Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGYITEA/0/323430363a333534303a666666633a3a2f34362d3438203d3e20313331363832.roa
File:                     323430363a333534303a666666633a3a2f34362d3438203d3e20313331363832.roa (raw, json)
Hash identifier:          racegZxERxWuUJ5wbuao4unjinJKSxy0Ow3wFhKzUf4=
Subject key identifier:   A0:EA:34:0B:1A:54:DA:1A:72:1B:BC:B7:B2:7C:23:E1:8E:91:EB:3C
Certificate issuer:       /CN=EE3766CE5361179727468C239472B5A12921EA42
Certificate serial:       78C5CE17FB4487CB2A150E6D5C490B11821EB1DC
Authority key identifier: EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/323430363a333534303a666666633a3a2f34362d3438203d3e20313331363832.roa
Signing time:             Mon 11 May 2026 17:10:25 +0000
ROA not before:           Mon 11 May 2026 17:05:25 +0000
ROA not after:            Mon 10 May 2027 17:10:25 +0000
asID:                     131682
IP address blocks:        2406:3540:fffc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl
                          rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c5:ce:17:fb:44:87:cb:2a:15:0e:6d:5c:49:0b:11:82:1e:b1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE3766CE5361179727468C239472B5A12921EA42
        Validity
            Not Before: May 11 17:05:25 2026 GMT
            Not After : May 10 17:10:25 2027 GMT
        Subject: CN=A0EA340B1A54DA1A721BBCB7B27C23E18E91EB3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:24:54:9e:e5:a6:cd:6b:3a:b2:23:eb:8e:
                    61:d9:55:02:58:b8:3e:5e:bc:a3:4a:a4:71:86:cd:
                    b6:8f:95:b5:dd:76:bb:13:4f:b8:e6:bb:34:11:fa:
                    da:1b:79:3f:2e:28:71:d9:59:34:94:5d:2a:52:e6:
                    da:59:5c:b7:ad:05:72:24:be:c8:4a:4d:22:45:35:
                    76:f3:1f:5b:08:d5:03:0b:6b:0a:91:be:ed:7a:e0:
                    11:39:ea:c3:8e:7b:54:b4:c0:cd:7d:12:91:21:ad:
                    69:18:6e:19:6a:86:9c:85:48:b8:7f:2e:7d:4f:32:
                    7c:ef:54:37:e0:d2:66:55:84:bc:0b:3f:f8:c0:3f:
                    60:db:20:a6:33:83:df:dd:5d:a4:e2:0e:c7:e6:81:
                    9e:19:31:e7:f5:fd:be:32:ac:66:06:ba:7e:e4:4b:
                    56:f1:2c:4d:2e:7d:2e:6a:54:a6:11:d6:50:34:33:
                    94:d3:1f:ad:74:66:23:91:44:f5:60:eb:f7:1e:f4:
                    00:ae:56:53:e2:a6:eb:62:b7:f1:9b:e5:c9:1e:f6:
                    46:71:d5:9d:10:ec:d0:5e:36:fb:08:ad:2e:4d:21:
                    0b:8b:0d:45:62:64:84:5a:0c:b2:61:7c:c6:7f:08:
                    49:57:7c:81:99:a5:2f:60:1e:a7:ad:68:80:53:2c:
                    92:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EA:34:0B:1A:54:DA:1A:72:1B:BC:B7:B2:7C:23:E1:8E:91:EB:3C
            X509v3 Authority Key Identifier:
                keyid:EE:37:66:CE:53:61:17:97:27:46:8C:23:94:72:B5:A1:29:21:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/EE3766CE5361179727468C239472B5A12921EA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/EE3766CE5361179727468C239472B5A12921EA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGYITEA/0/323430363a333534303a666666633a3a2f34362d3438203d3e20313331363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3540:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         3c:f1:f7:84:52:3a:64:3b:78:3f:f4:72:be:f8:74:2c:e0:e0:
         b2:28:fa:e2:6c:ca:6b:2b:6d:2a:89:ac:73:23:1f:e8:b0:6b:
         f7:f4:c5:5d:66:6f:2b:86:f6:fc:b7:36:5e:83:90:48:02:b4:
         8a:3b:17:fd:d1:3e:6d:30:51:8a:7e:3d:dc:e3:02:e4:df:55:
         61:65:99:f9:8e:97:8f:02:7c:c7:d3:4b:59:09:27:e0:f1:82:
         49:b9:a5:22:1c:00:f4:e4:89:83:4a:73:a9:bd:95:ae:c5:26:
         72:67:86:20:16:5d:01:80:15:78:c3:1b:21:c0:36:56:93:50:
         82:f3:47:cd:d0:d2:6b:2f:f7:73:dc:de:48:39:4c:df:eb:bd:
         31:bf:aa:22:d7:0f:c6:03:05:60:14:05:06:f7:f8:00:d2:f3:
         ba:29:1e:38:6b:32:b5:53:8a:39:27:e7:4f:06:e0:3d:c5:69:
         d3:a3:43:0a:72:5c:fc:2b:19:13:62:c4:d5:6d:5f:5c:fd:f6:
         f9:01:e1:c5:10:53:7a:02:60:e4:a7:dd:57:44:3f:a8:c9:d4:
         a3:26:b6:8c:b2:b4:b5:9c:a9:ca:bf:7a:c4:e0:45:34:88:3d:
         4d:44:0b:8a:fa:97:a3:aa:b3:5e:48:92:18:14:db:30:4a:e7:
         ca:4b:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:56 2026 by rpki-client