Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20313530373637.roa
File:                     323430313a356632303a3a2f33322d313237203d3e20313530373637.roa (raw, json)
Hash identifier:          Ej9DwCYeyuTCZ174KTX54oaUVIPTu6XH7JZcj5XxBwo=
Subject key identifier:   EF:E8:2F:FC:0A:40:8E:D0:F3:14:E9:BC:68:36:BD:B0:D4:E7:E8:24
Certificate issuer:       /CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
Certificate serial:       66E556BBD3F1340B690D906945108314E3E2A27C
Authority key identifier: 1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20313530373637.roa
Signing time:             Mon 11 May 2026 17:38:42 +0000
ROA not before:           Mon 11 May 2026 17:33:42 +0000
ROA not after:            Mon 10 May 2027 17:38:42 +0000
asID:                     150767
IP address blocks:        2401:5f20::/32 maxlen: 127
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl
                          rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e5:56:bb:d3:f1:34:0b:69:0d:90:69:45:10:83:14:e3:e2:a2:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A5DE0B5C72E02E2A2380CA27CEDA3329959C532
        Validity
            Not Before: May 11 17:33:42 2026 GMT
            Not After : May 10 17:38:42 2027 GMT
        Subject: CN=EFE82FFC0A408ED0F314E9BC6836BDB0D4E7E824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:21:1b:c7:74:5d:4a:b2:25:9d:b6:a6:d1:
                    9a:eb:56:a6:33:f2:23:57:df:80:71:72:cc:ef:a3:
                    4e:ac:eb:77:df:bc:e1:c6:a6:8d:85:fe:f6:2a:1a:
                    67:c6:31:66:a6:9d:4d:2a:ea:6e:53:23:87:40:1b:
                    34:d9:62:47:16:54:06:c7:26:32:7f:92:c5:12:e5:
                    c7:b7:33:af:fe:b1:b2:00:ea:2d:0e:6f:2c:0c:5b:
                    65:39:31:fd:1c:c7:7c:ed:65:09:95:79:bb:e8:c9:
                    df:63:91:8a:60:ee:b6:83:49:9f:34:c0:72:fb:3a:
                    9e:8f:d7:61:88:62:99:ab:db:fc:65:32:4f:ed:b5:
                    18:9e:ae:56:b0:6a:a8:0c:c3:cb:73:34:f0:c5:5d:
                    b0:d8:f3:73:58:4c:54:7c:f1:80:6b:71:09:c4:7e:
                    02:9a:1e:af:87:e5:b7:27:05:ad:58:36:65:9c:39:
                    2f:83:73:18:ad:70:19:ac:02:c9:94:41:79:c8:82:
                    af:fb:5e:d2:19:93:d6:7f:28:f6:0c:a7:27:df:a0:
                    4e:5e:b2:95:c6:4e:fc:a2:68:d0:6d:50:67:91:87:
                    b7:4a:b6:e7:32:c5:66:f8:e0:8b:aa:a9:d2:41:c2:
                    08:32:3e:8b:e2:6c:80:60:d8:b5:a2:eb:6c:bb:21:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E8:2F:FC:0A:40:8E:D0:F3:14:E9:BC:68:36:BD:B0:D4:E7:E8:24
            X509v3 Authority Key Identifier:
                keyid:1A:5D:E0:B5:C7:2E:02:E2:A2:38:0C:A2:7C:ED:A3:32:99:59:C5:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1A5DE0B5C72E02E2A2380CA27CEDA3329959C532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHIJICOLTD/0/323430313a356632303a3a2f33322d313237203d3e20313530373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:9c:d7:09:12:d5:d8:ae:3a:ee:f5:a4:73:00:20:d2:1a:a5:
         e7:a7:07:7a:7e:fd:2f:fc:65:33:78:8c:ea:a1:cf:df:ce:7b:
         6d:76:2a:02:42:6b:9d:5a:cb:f5:40:9b:82:ec:17:bc:f8:1f:
         10:79:05:1b:39:68:3d:a0:85:16:6d:10:ee:67:0e:ae:49:9d:
         df:ed:2b:7e:6e:6c:ac:f1:55:eb:04:c9:52:74:1d:12:4f:0f:
         ff:b4:e3:40:19:0c:f0:bc:e1:ff:cb:23:3a:29:13:cc:15:83:
         a8:fb:5a:be:51:1f:40:7a:c9:57:ab:ec:11:a7:c1:4c:2b:90:
         5d:c9:1c:21:63:11:1c:ee:f0:63:c0:45:cc:a2:4e:1e:db:ed:
         34:60:b1:c5:ef:8e:d6:7f:9d:ba:1f:1c:4d:36:70:97:55:d3:
         9c:37:2c:21:76:34:1d:25:94:65:6c:fd:70:90:f4:22:37:69:
         d4:6e:69:7f:db:fa:01:2b:de:e5:9d:87:d9:15:d3:06:47:a4:
         f2:d2:e5:2a:9f:60:2c:6d:4e:78:75:49:79:9a:52:3a:0a:f2:
         71:13:39:da:64:4c:52:8e:ad:4e:19:68:ef:a6:34:14:9a:c0:
         85:cb:86:a9:96:03:50:4a:62:93:46:c6:f9:df:3d:40:2e:67:
         70:29:9c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:54 2026 by rpki-client