Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/323430363a626663303a3a2f33322d3438203d3e203138303431.roa
File:                     323430363a626663303a3a2f33322d3438203d3e203138303431.roa (raw, json)
Hash identifier:          KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=
Subject key identifier:   E1:B0:73:01:C8:74:2A:24:A6:1C:41:16:71:2B:FA:A3:87:C1:5F:A1
Certificate issuer:       /CN=5677B1A39333120442A665B3D25D187209211BAE
Certificate serial:       494575BA2D4B7D84A370ABBA9334406B1E8FF07A
Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NEBULAX/0/323430363a626663303a3a2f33322d3438203d3e203138303431.roa
Signing time:             Mon 11 May 2026 17:26:32 +0000
ROA not before:           Mon 11 May 2026 17:21:32 +0000
ROA not after:            Mon 10 May 2027 17:26:32 +0000
asID:                     18041
IP address blocks:        2406:bfc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl
                          rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:45:75:ba:2d:4b:7d:84:a3:70:ab:ba:93:34:40:6b:1e:8f:f0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE
        Validity
            Not Before: May 11 17:21:32 2026 GMT
            Not After : May 10 17:26:32 2027 GMT
        Subject: CN=E1B07301C8742A24A61C4116712BFAA387C15FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:c2:9f:ca:d0:b8:d1:87:4f:86:85:64:60:
                    a8:f7:45:85:03:dc:2a:76:9f:2d:17:9f:4a:d7:f7:
                    55:94:95:5a:02:69:fd:f3:16:54:18:70:fb:3d:b0:
                    f3:4d:ea:44:6a:b2:62:16:b0:df:54:b6:83:82:e7:
                    cc:be:cb:05:88:1e:53:a7:eb:c4:32:15:4a:ad:98:
                    db:94:fe:4e:9b:ab:6e:71:fe:f2:83:1a:23:6d:91:
                    83:02:a4:62:5d:9a:3e:38:0d:79:1a:28:c4:31:fa:
                    e3:c7:0c:58:de:ad:f3:f7:93:ac:27:2c:df:40:07:
                    b9:9b:7e:6a:6e:50:21:4f:3e:bc:8b:4f:4a:00:01:
                    08:8e:bd:8d:f8:de:9a:92:d6:85:fb:2b:2d:48:5e:
                    d3:ca:f4:77:12:a2:29:8b:6e:be:f8:f4:77:b9:da:
                    11:38:0c:b5:c9:a5:d7:50:1b:3f:31:02:32:02:f2:
                    a7:b5:41:ef:02:69:56:29:37:46:73:03:99:23:f6:
                    9a:ec:8d:37:a3:15:89:d0:06:91:22:3e:3b:2d:a6:
                    c4:c9:59:0b:92:78:8c:8e:7c:31:00:2f:ac:f7:39:
                    a9:58:05:17:41:e0:67:29:e7:6a:a5:73:64:43:56:
                    30:57:74:5b:72:42:0b:b2:56:8e:e4:b7:7e:76:b2:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B0:73:01:C8:74:2A:24:A6:1C:41:16:71:2B:FA:A3:87:C1:5F:A1
            X509v3 Authority Key Identifier:
                keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/323430363a626663303a3a2f33322d3438203d3e203138303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bfc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:9d:e7:57:f4:42:3e:bf:3f:c8:3f:6f:b8:78:18:d6:d7:
         c5:22:d5:a8:13:f8:00:ea:5d:9e:3b:73:f0:77:d0:84:32:b5:
         85:2f:ac:73:c5:62:57:8f:ac:02:92:18:0d:f5:ba:1b:fc:7e:
         c6:fd:dc:6f:6f:7c:3b:79:da:9f:95:4e:b2:c6:18:be:41:c7:
         42:2d:77:44:c6:e0:f3:d8:33:1c:b0:ee:50:0b:7c:30:a4:91:
         6c:bf:d4:2f:73:bb:5c:36:b0:a1:c0:4f:6d:43:3e:96:1f:1e:
         dd:8e:9c:48:e4:ee:dd:f6:07:0b:47:0c:a9:fc:08:9a:80:41:
         a0:52:de:f7:7e:a7:ca:82:19:a5:c7:00:40:b7:92:af:39:03:
         a2:65:c3:91:de:c1:4d:82:29:c4:b6:43:f8:8f:fe:dd:8e:d1:
         fd:f6:ee:29:b6:f8:66:9d:54:d8:c8:f8:02:10:dd:c7:86:3a:
         e1:8e:2f:83:7c:84:fe:c8:0a:d0:30:de:cc:2f:7d:d0:97:c0:
         93:f9:41:eb:44:1f:17:5d:6c:f2:23:e9:a4:db:91:05:00:1b:
         e7:49:f3:45:8c:f9:24:ea:3e:b1:75:56:7d:9c:9c:66:d5:02:
         a4:22:32:82:33:dc:68:2c:f0:43:6d:8f:63:df:df:7e:1a:68:
         78:3e:86:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 06:04:34 2026 by rpki-client