Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa
File:                     323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa (raw, json)
Hash identifier:          pFKhsyWHL1AlVyOC8vWZezSMKe3dVHyGr7QtI3wqO1k=
Subject key identifier:   C5:05:78:40:FB:43:EC:62:B8:E1:A9:63:21:B4:40:D6:07:87:4D:76
Certificate issuer:       /CN=D82B42B328967B86227F939C5515F94575F4B06F
Certificate serial:       6CCD9D40FA9A245B5D87C77E4CAEC926AB878D1F
Authority key identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa
Signing time:             Mon 11 May 2026 17:18:49 +0000
ROA not before:           Mon 11 May 2026 17:13:49 +0000
ROA not after:            Mon 10 May 2027 17:18:49 +0000
asID:                     38047
IP address blocks:        2400:5ea0:852a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl
                          rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:cd:9d:40:fa:9a:24:5b:5d:87:c7:7e:4c:ae:c9:26:ab:87:8d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D82B42B328967B86227F939C5515F94575F4B06F
        Validity
            Not Before: May 11 17:13:49 2026 GMT
            Not After : May 10 17:18:49 2027 GMT
        Subject: CN=C5057840FB43EC62B8E1A96321B440D607874D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:47:df:fe:3b:7e:5d:a8:9f:d3:ae:92:a4:
                    1b:25:13:3b:57:f2:6f:0e:d6:c2:28:2a:ec:b8:71:
                    80:c1:67:92:03:d2:92:b7:36:46:8f:94:37:69:a5:
                    63:4b:bf:cd:60:b5:a2:e7:ea:9e:2f:45:4d:7d:77:
                    d7:b9:3c:fc:d7:a0:72:3d:0a:58:ad:01:ac:63:8c:
                    27:72:ef:5b:20:1c:d3:a6:6c:48:e9:bc:6b:c7:b1:
                    43:d1:0e:16:61:36:5c:ed:0f:93:cb:11:83:ec:f5:
                    70:1a:16:44:45:64:ce:ef:26:a7:b8:d2:6f:70:2a:
                    d7:72:72:26:db:45:94:56:1d:b9:ef:15:74:8e:9c:
                    c9:f1:bd:7f:68:1d:c1:40:24:44:17:36:7e:76:f7:
                    b5:5e:37:7c:18:81:b5:48:9a:dc:2e:a4:7b:6b:95:
                    c0:75:8a:54:31:c6:b3:51:96:1d:76:6a:e7:e8:83:
                    92:4a:b9:e6:88:a0:90:02:bc:17:66:bc:b1:5e:de:
                    fd:b8:c3:b4:87:cd:6b:80:24:95:b7:81:f7:48:e8:
                    b2:2f:ac:27:71:fc:6c:c4:7f:3b:57:69:25:79:78:
                    0a:32:50:23:db:19:8d:aa:9e:45:54:aa:a4:97:89:
                    cf:e7:fa:2b:71:aa:97:98:e2:2a:18:27:e3:b3:17:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:05:78:40:FB:43:EC:62:B8:E1:A9:63:21:B4:40:D6:07:87:4D:76
            X509v3 Authority Key Identifier:
                keyid:D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a383532613a3a2f34382d3438203d3e203338303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5ea0:852a::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:9f:ea:c0:08:95:b3:f1:80:87:84:5a:63:73:4a:1a:ab:8b:
         e1:0f:dd:56:e5:0a:f1:07:9c:b4:5e:90:a7:5e:85:91:ff:5b:
         6a:1d:b4:ef:84:b4:c1:09:e4:e8:fc:35:b4:6f:31:42:b4:d2:
         1b:4b:f7:f1:0d:e6:45:9e:e4:db:3c:ad:42:f7:21:1b:12:2e:
         50:23:34:6c:19:e3:20:7f:a9:c6:16:e2:ac:64:e3:fe:fc:ea:
         ba:d6:8f:bd:1c:ae:0b:f7:35:a7:8c:0a:c8:ed:12:a9:b2:10:
         a8:be:81:f9:c0:3a:6f:2d:c3:3c:a4:32:4d:b6:56:25:c9:ca:
         4c:07:c9:94:23:6a:df:ce:4b:93:cd:14:7d:7a:a4:30:ed:44:
         c4:c6:1d:0c:a4:d8:c8:6d:f6:b5:d7:82:7f:e3:47:33:95:dc:
         12:80:82:02:cd:36:ee:f2:b1:3b:33:4c:02:02:97:4d:35:e9:
         9e:2a:b4:86:c3:c6:eb:03:50:b5:53:b4:25:a1:01:57:96:98:
         11:b0:cd:a3:13:85:34:10:e2:21:97:de:f5:61:b4:ed:6e:79:
         f7:0d:27:f8:2f:59:62:61:cb:36:e2:8b:69:ce:6a:0d:5c:3c:
         ef:56:bf:a2:eb:bd:7a:d6:7f:bb:4a:f6:fb:b4:1c:81:59:aa:
         76:7d:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:08 2026 by rpki-client