Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/ISTVC/0/323430373a653463303a3a2f34382d3438203d3e20313532363134.roa
File:                     323430373a653463303a3a2f34382d3438203d3e20313532363134.roa (raw, json)
Hash identifier:          vgzFcwGEYe/SuHzv/bradPPbtlCxt1g9+kfxNVcgqL0=
Subject key identifier:   55:B3:23:19:CD:FB:28:20:08:A0:02:ED:93:6E:3F:A8:F2:F6:4E:BE
Certificate issuer:       /CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
Certificate serial:       0A0BEB3609953B7B92908533F1809606425B8283
Authority key identifier: 41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ISTVC/0/323430373a653463303a3a2f34382d3438203d3e20313532363134.roa
Signing time:             Mon 11 May 2026 17:58:21 +0000
ROA not before:           Mon 11 May 2026 17:53:21 +0000
ROA not after:            Mon 10 May 2027 17:58:21 +0000
asID:                     152614
IP address blocks:        2407:e4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl
                          rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0b:eb:36:09:95:3b:7b:92:90:85:33:f1:80:96:06:42:5b:82:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41BEB65668E1649EDE9728E4FF48591FA0C582BA
        Validity
            Not Before: May 11 17:53:21 2026 GMT
            Not After : May 10 17:58:21 2027 GMT
        Subject: CN=55B32319CDFB282008A002ED936E3FA8F2F64EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:46:ec:f3:f8:7f:7b:13:93:34:e0:05:b8:
                    89:0c:7b:d8:ba:48:0b:a6:bc:07:4f:42:b5:ae:13:
                    21:9d:22:a6:6c:c0:43:d8:9b:8c:eb:bb:9e:79:59:
                    ed:1f:76:ed:0e:13:28:a7:ff:0a:50:2b:13:59:fb:
                    c3:75:17:59:78:71:e8:46:2e:38:bd:6d:d5:6b:96:
                    fa:15:31:2d:a2:0f:6e:ef:45:d6:3c:1e:c1:33:78:
                    af:0a:7d:98:89:0e:4f:27:69:eb:12:e0:5a:85:19:
                    bd:50:33:ef:4f:0a:00:77:d6:a8:ec:97:9d:79:20:
                    a2:ec:d3:72:6d:27:6e:ca:11:32:75:d4:55:c6:25:
                    1e:e7:e5:b4:8b:bb:b9:cc:0b:a2:b1:ec:af:96:34:
                    d4:1d:10:1f:fb:bb:df:04:4a:56:33:a0:de:aa:4b:
                    e9:c0:6b:fc:01:95:18:9c:9e:57:79:f3:29:3c:ee:
                    5e:42:ea:b0:56:46:4d:60:be:b7:1f:9c:b1:0d:b8:
                    42:4c:2c:84:57:c0:5d:e8:73:d8:a3:d8:32:cc:28:
                    13:d6:c6:99:c5:74:dc:29:46:6a:4d:83:dd:4e:e5:
                    0d:ce:fb:2b:db:b2:cf:32:7c:70:ad:71:75:9b:31:
                    d3:50:ec:d2:2c:02:c7:fc:f7:fb:68:1c:24:72:ba:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B3:23:19:CD:FB:28:20:08:A0:02:ED:93:6E:3F:A8:F2:F6:4E:BE
            X509v3 Authority Key Identifier:
                keyid:41:BE:B6:56:68:E1:64:9E:DE:97:28:E4:FF:48:59:1F:A0:C5:82:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/41BEB65668E1649EDE9728E4FF48591FA0C582BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/41BEB65668E1649EDE9728E4FF48591FA0C582BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISTVC/0/323430373a653463303a3a2f34382d3438203d3e20313532363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:e4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:61:b7:bf:dd:f5:e5:98:ee:d7:f5:c1:f6:64:56:c4:98:
         60:65:f7:ab:9f:82:5c:3e:af:fe:7a:5c:be:c6:02:e9:82:a2:
         ad:25:ea:5a:05:7f:68:db:38:55:5b:47:93:89:3a:56:c3:b3:
         5a:4a:99:c6:b0:64:f2:ac:a5:af:76:fb:69:c8:3a:94:0e:a5:
         d6:7c:f1:cd:36:23:cd:4d:e7:87:2e:fb:5a:db:7c:d7:59:06:
         d4:d0:3d:45:33:3d:5a:69:ba:df:f9:aa:c2:6f:0a:77:d3:e6:
         70:0a:45:dd:7e:8e:f7:a7:1d:fc:70:e4:0d:4a:8e:a9:81:47:
         0c:c6:53:90:3c:6c:0e:19:70:2f:a4:c4:e7:4e:8f:e4:09:81:
         cf:fe:72:22:98:2f:2c:50:09:75:89:31:65:ad:69:1f:52:dd:
         9a:52:0a:29:df:f5:2f:1b:ad:7a:6b:73:fc:8b:d7:62:e2:b8:
         42:ea:ea:e3:03:92:f2:11:df:0f:37:71:b2:bc:76:cb:95:cd:
         db:a1:2b:9a:fe:6a:ba:8f:72:36:19:db:f9:53:7a:00:d9:37:
         17:81:42:94:aa:a9:90:17:4c:9e:2c:c7:95:27:a9:a5:f7:ce:
         d8:d0:42:f6:fa:05:e3:54:d9:58:bd:7d:98:f8:69:95:b5:7e:
         3c:ba:28:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:25:00 2026 by rpki-client