:78:B6:68:AD:DE:82:DE:B1:39
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       6163E65B6C0B3FBE830E2F47C762B50B7D7E8F5F
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:37:41 +0000
ROA not before:           Mon 11 May 2026 17:32:41 +0000
ROA not after:            Mon 10 May 2027 17:37:41 +0000
asID:                     9678
IP address blocks:        2401:95c0:11ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:63:e6:5b:6c:0b:3f:be:83:0e:2f:47:c7:62:b5:0b:7d:7e:8f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:32:41 2026 GMT
            Not After : May 10 17:37:41 2027 GMT
        Subject: CN=0B1A8CA90AEA58F57E136078B668ADDE82DEB139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:50:ca:17:db:95:a0:07:02:91:4d:fa:d3:
                    2f:2f:1b:72:eb:63:b9:77:6a:b7:27:0f:a9:4d:36:
                    82:b3:a0:e7:40:d6:44:d4:34:e7:4c:ba:8e:5a:b3:
                    44:f5:2c:af:02:49:ac:a4:1d:4c:b2:42:15:a5:65:
                    ba:b6:3e:a5:f3:12:ca:99:f3:b6:a9:a3:68:c8:e2:
                    e3:13:53:fa:e1:0b:26:6d:57:33:57:a6:19:91:8b:
                    87:72:9f:c4:be:59:a5:68:74:81:f1:83:51:bd:7e:
                    a5:fe:c2:f7:6e:52:f8:29:e8:0c:dd:5f:6c:86:45:
                    c6:82:db:0d:f3:ff:20:3b:80:7e:1a:7c:b5:29:4c:
                    5d:8a:79:d1:fb:c6:09:9d:32:14:d6:25:af:76:43:
                    21:c3:2f:c3:0f:02:13:67:00:c5:c6:99:43:7b:a8:
                    77:91:a3:53:40:07:cd:a7:59:ed:b1:ed:2d:a6:d5:
                    96:3e:0e:df:51:11:2d:12:a2:e3:8f:3f:3c:de:05:
                    a7:5b:21:47:7e:8a:5c:9f:c7:ff:21:93:e6:ef:a7:
                    61:bf:e0:15:03:97:8e:c2:78:0c:a2:25:94:8f:13:
                    78:62:a4:89:39:11:6f:5e:60:17:14:b3:57:a9:45:
                    7e:53:e1:ed:4e:06:c7:98:50:97:d7:99:03:e4:e7:
                    e1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1A:8C:A9:0A:EA:58:F5:7E:13:60:78:B6:68:AD:DE:82:DE:B1:39
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:95c0:11ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:de:a6:34:d6:25:65:db:a2:87:1a:59:0f:93:7b:ab:21:21:
         72:44:24:91:3f:a9:7d:ae:a3:64:4e:4d:15:9b:14:94:9a:a5:
         b2:c0:1a:1c:ed:39:dd:43:77:e5:cb:f2:58:b3:57:3c:ea:e6:
         0f:58:6c:43:1d:21:d3:1e:c5:26:0b:fc:90:e2:10:42:37:66:
         2a:18:d7:e2:d8:29:27:4e:67:bf:c0:a4:1b:76:c0:cc:db:6a:
         7d:23:05:e4:82:13:c2:0a:84:e4:b2:71:d8:e0:a7:e5:57:b9:
         4f:73:9c:32:14:3b:00:0e:0b:b9:82:ba:99:33:bb:9e:e1:27:
         07:81:07:1f:e3:d8:fd:bb:a2:a8:7b:12:cb:6a:00:4c:eb:f9:
         a0:89:b8:e4:a8:10:ad:69:e0:7b:e7:12:dc:10:32:81:15:8d:
         50:6c:e9:fd:8a:a2:07:01:95:6d:73:8d:6a:a5:6a:c9:9f:18:
         df:2f:b9:77:cc:1b:3e:db:fa:a7:ca:cb:8d:ea:65:86:78:49:
         75:9e:2f:f2:bb:ba:a6:24:fc:ad:c8:c0:90:d7:ae:6a:10:ff:
         4e:0b:bf:18:67:45:83:b8:de:4d:02:e1:55:d1:a7:3f:af:34:
         7a:24:ca:13:b0:e0:08:b9:bc:ce:7d:c5:15:40:90:f2:d3:82:
         ff:df:68:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:48 2026 by rpki-client