Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa
File:                     323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa (raw, json)
Hash identifier:          coQ2mjXXFKGhITP1RevV/iXW3F6uOj+d2bCuydrqi38=
Subject key identifier:   E0:23:16:AA:09:BD:68:F1:BA:60:CE:28:20:76:38:8E:66:49:81:D5
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       3E85F64ED08A83D8E953A34CC9AD5DF5F562FC44
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:11:37 +0000
ROA not before:           Mon 11 May 2026 17:06:37 +0000
ROA not after:            Mon 10 May 2027 17:11:37 +0000
asID:                     9678
IP address blocks:        2401:95c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:85:f6:4e:d0:8a:83:d8:e9:53:a3:4c:c9:ad:5d:f5:f5:62:fc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:06:37 2026 GMT
            Not After : May 10 17:11:37 2027 GMT
        Subject: CN=E02316AA09BD68F1BA60CE282076388E664981D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d2:2d:2f:8d:b7:ea:2b:5e:98:4c:d0:c2:b5:
                    4b:2f:b7:bb:ce:3e:c3:da:04:53:0c:e5:11:20:a6:
                    41:b8:f1:e0:e2:ba:c3:bc:62:93:d3:ff:9c:0c:6d:
                    e0:68:ce:93:9c:5d:42:65:50:de:8b:97:28:70:26:
                    0d:55:12:6a:26:b5:9f:9a:8c:73:20:ca:18:ac:01:
                    47:24:22:af:49:db:5f:a0:e9:ab:8c:77:1a:f0:1c:
                    63:cc:80:2a:f9:66:57:0e:9a:67:2b:03:49:46:dc:
                    c3:14:de:1e:bc:82:62:b4:5f:2d:78:fa:5e:d4:ec:
                    8b:9f:1c:4a:07:ee:6d:92:a5:a4:5c:47:7d:59:21:
                    35:c9:2d:d5:d4:16:74:31:39:86:43:81:c2:7e:2e:
                    b1:50:59:f7:7f:87:97:4d:9d:f1:4a:d3:e3:a0:04:
                    a7:41:ca:e2:be:c4:bb:e2:6d:8f:52:db:62:a8:b5:
                    54:c0:88:32:df:c1:f6:46:0c:f9:b8:f7:73:16:ed:
                    81:e8:62:cc:f2:f1:33:b5:f2:d2:b1:e7:e8:60:6e:
                    26:d8:2e:2f:2d:85:44:90:10:e0:44:cc:6e:38:57:
                    74:b3:af:b6:2a:47:57:b7:71:f2:8a:eb:71:80:63:
                    06:1e:ca:61:c7:fb:3a:b9:31:5f:74:a1:2a:41:a3:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:16:AA:09:BD:68:F1:BA:60:CE:28:20:76:38:8E:66:49:81:D5
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:95c0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:93:71:05:dc:67:6c:07:c8:11:ce:4c:64:12:75:1d:46:d8:
         ee:6f:91:e6:42:00:f3:09:7f:91:93:7a:6e:1f:61:ff:1b:8b:
         5f:9b:4c:63:94:c8:69:72:bf:6f:52:a9:e3:8c:7e:00:61:f3:
         16:5c:41:eb:dc:59:11:27:53:a9:03:cd:6d:22:aa:81:31:50:
         5a:c2:bc:52:39:f1:1c:26:43:cc:7c:9a:c4:8e:59:87:5a:26:
         44:3a:39:4a:26:af:59:c9:c9:a0:d1:4f:8e:00:f9:3e:b7:46:
         59:c8:68:5d:b1:f5:0a:e1:cc:91:bf:da:9a:c6:0f:7e:e6:db:
         d0:37:fa:e8:11:67:7c:d5:aa:a6:88:c4:8c:da:e1:ff:1b:04:
         44:d5:cb:dd:1f:38:f8:df:f4:85:52:e0:75:51:ed:3d:be:9d:
         47:28:97:bb:25:ca:bf:1b:63:27:8d:1d:3d:c1:89:50:d1:d5:
         1d:86:a9:6a:27:9c:a9:94:08:4c:15:f9:e7:02:e6:7e:30:36:
         b5:c9:2c:89:f0:07:bd:19:d9:9a:cd:33:94:9e:ba:b4:ba:90:
         08:a4:f3:b7:54:16:a4:61:8f:41:a4:e3:66:7d:77:e5:86:39:
         3a:9d:9b:45:e6:88:25:f6:99:89:28:cb:8b:c7:e2:c4:2c:f2:
         97:69:f3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:15 2026 by rpki-client