Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHINENET/0/323430303a666536303a3a2f33322d3634203d3e20313530373730.roa
File:                     323430303a666536303a3a2f33322d3634203d3e20313530373730.roa (raw, json)
Hash identifier:          EhLj+m0MkuzmmwvkxkJNFTonhVd1K264TpTCs4vZ774=
Subject key identifier:   CD:EF:2A:4B:EC:11:0B:D2:AE:F3:B5:96:CC:4B:C9:F4:14:9D:DE:44
Certificate issuer:       /CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
Certificate serial:       296A964D06C2A28E89DB60800575C6FC57F095F2
Authority key identifier: 98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINENET/0/323430303a666536303a3a2f33322d3634203d3e20313530373730.roa
Signing time:             Mon 11 May 2026 17:36:18 +0000
ROA not before:           Mon 11 May 2026 17:31:18 +0000
ROA not after:            Mon 10 May 2027 17:36:18 +0000
asID:                     150770
IP address blocks:        2400:fe60::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl
                          rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6a:96:4d:06:c2:a2:8e:89:db:60:80:05:75:c6:fc:57:f0:95:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=980832FF83BBFCD8BD442D9C3DDCD89764C1D101
        Validity
            Not Before: May 11 17:31:18 2026 GMT
            Not After : May 10 17:36:18 2027 GMT
        Subject: CN=CDEF2A4BEC110BD2AEF3B596CC4BC9F4149DDE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e6:7f:fc:b1:fc:2e:d5:e7:c6:30:2d:da:ba:
                    f8:c6:29:a3:3b:50:9a:80:73:ad:88:a5:5a:63:f0:
                    77:10:b1:39:5b:e0:ad:46:76:18:e5:c8:eb:27:52:
                    d9:2b:b5:de:23:1a:73:5f:93:19:a6:2f:dc:4f:e5:
                    4b:3e:af:71:43:9c:97:17:e5:90:ad:d5:6a:6e:27:
                    74:fd:59:99:b1:d9:75:6a:b2:32:0a:3d:ec:59:d8:
                    84:4a:07:23:fc:3b:8b:ec:a0:14:1b:61:86:1d:6c:
                    58:75:e8:3d:56:97:27:ad:e0:c7:98:7a:59:23:47:
                    06:8d:78:9b:12:47:5f:57:b8:c1:56:ec:9c:71:01:
                    8c:96:0c:01:a5:cf:ab:61:34:09:de:aa:b9:88:de:
                    2d:81:58:ad:28:55:b0:0f:d9:59:db:f6:6d:ca:bf:
                    42:71:cf:d4:01:dd:c8:19:a9:f9:5b:00:c0:b2:c5:
                    98:13:1b:8f:3d:8f:4d:74:66:f7:92:c9:7b:76:5c:
                    64:37:03:ff:7c:58:ea:ba:f9:f1:ce:ce:2e:ce:5f:
                    7b:e1:9a:91:2a:7d:17:17:f2:fa:7f:78:7f:b6:dd:
                    e8:96:4c:79:10:79:6e:b4:79:10:ae:1c:9b:e7:55:
                    64:4b:cf:da:7c:2e:0e:4a:21:9b:72:09:3a:51:d3:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:2A:4B:EC:11:0B:D2:AE:F3:B5:96:CC:4B:C9:F4:14:9D:DE:44
            X509v3 Authority Key Identifier:
                keyid:98:08:32:FF:83:BB:FC:D8:BD:44:2D:9C:3D:DC:D8:97:64:C1:D1:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/980832FF83BBFCD8BD442D9C3DDCD89764C1D101.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINENET/0/323430303a666536303a3a2f33322d3634203d3e20313530373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:fe60::/32

    Signature Algorithm: sha256WithRSAEncryption
         d8:a0:31:4d:79:62:56:97:4f:18:3b:78:ea:48:9b:af:06:5a:
         e0:f5:bc:20:05:ea:0c:c5:b1:e0:86:b8:0c:20:b3:8e:1f:50:
         b0:50:1a:a2:70:ec:a8:3c:e0:af:e6:bf:cd:22:f9:1b:90:9b:
         cd:5b:87:20:ac:22:f4:1f:7f:e5:01:cc:e2:82:f7:91:b7:67:
         87:dd:05:be:ad:05:7e:85:fb:f2:5a:2f:2f:72:a7:a3:fa:8c:
         40:fe:44:a5:8f:7e:bc:4e:68:53:45:ad:e0:67:97:57:1c:b5:
         47:1c:9b:1d:a8:17:61:05:d3:58:24:4d:19:64:82:8b:0a:93:
         cb:71:86:be:91:89:e5:4e:69:9f:b4:42:3a:46:6d:1e:ec:e1:
         03:a1:ac:57:1b:ad:c2:7e:f5:aa:53:b3:fd:74:7c:db:17:b7:
         42:9c:94:9d:31:38:1a:a6:1a:57:80:c1:9c:2f:82:52:2e:4f:
         2c:a4:7c:35:45:5d:a9:b3:59:1c:a4:dd:df:12:0c:e1:05:1c:
         8f:e7:1a:c1:27:23:91:b8:d2:02:24:52:2c:1f:e8:63:65:93:
         13:0d:a9:1a:9d:92:0c:24:dd:a2:53:fd:e4:27:c6:16:10:e8:
         74:ee:e7:49:77:a5:09:f4:c4:db:f8:f0:3d:91:d0:f7:fa:e6:
         a1:52:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:34 2026 by rpki-client