Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGYITEA/0/323430363a333534303a3a2f33322d3438203d3e203137343135.roa
File:                     323430363a333534303a3a2f33322d3438203d3e203137343135.roa (raw, json)
Hash identifier:          G2X+WfU+tBJBJZpYR4+RLzZG6RZRyrTLmTCDwGT5O8M=
Subject key identifier:   54:8A:B5:E4:8D:75:27:AE:23:C2:FE:7F:44:2B:36:75:70:D2:51:AE
Certificate issuer:       /CN=EE3766CE5361179727468C239472B5A12921EA42
Certificate serial:       6C871CFD43C9413EB7364F39EC45E74AAD3F39E7
Authority key identifier: EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/323430363a333534303a3a2f33322d3438203d3e203137343135.roa
Signing time:             Mon 11 May 2026 17:07:35 +0000
ROA not before:           Mon 11 May 2026 17:02:35 +0000
ROA not after:            Mon 10 May 2027 17:07:35 +0000
asID:                     17415
IP address blocks:        2406:3540::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl
                          rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:1c:fd:43:c9:41:3e:b7:36:4f:39:ec:45:e7:4a:ad:3f:39:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3766CE5361179727468C239472B5A12921EA42
        Validity
            Not Before: May 11 17:02:35 2026 GMT
            Not After : May 10 17:07:35 2027 GMT
        Subject: CN=548AB5E48D7527AE23C2FE7F442B367570D251AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:2b:08:2a:88:de:4c:6d:d0:5d:49:bb:51:
                    58:a8:56:18:13:91:61:09:16:d7:8f:1f:e8:74:d5:
                    6a:cb:b9:10:32:85:e1:25:b6:ef:88:d7:36:24:f1:
                    22:38:06:1f:ce:bd:c8:4c:34:0d:a4:b8:87:7d:cb:
                    0c:88:53:e0:6f:52:d4:3c:01:aa:c4:a1:8b:a7:ac:
                    c1:92:85:9a:8a:46:d2:e3:a6:e9:9c:15:26:97:7e:
                    4d:73:3e:1f:ff:b9:d9:3c:8a:7d:34:75:d8:8a:79:
                    8d:7d:56:70:a0:6c:a3:f6:b1:1c:21:4b:4e:db:85:
                    87:92:95:e9:41:09:23:2b:42:f6:fc:12:f5:b6:17:
                    70:e8:91:01:1d:af:16:d5:ca:8a:14:b3:9b:f7:13:
                    d5:9d:24:f1:67:d8:a4:ed:11:04:f7:92:75:7e:e3:
                    c4:f7:90:9d:31:92:e1:c0:70:6b:91:54:38:01:d0:
                    71:ea:67:ea:ac:c6:b3:94:aa:b6:e8:f3:1f:c6:d9:
                    be:c1:e9:6f:d0:d0:21:07:0a:c6:c3:db:5e:73:3e:
                    f5:13:70:d7:da:2a:e0:3e:e0:13:7c:69:43:40:0d:
                    c7:ce:30:70:da:a6:18:99:f1:fd:17:ae:f5:c5:11:
                    26:75:a8:d5:24:18:a2:24:96:d2:09:cb:5d:d1:71:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8A:B5:E4:8D:75:27:AE:23:C2:FE:7F:44:2B:36:75:70:D2:51:AE
            X509v3 Authority Key Identifier:
                keyid:EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/323430363a333534303a3a2f33322d3438203d3e203137343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:1a:41:3d:9a:da:29:e9:c9:a7:b2:ef:a5:e8:f8:cd:ba:fd:
         9c:1f:eb:9e:bf:96:b4:4f:35:d6:f0:6c:57:4f:ce:34:3d:b7:
         9d:4e:28:00:39:9a:0d:8b:4c:6b:d0:dd:65:7b:bf:d8:b6:ce:
         94:97:d0:52:0b:70:e6:f3:39:34:ac:0c:0d:23:18:96:23:32:
         21:4d:65:2c:88:1b:e2:bb:5c:6e:3a:68:e7:2f:3b:c3:1a:c3:
         99:b7:bc:4d:01:33:a6:fb:2e:a9:73:a6:28:f8:60:0c:3c:d6:
         9c:b4:31:23:49:49:5f:fb:41:c5:76:11:df:5a:8c:1c:63:04:
         6a:b4:84:71:3a:9c:5d:ff:80:9e:99:94:ca:1c:9c:db:5b:67:
         02:9e:7c:8d:af:c0:ac:8e:a5:9e:71:5d:90:36:44:e4:7c:c5:
         f9:7d:e9:c8:4a:44:66:f8:50:ef:d5:81:b8:64:e8:0d:df:62:
         ad:ad:29:ab:17:80:d0:ab:e2:c8:ee:d7:95:cf:f7:04:3e:54:
         21:c8:26:84:d3:ec:63:87:a9:c1:d1:04:55:20:d3:07:0a:8e:
         1f:ad:bd:98:b4:a8:f7:76:11:cc:d7:c5:6d:7f:9d:32:0a:8a:
         c9:f8:c3:e2:2c:0d:fb:02:bc:40:8a:0d:e2:bd:ca:06:62:51:
         77:ed:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:07 2026 by rpki-client