Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/INFORICH/0/323430363a336134303a3a2f33322d3634203d3e20313331363737.roa
File:                     323430363a336134303a3a2f33322d3634203d3e20313331363737.roa (raw, json)
Hash identifier:          txtzobgmB7pj9lhrJaa/eqUwxXSWt55r+2LkQvqXKQI=
Subject key identifier:   F2:81:0F:DA:9C:8C:39:BC:9B:57:C5:48:8A:DD:6D:6A:9C:5F:55:00
Certificate issuer:       /CN=2246FA22721287A616226553235161DB0C06A86A
Certificate serial:       1CEB395DB488085DAD163D8E8867181EBF0295C5
Authority key identifier: 22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/INFORICH/0/323430363a336134303a3a2f33322d3634203d3e20313331363737.roa
Signing time:             Mon 11 May 2026 17:06:59 +0000
ROA not before:           Mon 11 May 2026 17:01:59 +0000
ROA not after:            Mon 10 May 2027 17:06:59 +0000
asID:                     131677
IP address blocks:        2406:3a40::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl
                          rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:39:5d:b4:88:08:5d:ad:16:3d:8e:88:67:18:1e:bf:02:95:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2246FA22721287A616226553235161DB0C06A86A
        Validity
            Not Before: May 11 17:01:59 2026 GMT
            Not After : May 10 17:06:59 2027 GMT
        Subject: CN=F2810FDA9C8C39BC9B57C5488ADD6D6A9C5F5500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e6:52:47:8b:5e:34:4c:d1:2c:cb:7b:8b:92:
                    76:bc:7e:af:b3:31:bc:a0:a3:ca:c5:df:3a:f8:b7:
                    61:0a:3d:94:f8:c6:28:79:22:ab:fe:10:97:93:29:
                    9e:56:5b:7c:ca:f8:3f:ba:a6:08:f9:1b:92:3d:08:
                    79:a9:c6:d6:bc:ac:61:59:f0:7a:21:49:47:f9:d1:
                    10:fa:de:49:34:c7:e5:03:20:31:da:1b:a0:1c:d0:
                    90:64:06:79:d5:8e:97:70:01:65:00:2e:3d:17:5f:
                    9f:58:d1:a1:cf:a0:5b:ae:09:86:57:17:62:b6:a1:
                    b6:fa:e4:fe:84:80:d4:36:1b:85:72:28:b5:42:89:
                    00:74:7e:32:4f:9c:d5:48:b2:15:ce:9f:c7:6f:90:
                    8b:70:6a:98:ba:fe:96:b1:3b:48:e1:3b:09:a5:46:
                    89:bc:fa:6d:f6:24:58:39:60:8c:a8:96:6d:ed:e9:
                    d8:df:08:25:a7:72:bc:34:67:23:c1:bd:67:e2:c0:
                    1d:e1:51:1b:89:20:c2:b8:00:fa:50:89:ab:d8:0c:
                    3d:a6:e3:0b:50:bd:f4:b7:77:ba:89:97:23:20:d4:
                    de:82:2c:45:89:95:56:8f:72:f4:86:30:1f:82:a9:
                    e0:c0:0a:b4:a8:a6:80:65:a3:09:7a:2b:64:16:18:
                    ed:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:0F:DA:9C:8C:39:BC:9B:57:C5:48:8A:DD:6D:6A:9C:5F:55:00
            X509v3 Authority Key Identifier:
                keyid:22:46:FA:22:72:12:87:A6:16:22:65:53:23:51:61:DB:0C:06:A8:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/2246FA22721287A616226553235161DB0C06A86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2246FA22721287A616226553235161DB0C06A86A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INFORICH/0/323430363a336134303a3a2f33322d3634203d3e20313331363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:e0:7d:45:11:e7:5a:65:21:df:3d:ae:65:cd:94:d5:37:
         41:7b:44:66:0d:15:bb:66:f5:17:9b:69:ac:9d:4d:ac:e5:21:
         01:1b:74:b6:4e:20:a1:45:1c:b5:8b:76:ea:08:77:8e:22:fe:
         69:f2:d0:a9:b4:e8:b0:bf:94:05:4a:39:aa:f7:3e:f5:2b:6b:
         18:3f:aa:38:45:0b:4a:32:9c:c3:1b:50:f4:36:35:6c:53:c8:
         7b:7d:c3:a2:e1:4f:84:65:ae:b2:8f:3d:dd:60:0e:bf:51:b0:
         1e:04:9c:ee:07:4b:c3:44:ab:52:cd:fd:e9:f0:1e:a3:27:a6:
         7d:d1:ab:9f:46:b9:b7:15:ff:d1:55:37:ec:2b:8b:94:1e:21:
         41:92:3f:73:d9:bf:ca:be:24:1b:aa:5e:d9:03:e3:42:6f:11:
         c2:90:3e:7f:c9:3d:ec:b2:00:61:01:2e:dd:5b:90:37:3c:39:
         e1:12:29:38:50:3b:62:2f:33:c7:48:a1:87:06:be:74:8b:f3:
         74:7a:0c:17:dc:58:6d:31:49:eb:06:cd:0a:6e:16:10:e1:3a:
         31:f8:37:0e:24:c5:ef:64:4f:b6:80:b3:a4:fc:f5:f3:4a:9d:
         cc:10:8b:a6:06:ec:7f:21:69:48:11:e8:70:19:f3:74:4d:78:
         23:8a:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:00 2026 by rpki-client