Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/NSSCYBER/0/323430363a623463303a3a2f33322d3332203d3e203633383938.roa
File:                     323430363a623463303a3a2f33322d3332203d3e203633383938.roa (raw, json)
Hash identifier:          YWptf+2qSV9npfR4/3yUmYD8apviaOrBsr9jvocDV+4=
Subject key identifier:   8A:E6:6F:E0:FD:A7:71:9A:32:55:17:9F:EB:42:83:4A:36:59:16:2D
Certificate issuer:       /CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
Certificate serial:       6048293AC97C28351E94DCD3C858E7DE0C7622E8
Authority key identifier: 7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/323430363a623463303a3a2f33322d3332203d3e203633383938.roa
Signing time:             Mon 11 May 2026 17:36:53 +0000
ROA not before:           Mon 11 May 2026 17:31:53 +0000
ROA not after:            Mon 10 May 2027 17:36:53 +0000
asID:                     63898
IP address blocks:        2406:b4c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl
                          rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:48:29:3a:c9:7c:28:35:1e:94:dc:d3:c8:58:e7:de:0c:76:22:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E4A0094054DD1AE4C3AA73976E554F191BC5230
        Validity
            Not Before: May 11 17:31:53 2026 GMT
            Not After : May 10 17:36:53 2027 GMT
        Subject: CN=8AE66FE0FDA7719A3255179FEB42834A3659162D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:8e:3f:91:8f:de:5a:b9:bb:d1:98:a5:d3:
                    9d:d6:34:63:0a:7e:62:ae:01:f3:3e:49:2e:c9:95:
                    2e:3a:8a:1f:b8:b1:9c:eb:21:24:52:82:28:00:94:
                    64:1e:05:15:5f:87:5f:19:22:3f:85:3a:1d:a4:f0:
                    1b:0c:1f:68:96:d4:2c:0a:00:be:4f:a5:fb:5a:0e:
                    ec:e0:dc:b8:b0:f0:47:5d:6e:9e:87:96:23:04:51:
                    c5:c5:66:2b:83:ec:3e:67:24:9f:21:c2:fb:80:df:
                    f5:51:f1:2b:cd:b7:b6:ae:c0:7b:e1:32:a7:8b:b7:
                    1d:72:8a:da:a4:12:3b:3f:0f:ea:c0:b4:99:60:ee:
                    30:14:00:84:17:17:6a:8f:3a:b7:20:f0:57:8b:0f:
                    3d:ab:64:b8:b7:ed:d1:7c:85:44:5e:40:51:91:42:
                    34:15:49:3e:94:9e:1b:38:50:25:bc:28:14:55:d9:
                    4b:c4:8a:30:d6:b1:60:51:90:b7:dd:0f:a2:95:5b:
                    cb:58:1f:25:89:07:69:40:32:a3:a0:5e:c0:f6:1d:
                    69:a7:bc:0f:61:a8:18:c9:a6:27:ba:f3:f1:19:58:
                    89:84:4f:cf:ff:01:4a:24:fa:23:3e:9c:56:44:50:
                    1e:99:44:4c:c9:5b:60:03:09:98:57:03:a6:48:63:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E6:6F:E0:FD:A7:71:9A:32:55:17:9F:EB:42:83:4A:36:59:16:2D
            X509v3 Authority Key Identifier:
                keyid:7E:4A:00:94:05:4D:D1:AE:4C:3A:A7:39:76:E5:54:F1:91:BC:52:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/7E4A0094054DD1AE4C3AA73976E554F191BC5230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7E4A0094054DD1AE4C3AA73976E554F191BC5230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSSCYBER/0/323430363a623463303a3a2f33322d3332203d3e203633383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:b4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:da:80:18:0a:c7:31:8a:65:40:7a:7d:43:f5:d9:86:40:b3:
         3d:da:7a:cd:64:4f:47:14:fa:9a:0a:af:6a:99:c2:33:d7:b2:
         b8:90:e5:05:6c:dc:e3:95:6c:7d:47:eb:07:3f:95:8c:ef:9a:
         1b:44:a1:d5:4a:be:d7:b7:bc:2e:e1:e4:d3:40:32:56:5b:90:
         15:c8:7b:d6:a1:5d:74:7c:cb:e6:7d:8c:db:f9:8e:7b:2a:2d:
         c2:f8:d1:6a:fc:c6:51:69:de:64:88:a9:d1:ad:2c:5d:64:75:
         ca:51:e4:71:51:9e:0f:58:1a:2c:9d:48:5a:ac:52:ab:60:ab:
         bd:c8:4d:09:06:c0:18:7b:8c:54:99:40:a7:c6:15:59:45:aa:
         6e:b9:81:b1:e8:13:46:81:a2:ef:6b:e5:2b:12:ee:cb:40:d7:
         e4:54:ee:48:b6:fc:bd:78:40:7b:7d:a3:3e:89:be:92:cd:fc:
         19:f8:2f:36:9d:5c:23:94:99:69:06:ab:31:d1:b9:6d:e5:cb:
         bb:2b:d2:a2:f6:bf:e9:81:ed:cd:59:6a:73:a9:64:7f:d6:37:
         93:60:24:ad:de:b2:18:48:a8:1e:3d:f9:e4:de:ba:bd:b2:f4:
         5b:33:6d:ec:e8:74:98:3b:6c:8d:3b:a0:05:76:19:0d:ff:a2:
         62:08:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:00 2026 by rpki-client