Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa
File:                     323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa (raw, json)
Hash identifier:          U2WVeAZZY+wJAf5675nkBmBhxC/RUJdThWhD5OYfiNQ=
Subject key identifier:   16:01:0B:8C:C2:A0:01:C4:00:FD:22:16:AC:46:CE:3E:85:FC:19:83
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       55D4D56FA624DA24FA3B79C3C32158CF34224436
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa
Signing time:             Mon 11 May 2026 17:11:37 +0000
ROA not before:           Mon 11 May 2026 17:06:37 +0000
ROA not after:            Mon 10 May 2027 17:11:37 +0000
asID:                     9678
IP address blocks:        2401:95c0:2d03::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl
                          rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d4:d5:6f:a6:24:da:24:fa:3b:79:c3:c3:21:58:cf:34:22:44:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:06:37 2026 GMT
            Not After : May 10 17:11:37 2027 GMT
        Subject: CN=16010B8CC2A001C400FD2216AC46CE3E85FC1983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:3e:7a:a6:58:fe:e0:cb:cd:b1:e5:da:ef:
                    ad:11:2e:f9:5c:8e:aa:80:fe:f7:2f:90:3e:b4:5d:
                    e0:e7:18:24:07:b7:de:ea:1a:2e:13:80:96:5e:8f:
                    8f:e4:7a:0f:39:50:fb:09:78:06:d3:71:13:24:7c:
                    48:bf:32:21:ea:c0:85:d2:4a:80:c7:3d:d9:d2:9a:
                    2e:94:a6:0e:21:5b:34:98:be:1f:41:8d:39:f9:d5:
                    b0:e8:17:ed:c9:dd:b2:b9:e6:c8:50:b7:e6:0d:52:
                    1f:47:a4:58:4b:0e:46:28:04:0c:df:cb:67:86:44:
                    ea:57:4c:05:b4:11:7d:ea:82:6f:f3:ed:16:5a:af:
                    56:8c:7f:1e:fa:88:c6:7b:8e:a8:1f:4d:b9:f4:7d:
                    e4:99:c9:8d:09:50:23:b9:75:6f:ac:18:e2:89:a9:
                    5f:94:dc:5c:09:e8:2a:68:72:e2:6e:9a:5f:e0:11:
                    3f:8c:22:22:ad:06:6c:66:95:a5:30:29:1c:6d:e6:
                    80:50:81:2f:2d:6f:5f:19:5d:d6:33:48:a2:a2:9e:
                    e6:93:95:14:91:6a:25:bf:07:6c:dd:07:43:26:74:
                    29:62:1f:59:85:8a:c1:70:84:a0:73:5f:b1:da:04:
                    ef:55:60:aa:13:3d:e3:45:61:53:ff:b3:62:c1:eb:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:01:0B:8C:C2:A0:01:C4:00:FD:22:16:AC:46:CE:3E:85:FC:19:83
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:95c0:2d03::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:99:16:7f:bf:be:0d:34:8d:66:13:5b:55:42:a6:32:03:82:
         0a:d4:7d:f0:52:f0:d7:8a:15:98:51:fa:c5:4e:27:b3:0b:52:
         6b:da:ae:72:fc:8d:bb:76:b7:99:be:bf:a4:9e:60:a0:e9:9c:
         08:ef:e8:90:8d:27:47:28:7f:0b:88:c8:73:af:bd:ac:fe:81:
         15:6d:98:5d:58:3d:e3:81:7a:0d:c9:f2:07:38:af:ff:88:83:
         a6:68:d2:a6:f6:f0:0b:17:1e:71:99:c0:d1:73:e6:b6:e2:f7:
         a4:75:e5:3b:bc:58:38:47:86:94:31:61:5c:ef:37:43:79:3e:
         af:3c:9c:9e:30:c7:1c:a2:19:38:55:69:08:ae:78:83:cf:2c:
         58:f0:45:10:91:9b:c0:9e:41:dc:e7:14:9d:56:04:da:a5:5d:
         48:e2:14:67:f4:80:2e:30:b8:57:2d:60:d0:fd:5a:8e:ff:f0:
         4c:32:19:5e:a8:58:df:fe:b7:81:ee:f0:d5:9d:a8:71:3a:d5:
         ea:66:70:1b:67:0c:c2:f8:03:a3:74:a9:0d:c7:7d:91:63:ad:
         10:32:37:68:ce:51:67:5d:c3:f8:53:7e:38:03:1f:3a:47:56:
         21:44:15:01:2b:e3:e7:eb:5b:33:4f:77:02:31:88:c0:a7:a1:
         38:36:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:01 2026 by rpki-client